Job description

Introduction The Department of Information Technology (DoIT) provides support to state agencies, the Executive Office of the Governor, the Governor’s coordinating offices, and a variety of independent agencies within the Executive Branch. Striving to provide the highest level of customer service to its internal and external customers, DoIT supports Maryland’s agencies and commissions through its leadership and strategic direction for Information Technology and Telecommunications, establishing a long range, target technology architecture, encouraging cross agency collaboration and advocating best practices for operations and project management. Main Purpose The Microsoft 365 Manager is responsible for architecting, overseeing, implementing, and optimizing Microsoft Office 365 solutions to meet business needs across platforms such as voice & identity management, while ensuring security, scalability, and compliance. This role involves developing strategic roadmaps, leading migrations, and integrating O365 services, including Exchange Online, SharePoint, Teams, OneDrive, and security/compliance tools. Additional key aspects of this role include managing Active Directory (AD) and Azure Active Directory (AAD) to ensure seamless identity and access management, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and directory synchronization. The manager collaborates with IT leadership, agency stakeholders, and technical teams to provide expert guidance on best practices, automation, governance, and adoption strategies. Additionally, they play a critical role in troubleshooting complex issues, optimizing performance, and ensuring seamless collaboration and productivity across the organization. Position Duties Manage Microsoft 365 & Active Directory Managing • Design, implement, and maintain Microsoft 365 solutions, ensuring security, scalability, and compliance. • Manage and assist with architecting Active Directory (AD) and Azure Active Directory (AAD), including identity and access management, directory synchronization, and authentication methods (SSO, MFA, Conditional Access). Security, Compliance & Troubleshooting • Implement and manage security policies, Conditional Access controls, and identity protection within Microsoft 365 and Azure AD. • Ensure compliance with industry standards and agency requirements through proper governance and risk mitigation strategies. • Diagnoses and resolve complex Microsoft 365 and Active Directory issues, collaborating with Microsoft support and internal teams as needed. Stakeholder Collaboration & Governance • Partner with agency stakeholders, IT leadership, and technical teams to align Office 365 services with business needs and security policies. • Define and enforce governance, compliance, and best practices for Office 365 usage, licensing, and adoption strategies. Migration, Integration & Optimization • Lead migrations from on-premises or third-party platforms to Microsoft 365 while minimizing downtime. • Integrate Microsoft 365 with Active Directory, enterprise applications, and cloud services, ensuring seamless authentication and access control. • Continuously monitor and optimize Microsoft 365 performance, security, and automation. Other Duties • Perform other duties as assigned and other related duties such as, but not limited to, attending agency meetings, training sessions, vendor meetings and contractor meetings. Minimum Qualifications Experience: Six years of experience, five or more years of experience performing network design and development of an enterprise data network in an organization with extensive level of program integration and reliance on technology and an additional one year of experience designing, developing, testing, implementing and maintaining application, communication, database or operating systems software. Notes: 1. Candidates may substitute graduation from an accredited high school or possession of a high school equivalency certificate and thirty credit hours from an accredited college or university in Computer Science, Computer Technology, Management Information Systems or other information technology-related field to include coursework in application, communication, database or operating systems software technology for the additional one year of experience designing, developing, testing, implementing and maintaining application, communication, database or operating systems software. 2. Candidates may substitute experience operating computer systems; or scheduling, controlling input and output to process data on computer systems; or evaluating, implementing and maintaining computer hardware and software; or converting data from project specifications by developing program code using generally accepted computer programming languages may be substituted for high school education on a year-for-year basis for high school education. 3. Candidates may substitute the possession of a Bachelor's degree in Computer Science, Information Systems, Information Technology, or related field from an accredited college or university and five or more years of experience performing network design and development of an enterprise data network in an organization with extensive level of program integration and reliance on technology for the required experience. 4. Candidates may substitute the possession of a Master's degree in Computer Science, Information Systems, Information Technology, or related field from an accredited college or university and three years of experience performing network design and development of an enterprise data network in an organization with extensive level of program integration and reliance on technology for the required experience. 5. Candidates may substitute U.S. Armed Forces military service experience as a commissioned officer in the Computer Systems Operations classifications or Computer Systems Operations specialty codes in the Information Technology field of work on a year-for-year basis for the required experience. Preferred Quals Experience using PowerShell scripting for automation and administration. Working knowledge of Entra/M365 Conditional Access and data loss prevention (DLP) policies.

Requirements