Senior M365 Governance Engineer

Job description

Hearst Technology Services is seeking a senior-level M365 Governance Engineer to own the governance framework across our Microsoft 365 messaging and collaboration platforms, including Exchange Online and Teams, while partnering with the Enterprise Apps team on SharePoint and OneDrive.

This role is primarily focused on governance: developing a governance plan and designing and enforcing lifecycle management, retention, data protection, and access and sharing controls to ensure that our messaging and collaboration environment remains secure, compliant, and well organized as it scales. This work will be performed in close partnership with our GRC team.

Hands-on engineering of Exchange Online and Teams is part of the role, but it exists in service of governance. You will not simply keep the platforms running; you will ensure that everything operating on them follows policy by design—not as an afterthought.

Governance (Primary Focus)

Design, implement, and maintain governance policies for Exchange Online and Teams, including naming conventions, provisioning workflows, and full lifecycle management (creation, ownership, archival, and deletion) for mailboxes, distribution lists, Microsoft 365 Groups, and Teams

Configure and maintain retention policies, sensitivity labels, and Data Loss Prevention (DLP) rules using Microsoft Purview across mail and Teams content

Own external sharing, guest access, and permissions governance within Teams to prevent oversharing and reduce data exposure risk

Build and maintain dashboards and reports (Power BI, Purview, or native M365 admin reporting) to track compliance posture, license utilization, and governance policy adherence

Partner with security and compliance teams to support audits, eDiscovery requests, and regulatory requirements (e.g., GDPR, HIPAA, SOC 2, ISO 27001) as they relate to messaging and collaboration data

Develop automation (PowerShell, Microsoft Graph API, Power Automate) to streamline governance tasks such as orphaned mailbox/Team cleanup, ownership certification, and policy enforcement

Conduct periodic access reviews and governance audits of mailboxes and Teams to identify and remediate policy drift

Create and maintain governance documentation, runbooks, and training materials, and act as the escalation point for governance-related incidents (e.g., oversharing, policy violations, misconfigured permissions)

Collaborate with team owners and business units to drive adoption of governance best practices without unnecessarily blocking productivity

Evaluate new Microsoft 365 governance and compliance features as they are released, assessing impact before tenant-wide rollout

Messaging & Collaboration Engineering (Supporting)

Administer and engineer Exchange Online, including mail flow rules, connectors, distribution lists/shared mailboxes, and anti-spam/anti-phishing configuration

Support Microsoft Teams architecture, including calling/voice (if applicable), meeting policies, channel structure, and Teams app management

Monitor service health, plan for capacity/licensing needs, and troubleshoot platform-level issues in partnership with Microsoft support when needed

Required Qualifications

7+ years of hands-on experience in Microsoft 365 governance, compliance, or administration, with direct experience in Exchange Online and/or Microsoft Teams environments

Strong experience with Microsoft Purview (Compliance Center), including retention labels/policies, DLP, and sensitivity labels

Proven track record designing and enforcing lifecycle management, naming conventions, and access/sharing governance for mailboxes, groups, and Teams

Proficiency in PowerShell scripting for M365 governance automation (Exchange Online, Teams modules)

Familiarity with Microsoft Graph API for governance automation and reporting

Working knowledge of common regulatory and compliance frameworks (GDPR, HIPAA, SOC 2, ISO 27001, NIST) as they apply to messaging/collaboration governance

Working understanding of Exchange Online mail flow and Teams architecture sufficient to apply governance controls effectively

Experience with M365 license management and optimization

Strong analytical and documentation skills, with the ability to translate technical policy into clear guidance for non-technical stakeholders

Preferred Qualifications

Microsoft certifications such as SC-400 (Information Protection Administrator), MS-102 (Microsoft 365 Administrator), or MS-700 (Managing Microsoft Teams)

Background in IT compliance, risk management, or audit support

Experience supporting M365 Copilot data readiness for messaging and collaboration content (oversharing remediation, sensitivity label coverage)

Experience with Power Automate and Power BI for governance reporting and workflow automation

Exposure to ITIL or change management frameworks

Familiarity with Teams Phone/voice engineering (direct routing, calling plans, PSTN connectivity)

Background in messaging migrations (e.g., legacy Exchange, other email platforms, or Teams/Slack migrations)

Soft Skills

Clear communicator, able to explain governance rationale to both technical and non-technical audiences

Comfortable balancing security/compliance requirements against user productivity and business needs

Detail-oriented with strong follow-through on policy enforcement and documentation

Collaborative mindset - this role touches nearly every team in the organization

#J-18808-Ljbffr

Worksite address

charlotte, NC, 28245, US

Who can apply

Review the original listing for work authorization, qualifications and employer requirements.