Senior Systems Engineer (Cloud & Security)

Job Description

Ingram Content Group (ICG) is currently seeking a Sr Systems Engineer to join our team in LaVergne, TN (Greater Nashville area).  This Senior Systems Engineer is responsible for the administration, security, and optimization of the organization's enterprise Microsoft 365 environment, with primary ownership of SharePoint Online, OneDrive for Business, Microsoft Teams, and Exchange Online. Serves as the senior technical authority for the Microsoft 365 platform, partnering with the Security & Compliance team on data governance, access controls, and Microsoft Purview initiatives, and supporting automation and AI-readiness efforts involving Power Automate and Microsoft Copilot. Acts as the escalation point for complex issues referred by the Service Desk and End User Support teams and is expected to operate with a high degree of independence and sound judgment. This position will be expected by hybrid and work from the Ingram headquarters 4 days per week.

Want to help explore and build new ways to deliver content to the world? 

At Ingram, our Technology team is blazing a trail by providing content distribution services to thousands of publishers with key initiatives around business intelligence, machine learning, continuous integration and omnichannel.  We support diverse people and technology that highlights innovation through SaaS platforms, metadata, cloud, and containerization.   Our teams are agile, and emphasize authenticity, creativity, and transparency upon a fact-based foundation. 

The world is reading, and it is our goal to connect as many people as possible to the content they want in the simplest ways.  If you are an IT professional who strives to deliver results through collaborative partnerships, understanding what drives business, and enjoys working in a connected culture, we can’t wait to meet you! 

The ideal candidate will have the following minimum qualifications:

• Bachelor's or Master's degree in Information Technology, Computer Science, Engineering or a related field, or directly related year-for-year experience.
• 5 years of systems engineering or related experience, including progressive experience administering Microsoft 365 at the enterprise level, including SharePoint Online, OneDrive, Microsoft Teams, and Exchange Online.

We have a preference for:

• Deep working knowledge of Microsoft 365 administration, including tenant-level configuration and cross-service dependencies.
• Strong understanding of SharePoint Online architecture, permissions models, hub sites, and site provisioning at enterprise scale.
• Proficiency administering Microsoft Teams policies, voice/calling features, and Teams governance.
• Solid understanding of Exchange Online mail flow, mail hygiene, and message security controls.
• Working knowledge of Microsoft Purview capabilities, including DLP, retention policies, sensitivity labels, and eDiscovery.
• Familiarity with Microsoft Copilot licensing, data readiness requirements, and adoption/pilot considerations.
• Hands-on experience building and maintaining workflows and automations using Power Automate.
•  Proficiency with PowerShell scripting and/or Microsoft Graph API for bulk administration and reporting tasks

The Sr System Engineers key responsibilities are:

• Administers and maintains the enterprise Microsoft 365 tenant, including SharePoint Online, OneDrive for Business, Microsoft Teams, and Exchange Online, ensuring high availability, performance, and security.
• Designs and manages SharePoint site architecture, hub site structures, permissions models, and content organization strategies across the enterprise.
• Configures and maintains OneDrive for Business settings, including sync policies, storage quotas, sharing restrictions, and data retention/lifecycle policies.
• Administers Microsoft Teams, including policies, meeting and calling configurations, guest/external access, and Teams-SharePoint integration.
• Manages Exchange Online mail flow, transport rules, distribution groups, shared mailboxes, and mailbox permissions.
• Serves as the Tier 3 escalation point for complex M365 issues referred by the Service Desk and End User Support teams.
• Partners with the Security & Compliance team to implement and maintain Microsoft Purview capabilities, including DLP policies, sensitivity/retention labels, and eDiscovery support.
• Conducts periodic access and permissions audits across SharePoint and OneDrive to identify and remediate over-permissioned or orphaned content.
• Supports conditional access, MFA, and identity governance configurations in coordination with the Security & Compliance team.
• Designs and maintains automated workflows using Power Automate to streamline provisioning, approvals, and other administrative processes.
• Supports Microsoft Copilot readiness activities, including permissions hygiene reviews, license planning, and pilot rollout support.
• Manages Microsoft 365 license allocation, usage reporting, and cost optimization across the tenant.
• Creates and maintains technical documentation, standard operating procedures, and knowledge
• base articles for administered services.
• Monitors the Microsoft 365 Message Center and roadmap changes and assess and communicates the enterprise impact of upcoming feature changes.
• Participates in incident response and root cause analysis for Microsoft 365 service disruptions.
• Provide technical mentorship and guidance to junior administrators and Service Desk staff on Microsoft 365-related issues.

Hiring Salary Range: $110,981- $141,123. This range represents the anticipated low and high end of the salary for this position. It will be determined by factors including but not limited to the applicant’s education, experience, knowledge, skills, and abilities, geographic location, as well as internal equity and alignment with market data.

Additional Information

Perks/Benefits:

• A highly competitive compensation package with generous benefits beginning first day of employment for Medical/Prescription Drug plans, HSA, Vision, Dental and Health Care FSA.
  • 15 vacation days & 12 sick days accrued annually and 3 personal days
  • 401K match, Life and AD&D, Employee Assistance programs, Group Legal, & more
  • Wellness program with access to onsite gym and basketball court for associates
• Encouraged continued education with our tuition reimbursement program
• Financial and in-kind opportunities to engage with non-profits in your community
  • Company match program for United Way donations
  • Volunteer opportunities and in-kind drives for non-profits throughout the year
• Take breaks or brainstorm in our game room with ping pong & foosball
• Casual Dress Code & Flexible Schedules (per team)

The world is reading, and Ingram Content Group (“Ingram”) connects people with content in all forms. Providing comprehensive services for publishers, retailers, libraries and educators, Ingram makes these services seamless and accessible through technology, innovation and creativity. With an expansive global network of offices and facilities, Ingram’s services include digital and physical book distribution, print-on-demand, and digital learning. Ingram Content Group is a part of Ingram Industries Inc. and includes Ingram Book Group LLC, Ingram Publisher Services LLC, Lightning Source LLC, Ingram Library Services LLC, Tennessee Book Company LLC, Ingram Content Group UK Ltd. and Ingram Content Group Australia Pty Ltd. 

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, work related mental or physical disability, veteran status, sexual orientation, gender identity, or genetic information.

• EOE-Race/Gender/Veterans/Disabled
• We participate in EVerify.
• EEO Poster in English 
• EEO Poster in Spanish