Microsoft Architect

Introduction

The Department of Information Technology (DoIT) provides support to state agencies, the Executive Office of the Governor, the Governor’s coordinating offices, and a variety of independent agencies within the Executive Branch.

Striving to provide the highest level of customer service to its internal and external customers, DoIT supports Maryland’s agencies and commissions through its leadership and strategic direction for Information Technology and Telecommunications, establishing a long range, target technology architecture, encouraging cross agency collaboration and advocating best practices for operations and project management.

GRADE

STD 0025

LOCATION OF POSITION

Department of Information Technology

100 Community Place

Crownsville, MD 21032

Main Purpose of Job

The Microsoft 365 Manager is responsible for architecting, overseeing, implementing, and optimizing Microsoft Office 365 solutions to meet business needs across platforms such as voice & identity management, while ensuring security, scalability, and compliance. This role involves developing strategic roadmaps, leading migrations, and integrating O365 services, including Exchange Online, SharePoint, Teams, OneDrive, and security/compliance tools. Additional key aspects of this role include managing Active Directory (AD) and Azure Active Directory (AAD) to ensure seamless identity and access management, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and directory synchronization. The manager collaborates with IT leadership, agency stakeholders, and technical teams to provide expert guidance on best practices, automation, governance, and adoption strategies. Additionally, they play a critical role in troubleshooting complex issues, optimizing performance, and ensuring seamless collaboration and productivity across the organization.

POSITION DUTIES

Manage Microsoft 365 & Active Directory Managing

Design, implement, and maintain Microsoft 365 solutions, ensuring security, scalability, and compliance.

Manage and assist with architecting Active Directory (AD) and Azure Active Directory (AAD), including identity and access management, directory synchronization, and authentication methods (SSO, MFA, Conditional Access).

Security, Compliance & Troubleshooting

Implement and manage security policies, Conditional Access controls, and identity protection within Microsoft 365 and Azure AD.

Ensure compliance with industry standards and agency requirements through proper governance and risk mitigation strategies.

Diagnoses and resolve complex Microsoft 365 and Active Directory issues, collaborating with Microsoft support and internal teams as needed.

Stakeholder Collaboration & Governance

Partner with agency stakeholders, IT leadership, and technical teams to align Office 365 services with business needs and security policies.

Define and enforce governance, compliance, and best practices for Office 365 usage, licensing, and adoption strategies.

Migration, Integration & Optimization

Lead migrations from on-premises or third-party platforms to Microsoft 365 while minimizing downtime.

Integrate Microsoft 365 with Active Directory, enterprise applications, and cloud services, ensuring seamless authentication and access control.

Continuously monitor and optimize Microsoft 365 performance, security, and automation.

Other Duties

Perform other duties as assigned and other related duties such as, but not limited to, attending agency meetings, training sessions, vendor meetings and contractor meetings.

MINIMUM QUALIFICATIONS

Experience: Six years of experience, five or more years of experience performing network design and development of an enterprise data network in an organization with extensive level of program integration and reliance on technology and an additional one year of experience designing, developing, testing, implementing and maintaining application, communication, database or operating systems software.

Notes:

1. Candidates may substitute graduation from an accredited high school or possession of a high school equivalency certificate and thirty credit hours from an accredited college or university in Computer Science, Computer Technology, Management Information Systems or other information technology-related field to include coursework in application, communication, database or operating systems software technology for the additional one year of experience designing, developing, testing, implementing and maintaining application, communication, database or operating systems software.

2. Candidates may substitute experience operating computer systems; or scheduling, controlling input and output to process data on computer systems; or evaluating, implementing and maintaining computer hardware and software; or converting data from project specifications by developing program code using generally accepted computer programming languages may be substituted for high school education on a year-for-year basis for high school education.

3. Candidates may substitute the possession of a Bachelor's degree in Computer Science, Information Systems, Information Technology, or related field from an accredited college or university and five or more years of experience performing network design and development of an enterprise data network in an organization with extensive level of program integration and reliance on technology for the required experience.

4. Candidates may substitute the possession of a Master's degree in Computer Science, Information Systems, Information Technology, or related field from an accredited college or university and three years of experience performing network design and development of an enterprise data network in an organization with extensive level of program integration and reliance on technology for the required experience.

5. Candidates may substitute U.S. Armed Forces military service experience as a commissioned officer in the Computer Systems Operations classifications or Computer Systems Operations specialty codes in the Information Technology field of work on a year-for-year basis for the required experience.

DESIRED OR PREFERRED QUALIFICATIONS

Experience using PowerShell scripting for automation and administration.

Working knowledge of Entra/M365 Conditional Access and data loss prevention (DLP) policies.

SPECIAL REQUIREMENTS

Employees in this classification may be subject to call-in 24 hours a day and, therefore, may be required to provide the employing agency with a telephone number where the employee can be reached. Employees may be furnished with a pager or cell phone.

Applicants for this classification may handle sensitive data. This will require a full scope background investigation prior to appointment. A criminal conviction may be grounds for rejection of the applicant.

Employees may occasionally be required to travel to field locations and must have access to an automobile in the event a state vehicle cannot be provided. Standard mileage allowance will be paid for use of a privately owned vehicle.

SELECTION PROCESS

Please make sure that you provide sufficient information on your application to show that you meet the qualifications for this recruitment. All information concerning your qualifications must be submitted by the closing date. We will not consider information submitted after this date. Successful candidates will be ranked as Best Qualified, Better Qualified, or Qualified and placed on the eligible (employment) list for at least one year.

EXAMINATION PROCESS

The assessment may consist of a rating of your education, training, and experience related to the requirements of the position. It is important that you provide complete and accurate information on your application. Please report all experience and education that is related to this position.

BENEFITS

STATE OF MARYLAND BENEFITS

FURTHER INSTRUCTIONS

Online applications are highly recommended. However, if you are unable to apply online, the paper application and supplemental questionnaire may be submitted to: Department of Budget and Management, Recruitment and Examination Division, 301 W. Preston St., Baltimore, MD 21201. Paper application materials must be received in our office by the closing date for the recruitment. No postmarks will be accepted.

For questions regarding this recruitment, please contact the DBM Recruitment and Examination Division at or, MD TTY Relay Service .

We thank our Veterans for their service to our country.

People with disabilities and bilingual candidates are encouraged to apply.

As an equal opportunity employer, Maryland is committed to recruitment, retaining and promoting employees who are reflective of the State's diversity.