Scope & Impact

We’re seeking a technical Associate Director to own and evolve our Microsoft platform—Entra ID/Azure AD, M365 Core (Exchange Online, Teams), Power Platform—and Microsoft licensing. This role will drive a hard pivot from clickops to platform-as-code(Git-first, policy-as-code, pipelines, drift detection). You’ll partner with Security (Intune, Defender, Purview) and Workplace Technology (Service Desk) to define the right operating model.

This is a player-coach role: you’ll design, build, review PRs, lead incidents, manage outcomes, and grow a high-performing team.

What You’ll Own and Deliver

• Identity & Access (Entra ID/Azure AD): Modern identity posture (SSO, CA, PIM, SCIM, app registration/consent hygiene) with strong change control and telemetry.

• M365 Core (Exchange & Teams): Guardrails, transport hygiene (SPF/DKIM/DMARC), Teams policies, published SLOs, golden dashboards.

• Power Platform: Environment strategy, DLP guardrails, ALM pipelines, maker enablement, connector governance, reliability for critical apps/flows.

• Microsoft Licensing: EA strategy, renewals, SKU optimization, cost controls, allocation hygiene, Finance reporting.

• M365 Training Portal: Product roadmap, curriculum, governance, adoption; LMS/Viva integration; SharePoint partnership.

• Automation & IaC: GitLab pipelines, Terraform (AzureAD/M365), Graph/PowerShell tooling, drift detection with auto-remediation.

• Reliability & Incidents: Incident command, RCA/postmortem program, SLO/error budget ownership.

• Team Development: Hiring pipeline, onboarding, coaching, growth plans, and building a team that ships platforms as code.

Not in scope: SharePoint architecture (coordinate only).

12-Month Outcomes

• Automation:?90% of configuration managed as code, high-risk drift auto-remediated.

• Clickops Reduction:?80% reduction in portal-only changes.

• Reliability: SLOs published; >99.9% availability; <4h MTTR for P1s; RCAs completed with fixes.

• Power Platform: DLP enforced, ALM live, safe maker program with zero critical violations.

• Licensing: 8–12% YoY savings, ?98% allocation accuracy, clean audit posture.

• M365 Training Portal:?60% monthly active employees, ?70% curriculum completion, CSAT ?4.3/5.

• Team Development: Skills matrix in place; quarterly growth conversations; ?90% critical skills coverage.

Day-to-Day

• Lead roadmap, standards, and team coaching while staying hands-on.

• Author Terraform modules, Graph/PowerShell tooling, enforce policy-as-code.

• Build GitLab CI/CD for compliance, promotion, drift detection, and auto-remediation.

• Publish SLO dashboards; lead incident response and RCA quality.

• Manage licensing end-to-end: forecasting, renewals, analytics, cost savings.

• Own training portal: roadmap, governance, analytics, adoption plays.

• Define operating model with Security and Workplace Tech; integrate with Service Desk.

What Great Looks Like (Must-Haves)

• Proven platform leadership with deep, hands-on Entra ID/Azure AD (CA, PIM, app reg/consent, federation, SCIM).

• Strong M365 Core (Exchange/Teams) and Power Platform governance (DLP, ALM, CoE).

• Automation-first mindset: Git-based workflows, GitLab CI, Graph API/PowerShell, Terraform, policy-as-code.

• Licensing program ownership with measurable savings.

• Team builder: hiring, coaching, skill matrices, feedback culture, on-call quality bar.

• Incident/RCA leadership with ability to push for codified, repeatable solutions.

Nice-to-Haves

• IGA (SailPoint/Entra ID Governance), secrets management, PAM integrations.

• Built and scaled a Power Platform CoE.

• Experience in regulated environments (SOX/ISO) with automated evidence.

• M&A platform integrations (tenant consolidation, domain migrations).

How We Work (Non-Negotiables)

• No clickops: If it has a lifecycle, it lives in code behind a PR.

• Security by default: Least privilege and strong auth baseline.

• Measure everything: SLOs, drift, and cost on dashboards.

•