Office 365 Infrastructure & Security Management Lead

Company Overview

KLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem. Virtually every electronic device in the world is produced using our technologies. No laptop, smartphone, wearable device, voice-controlled gadget, flexible screen, VR device or smart car would have made it into your hands without us. KLA invents systems and solutions for the manufacturing of wafers and reticles, integrated circuits, packaging, printed circuit boards and flat panel displays. The innovative ideas and devices that are advancing humanity all begin with inspiration, research and development. KLA focuses more than average on innovation and we invest 15% of sales back into R&D. Our expert teams of physicists, engineers, data scientists and problem-solvers work together with the world’s leading technology providers to accelerate the delivery of tomorrow’s electronic devices. Life here is exciting and our teams thrive on tackling really hard problems. There is never a dull moment with us.

Group/Division

The Information Technology (IT) group at KLA is involved in every aspect of the global business. IT’s mission is to enable business growth and productivity by connecting people, process, and technology. It focuses not only on enhancing the technology that enables our business to thrive but also on how employees use and are empowered by technology. This integrated approach to customer service, creativity and technological excellence enables employee productivity, business analytics, and process excellence.

Job Description/Preferred Qualifications

• The position of Microsoft 365 Infrastructure & Security Management is responsible for the strategic direction, operational excellence, security posture, and lifecycle management of the organization's Microsoft 365 ecosystem. This role leads the administration, engineering, governance, security, and continuous improvement of Microsoft 365 services with deep skills in Exchange Online.
• The individual will be accountable for ensuring a secure, highly available, scalable, and compliant Microsoft 365 environment while driving enterprise email security initiatives through Proofpoint, Microsoft Defender, anti-phishing programs, threat prevention, and tenant governance.
• This role works closely with Cybersecurity, Infrastructure Operations, Enterprise Architecture, Compliance, Risk Management, and business stakeholders to deliver secure modern workplace services for a global enterprise.

Microsoft 365 Infrastructure Platform Leadership

Own the strategy, roadmap, architecture, and operations of the Microsoft 365 platform.

Lead Microsoft 365 tenant administration and governance.

Ensure platform availability, performance, scalability, and reliability.

Define operational standards, policies, and best practices for Microsoft 365 services.

Manage service lifecycle planning, upgrades, feature adoption, and platform optimization.

Develop and maintain M365 governance and operating models.

Exchange Online Administration & Messaging Services

Lead global administration of Microsoft Exchange Online.

Manage email routing, mail flow, connectors, transport rules, and SMTP infrastructure.

Oversee mailbox provisioning, migrations, retention, archiving, and lifecycle management.

Manage hybrid Exchange environments when applicable.

Ensure email platform health, performance, uptime, and service availability.

Troubleshoot complex messaging issues and coordinate escalations with Microsoft support.

Establish standards for email security, compliance, and operational governance.

Email Security & Anti-Phishing Program

Own enterprise email security strategy and operations.

Lead phishing prevention, business email compromise (BEC) protection, and email threat management initiatives.

Drive troubleshooting, implementation and optimization of:

Proofpoint Email Security

Microsoft Defender for Office 365

Advanced Threat Protection (ATP)

Anti-phishing policies

Safe Links

Safe Attachments

Impersonation protection

Monitor and respond to email-based threats.

Partner with Cybersecurity teams to investigate phishing incidents and threat campaigns.

Email Security Administration

Serve as technical owner for the email security platform.

Manage:

Secure Email Gateway (SEG)

TAP (Targeted Attack Protection)

Email DLP

Threat Intelligence

Phishing Protection

URL Defense

Email Encryption

Optimize email filtering to reduce false positives and false negatives.

Implement email authentication standards including:

SPF

DKIM

DMARC

Domain Protection

Create executive reporting on email threat trends and security metrics.

Microsoft 365 Security & Compliance

Partner with Cybersecurity teams to strengthen M365 security posture.

Manage Microsoft security controls including:

Microsoft Defender for Office 365

Microsoft Defender XDR

Microsoft Purview

Conditional Access

Data Loss Prevention (DLP)

Information Protection

Insider Risk Management

Lead security assessments and remediation efforts.

Ensure compliance with regulatory and corporate security requirements.

Implement Zero Trust security principles across Microsoft 365 services.

Tenant Administration & Identity Services

Administer Microsoft 365 tenant services and configurations.

Partner with Identity teams supporting:

Microsoft Entra ID

Single Sign-On (SSO)

Federation Services

Multifactor Authentication (MFA)

Conditional Access

Identity Governance

Manage tenant security baselines and configuration standards.

Maintain tenant health, security reviews, and governance processes.

Infrastructure & Endpoint Integration

Oversee integration between Microsoft 365 and enterprise infrastructure services.

Support:

Microsoft Intune

Endpoint Management

Device Compliance

Azure Services

Enterprise Authentication Platforms

Collaborate with Infrastructure Operations to ensure service resiliency and business continuity.

Operations & Service Management

Lead day-to-day service operations for the Microsoft 365 environment.

Establish KPIs, SLAs, operational dashboards, and service reporting.

Drive incident, problem, change, and capacity management processes.

Manage vendor relationships including Microsoft and Proofpoint.

Develop automation strategies for platform administration and support activities.

Ensure alignment with ITIL and ServiceNow processes.

Risk Management & Governance

Develop governance controls for Microsoft 365 services.

Conduct platform risk assessments and remediation planning.

Support security audits, compliance reviews, and regulatory requirements.

Maintain disaster recovery and business continuity plans.

Drive continuous service improvement initiatives.

Minimum Qualifications

Doctorate (Academic) Degree and related work experience of 3 years; Master's Level Degree and related work experience of 6 years; Bachelor's Level Degree and related work experience of 8 years

Base Pay Range: $111,100.00 - $188,900.00 Annually

Primary Location: USA-MI-Ann Arbor-KLA

KLA’s total rewards package for employees may also include participation in performance incentive programs and eligibility for additional benefits including but not limited to: medical, dental, vision, life, and other voluntary benefits, 401(K) including company matching, employee stock purchase program (ESPP), student debt assistance, tuition reimbursement program, development and career growth opportunities and programs, financial planning benefits, wellness benefits including an employee assistance program (EAP), paid time off and paid company holidays, and family care and bonding leave.

Interns are eligible for some of the benefits listed. Our pay ranges are determined by role, level, and location. The range displayed reflects the pay for this position in the primary location identified in this pos