Lead Engineer, Microsoft 365 and Identity Automation
Flagship Pioneering · Cambridge, MA USA
About this role
**Flagship Pioneering — Lead Engineer, Microsoft 365 and Identity Automation** Flagship Pioneering is a biotechnology company that invents and builds platform companies that change the world—bringing together scientific minds, entrepreneurial builders, and capital to enable courageous leaps in human health and sustainability. ### Position Summary We’re looking for a hands-on **Lead Engineer** to own the code and automation that runs our **Microsoft 365** and **Entra ID** environment. Flagship operates a single shared Microsoft 365 tenant supporting dozens of portfolio companies, each with its own identity, domain, and lifecycle needs. Much of the provisioning, governance, and retirement of identities is done through code using **Microsoft Graph**, **Exchange Online/SharePoint Online PowerShell**, **Python tooling**, and integration platform workflows. This is an individual contributor role focused on engineering (not architecture or people management). You’ll inherit existing codebases, keep them healthy, extend them as new identity sources/attributes become available, and ensure Entra lifecycle management continues to work as the business changes. You’ll also serve as a senior escalation point when automation or tenant behavior breaks. ### What You Will Do - Build, maintain, and extend production automation using **Microsoft Graph**, **PowerShell**, and supported APIs. - Take ownership of existing scripts/integrations/services by fixing defects, reducing technical debt, documenting solutions, and updating code as identity sources, attributes, domains, and organizational requirements change. - Engineer secure and reliable automation using appropriate API patterns, including monitoring, logging, error handling, and **least-privilege** authentication (app registrations, service principals, managed identities, certificates, and properly scoped permissions). - Maintain and improve **Exchange Online** and **SharePoint Online** automation for mailboxes, groups, permissions, domains, mail flow, site provisioning, sharing, and lifecycle management (including changes driven by portfolio company launches, mergers, renames, and other lifecycle events). - Maintain accurate **joiner/mover/leaver** processes for employees and contractors across Flagship and portfolio companies (provisioning, groups, licensing, access changes, and deprovisioning). - Engineer and support **Entra** capabilities including Lifecycle Workflows, identity governance, dynamic groups, Privileged Identity Management, Conditional Access, B2B identity, single sign-on, and **SCIM** provisioning. - Build and maintain integrations among HR, ITSM, identity, and collaboration systems using Microsoft Graph, native Microsoft capabilities, custom code, or integration platforms such as **Workato** (when appropriate).
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.