Job description

JOB SUMMARY:

This position is based on‑site and requires four days per week in the Brea office to support collaboration and business needs.

The Principal Microsoft Cloud Platform Engineer serves as the senior technical authority and platform owner for Envista's Microsoft cloud ecosystem. This role owns architecture, engineering, automation, governance, operational excellence, and continuous improvement for Microsoft 365, Entra ID, Azure, identity, collaboration, and cloud governance. This is a senior individual contributor who leads through technical expertise, architecture, mentoring, and engineering excellence.

The role also serves as the service owner for Microsoft cloud platforms and is accountable for platform strategy, lifecycle management, governance, service health, roadmap execution, and technical oversight of Managed Service Provider (MSP) delivery.

The position partners with business, infrastructure, cybersecurity, and vendor teams to ensure Microsoft cloud services deliver secure, reliable, and scalable business outcomes while supporting Envista's platform engineering transformation strategy.

Success in this role is demonstrated through stable platform operations, stronger service ownership and governance accountability; improved reliability, user experience, security posture, and operational efficiency; and delivery of roadmap objectives that advance Envista's platform engineering and infrastructure transformation strategy.

PRIMARY DUTIES AND RESPONSIBILITIES:

Platform Ownership & Technical Leadership

Own the Microsoft cloud platform strategy, architecture, engineering, and lifecycle
Serve as the technical authority for Microsoft 365, Entra ID, Azure, Defender, Purview, and related services
Define engineering standards, governance, architecture patterns, and platform roadmaps
Drive automation, standardization, and continuous improvement
Establish platform engineering standards, reusable patterns, and architectural guardrails that promote consistency and operational excellence
Establish clear service ownership and governance accountability across Microsoft cloud services, improving governance, security, and operational maturity

Microsoft 365 Engineering

Lead engineering for Exchange Online, Teams, SharePoint Online, OneDrive, Defender, Purview, and Microsoft 365 administration
Ensure platform reliability, lifecycle management, security, and service improvement

Identity & Security

Lead engineering for Entra ID, Conditional Access, Identity Governance, PIM, federation, and authentication
Partner with Cybersecurity to strengthen enterprise identity

Azure Platform Engineering

Own Azure Landing Zones, governance, networking, RBAC, Azure Policy, Monitor, Backup, Site Recovery, Azure Virtual Desktop, and platform security
Define and maintain Azure platform architecture standards, cloud governance controls, operational guardrails, and deployment patterns
Partner with application, infrastructure, and cybersecurity teams to enable cloud adoption while maintaining compliance and operational readiness

Automation & Platform Engineering

Drive Infrastructure as Code using Terraform, Bicep, ARM, PowerShell, Azure Automation, Azure DevOps, GitHub, and CI/CD
Increase automation and Infrastructure as Code adoption to reduce manual effort and strengthen engineering maturity
Develop reusable automation frameworks that improve speed, consistency, reliability, and scalability across Microsoft cloud services

Operational Excellence

Maintain reliability, disaster recovery readiness, monitoring, lifecycle management, documentation, and technical debt reduction
Maintain stable Microsoft platform operations and continuously improve platform reliability, user experience, security posture, and operational efficiency

Knowledge Management

Reduce dependency on external vendors and individual knowledge holders through documentation, automation, knowledge transfer, and engineering maturity initiatives

Leadership & Vendor Partnership

Serve as primary technical partner for Microsoft and MSP
Strengthen Microsoft and MSP partnerships to support effective service delivery and platform outcomes
Provide technical governance and engineering oversight for MSP-delivered Microsoft cloud services, ensuring alignment with approved architecture standards, operational processes, automation objectives, and platform roadmaps
Deliver roadmap objectives that support Envista's platform engineering and infrastructure transformation strategy
Mentor engineers, conduct architecture reviews, and improve engineering standards

Job requirements

MINIMUM REQUIREMENTS:

Bachelor's degree or equivalent experience
10+ years enterprise Microsoft infrastructure experience
7+ years Microsoft 365 and Azure engineering
Experience in enterprise environments supporting 5,000+ users
Deep expertise with Entra ID, Exchange Online, Azure architecture, governance, disaster recovery, PowerShell, and Infrastructure as Code
Experience partnering with Managed Service Providers
Demonstrated experience establishing platform governance, architecture standards, and technology roadmaps
Experience operating within a platform engineering, cloud center of excellence, or service ownership model

REQUIRED TECHNICAL EXPERTISE:
Microsoft Cloud

Azure, Microsoft 365, Exchange Online, Teams, SharePoint, OneDrive, Entra ID, Defender, Purview, Sentinel, Azure Policy, Azure Monitor, Azure Backup, Azure Site Recovery, and Azure Virtual Desktop

Automation

PowerShell, Terraform, Bicep, ARM, Azure DevOps, GitHub, CI/CD, and REST APIs

Infrastructure

Windows Server, Active Directory, DNS, PKI, Networking, Disaster Recovery, and Cloud Governance

PREFERRED SKILLS & EXPERIENCE:

Azure Solutions Architect Expert, Microsoft 365 Administrator Expert, Azure Administrator, Identity & Access Administrator, or Security certifications
Experience with FastTrack, tenant migrations, M&A, enterprise governance, and platform engineering

#LI-BS1
IND123

Operating Company:

Corporate

Envista and its family of companies (Envista) will not accept unsolicited resumes from any source other than directly from a candidate. Envista will consider unsolicited referrals and/or resumes submitted by vendors such as search firms, staffing agencies, professional recruiters, fee-based referral services and recruiting agencies (Agency) to have been referred by the Agency free of charge and Envista will not pay a fee for any placement resulting from the receipt such unsolicited resumes. An Agency must obtain advance written approval from Envista's internal Talent Acquisition or Human Resources team to submit resumes, and then only in conjunction with a valid fully-executed contract approved by the Global Talent Acquisition leader and in response to a specific job opening. Envista will not pay a fee to any Agency that does not have such agreement and written approval in place.

Apply now