Sr. Microsoft 365 Administrator (L2/L3)

Description iSoftStone, Inc. is seeking a Senior M365 System Administrator (L2/L3) to join our Team   in Palo Alto, CA (in office)! *THIS IS A LONG-TERM CONTRACT POSITION  **Fluency in Mandarin is Preferred**   We are seeking a highly skilled Senior Microsoft 365 System Administrator (L2/L3) to support the design, implementation, and ongoing operations of enterprise Microsoft 365 environments. This role combines solution architecture, system engineering, and advanced administration, ensuring secure, scalable, and reliable collaboration and endpoint platforms. Responsibilities: Solution Design and Architecture • Lead solution design and technical architecture for Microsoft 365 and related services • Translate business and security requirements into scalable, secure, and supportable solutions • Define architecture patterns across: o Identity & access (SSO, Conditional Access, Zero Trust) o Endpoint management (Intune / UEM) o Collaboration & messaging (Exchange, Teams, SharePoint) • Produce high-level and low-level design (HLD/LLD) documentation • Evaluate new features and technologies, and provide design recommendations and roadmaps • Ensure solutions align with enterprise standards for security, compliance, and performance   System Administration (L2/L3 Support) • Provide L2/L3 support for Microsoft 365 services, including escalation handling and root cause analysis • Administer: o Exchange Online, Teams, SharePoint Online, OneDrive o Azure AD / Entra ID • Troubleshoot complex issues across identity, messaging, collaboration, and endpoint environments Endpoint Management and Security • Administer Microsoft Intune and UEM platforms • Manage device compliance, configuration profiles, and application deployment • Operate and optimize EDR solutions such as Microsoft Defender for Endpoint • Design and implement endpoint security baselines and compliance policies • Support enterprise endpoint strategy across Windows, macOS, and mobile devices Identity and Access Management • Design and implement SSO, MFA, and Conditional Access architectures • Integrate enterprise applications using SAML, OAuth, and OpenID Connect • Support hybrid identity (on-prem AD + cloud) and identity lifecycle management • Contribute to identity governance and Zero Trust initiatives Automation and Scripting • Develop and maintain automation using PowerShell • Build reusable scripts and tooling for provisioning, reporting, and compliance • Improve operational efficiency through automation and standardization Network and Infrastructure Integration • Troubleshoot and design solutions related to DNS, authentication, and connectivity • Work with network teams on secure access (proxy, firewall, conditional access integration) • Ensure reliable service integration across cloud and on-prem environments Security and Compliance • Implement Microsoft 365 security controls and policies aligned with best practices • Support audit, compliance, and eDiscovery requirements •…