Sr. IAM Administrator

IT@JH Enterprise Directory and Messaging is seeking a Sr IAM Administrator who is responsible for the development of and maintenance of M365 solutions and utilizing the capabilities of the M365 suite. This responsibility includes all aspects of the software development life cycle including requirements gathering, design, development, testing, deployment, security and support of custom solutions. The position will serve as a subject matter expert and provide technical guidance and support when necessary while maintaining a high level of responsiveness to customers.

Specific Duties & Responsibilities

• Data Loss Prevention Management: Develop sensitivity labels to classify and protect data based on its sensitivity level and help drive initiatives to reduce data leakage.

• Policy Implementation: Publish and manage label policies to ensure they are applied correctly across the organization.

• Data Classification: Implement data classification frameworks to identify and categorize data based on its sensitivity.

• Compliance Monitoring: Monitor compliance with data protection regulations and internal policies.

• Incident Response: Respond to data breaches and other security incidents, ensuring appropriate measures are taken to mitigate risks.

• Expert on compliance center, litigation hold, retention policy, auditing, and eDiscovery

• Provide expertise in the following tools: SharePoint Online, Teams, OneDrive, Power Platform, and other components of the M365 Suite.
• Delivering services and solutions for clients using Microsoft's PowerApps, Microsoft Dynamics 365, Power Automate, SharePoint, Microsoft Teams, custom development, and data integrations.
• Research, evaluate, and recommend 3rd party products that provide extended or enhanced capabilities to the platform.

• Configure and implement Microsoft 365 applications and features to meet business requirements, industry best practices, and security guidelines. Investigate new features and evaluate them against emerging business needs through close collaboration with IT partners and external stakeholders.

• Serve as the third level of escalation by providing technical guidance and support to end-users and IT staff, addressing their questions and issues related to Microsoft 365.

• Stay updated with the latest Microsoft 365 features, changes, updates, roadmaps, and releases.

• Perform site creation and maintenance tasks involving permissions, site access, etc.

• Regularly update documentation of the M365 infrastructure.

• User Training: Educate users on the importance of best practices for using Microsoft security tools to secure sensitive data.

• Provide insight or contribute and establish comprehensive policies to secure the Microsoft 365 environment, ensuring alignment with industry standards and organizational goals.

• Provide expert recommendations on best practices for data protection, access control, and overall security within the Microsoft 365 suite.

• Oversee the implementation of these policies, ensuring they are effectively communicated and enforced across the organization.

• Regularly review and update policies to adapt to new security threats and changes in the Microsoft 365 environment.

• Work closely with IT partners and business stakeholders to ensure policies meet the evolving needs of the organization and comply with regulatory requirements.

Specific Devices, Software, Projects

• Online software supported by this position include but are not limited to the following: Office 365 (SharePoint Online, Teams, Power BI, OneDrive, Sway, Power Platform etc), as well as 3rd party Microsoft 365 applications

Scale/size of Area, Project and/or System Supported

• Microsoft Online business software will be available to over 150,000 Johns Hopkins faculty, staff, and students worldwide. Ensuring secure access to these tools is crucial for enhancing collaboration and minimizing security risks

Special Knowledge, Skills, and Abilities

• Must have a working knowledge of Microsoft 365 software suite and cloud storage products.

• Experience with Azure Cloud Administration.

On call requirements

• Yes

• Bachelor’s Degree required.
• Four years of experience in identity and access management or a related field.
• Additional education may substitute for required experience and additional related experience may substitute for required education beyond HS Diploma/Graduation Equivalent, to the extent permitted by the JHU equivalency formula.

• Bachelor’s Degree in Computer Science, Information Technology, or a related field.
• Strong knowledge of SharePoint Online, Teams, OneDrive, Security, Compliance, Power Platform and M365 Admin Portal.

• Understanding of Power Automate, Microsoft Cloud App Security (MCAS)/Microsoft Purview, Dynamics 365.

• Understanding and applying security to Microsoft 365 using best practices.

• Experience leading enterprise-wide projects and a solid understanding of Microsoft 365.

• Excellent verbal and written communication skills.

Classified Title: Sr. IAM Administrator 
Role/Level/Range: ATP/04/PE  
Starting Salary Range: $73.300 - $128,300 Annually (Commensurate w/exp.) 
Employee group: Full Time 
Schedule: Monday-Friday 8:30am-5:00pm 
FLSA Status: Exempt 
Location: Remote 
Department name: IT@JH Enterprise Directory and Messaging  
Personnel area: University Administration