Lead Engineer, Microsoft 365 and Identity Automation

The role

This hands-on individual contributor will own the code and automation for the Microsoft 365 and Entra ID environment. You will build, maintain, and extend production automation using Microsoft Graph, PowerShell, and APIs to support identity and lifecycle management.

What you will do

• Build, maintain, and extend production automation using Microsoft Graph, PowerShell, and supported APIs.
• Resolve defects, reduce technical debt, and document solutions for existing scripts and services.
• Engineer secure automation using API patterns, monitoring, logging, and least-privilege authentication.
• Maintain and improve Exchange Online and SharePoint Online automation.
• Maintain joiner, mover, and leaver processes for employees and contractors.
• Engineer and support Entra capabilities including Lifecycle Workflows, identity governance, and Conditional Access.
• Build and maintain integrations among HR, ITSM, identity, and collaboration systems.
• Apply engineering practices through Git-based source control, peer review, testing, and CI/CD.
• Mentor peers and serve as a senior escalation point for complex Microsoft 365 and identity issues.

Required qualifications

• 6+ years of experience engineering and supporting Microsoft 365 and Entra ID environments.
• 3+ years developing and maintaining production automation using Microsoft Graph.
• Advanced PowerShell experience, including Microsoft Graph PowerShell SDK and Exchange Online PowerShell.
• Working proficiency in another scripting or programming language.
• Experience inheriting, troubleshooting, refactoring, and supporting existing production codebases.
• Hands-on experience with Entra identity lifecycle management, groups, licensing, app registrations, service principals, Conditional Access, PIM, B2B identity, SSO, and SCIM provisioning.
• Experience automating Exchange Online administration and working with SharePoint Online administration or automation.
• Working knowledge of REST APIs, OAuth 2.0, JSON, Git-based workflows, code review, testing, monitoring, and unattended authentication.
• Broad Microsoft 365 operational knowledge including Entra ID, Exchange Online, Intune, SharePoint, and Teams.
• Strong problem-solving, documentation, and communication skills.

Nice to have

• Experience with Workato or a comparable integration platform such as Power Automate, Azure Logic Apps, MuleSoft, or Boomi.
• Experience with Entra ID Governance, HR-driven identity integration, or multi-company and multi-domain Microsoft 365 environments.
• Experience supporting company launches, mergers, divestitures, tenant transitions, or other complex organizational lifecycle events.
• Experience with Azure Automation, Azure Functions, Key Vault, CI/CD pipelines, infrastructure as code, or configuration as code.
• Experience with CoreView, ShareGate, or comparable Microsoft 365 administration, migration, and governance tools.
• Experience in regulated environments such as life sciences, GxP, or HIPAA.
• Relevant certifications such as SC-300, MS-102, AZ-104, or AZ-500.

Benefits

• Healthcare coverage
• Annual incentive program
• Retirement benefits
• A broad range of other benefits

About the company

Flagship Pioneering is a biotechnology company that invents and builds platform companies. They unite life science innovation, company creation, and capital investment to address urgent challenges in human health and sustainability.