Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision		Previous revision
jobsearch:main [2025/11/14 11:53] – created elaujobsearch:main [2025/11/20 15:31] (current) – epiclau
Line 1: Line 1:
 +<showif isadmin>
 +You may now explore the rest of the site.
 ====== Job Search ====== ====== Job Search ======
  
  
-=== Lending Club - Sr Microsoft M365 Engineer ==='+What not to tell your employer. 
 +  * Preventing anything too revealing. 
 +  * REAL why your reason. NO TECH HUB.
  
 +SHOW PASSION*
 +“I’m the right candidate for this role for three main reasons.
  
-https://lendingclub.wd1.myworkdayjobs.com/en-US/External/job/Sr-Microsoft-M365-Engineer_R0007146+First, I bring over 15 years of hands-on experience running Microsoft 365 and messaging in highly regulated environments – mainly financial institutions and PCI-regulated industries. I’m very comfortable working under regulatory pressure, with auditors looking over our shoulders, and making sure controls are actually implemented, not just documented. 
  
-1. M365 Platform Ownership & Governance+Second, I can add value very quickly. On day one, I can start learning your environment, and by the end of the first week I can begin delivering real output. In previous M&A projects, I’ve come in, run a full gap analysis on the M365 tenant and the surrounding security stack, identified misconfigurations, and started closing critical gaps while in parallel building a longer-term roadmap. I’m used to reviewing security posture, plugging the biggest holes first, and then coming back with a structured roadmap.
  
-What they want you to own:+Third, I’ve literally worked my way up from the trenches, so I understand the full stack end-to-end. As a lead engineer, my day involved juggling 10 integration projects while handling day-to-day operations. During the pandemic, I spent weeks working around the clock supporting SBA loan forgiveness and PPP workloads – keeping email, collaboration, and remote access stable while volumes spiked. I’ve participated in every biannual DR exercise, and I’m often the person the CIO, CISO, and operations teams call when there’s a major M365 incident. I know how to stay calm, troubleshoot under pressure, communicate clearly, and get services back to green.
  
-End-to-end M365 stack:+Im confident I can ramp up quickly at lendingclub and you will not regret hiring me; my history and actions speaks for itself.
  
-Exchange Online 
  
-SharePoint & OneDrive+====== Tell me about yourself ? ======
  
-Entra ID (Azure AD)+Summarize your resume. 
  
-Intune / modern endpoint management+Well as you can see from my resume 
 +- Summarize your resume (oldest to most recent)
  
-Environment governance:+Communicate how you are the person for the job. 
 +How you meet all your qualifications.
  
-Define & enforce messaging / collaboration architecture+Small percentage, and what you can recall your 
  
-Plan, document, and review technical changes+And that's what bring me here today and why I'm excited about this opportunity.
  
-Maintain scheduled jobs / tasks tied to M365 
  
-Core competency:+====== Tell me about your weakness? ======
  
-Architect, operate, and continuously improve a secure, governed M365 tenant.+*What are you working on* 
 +Reveal your flaws.
  
-2. Identity & Application Management (Entra ID) 
  
-Key areas:+From all the people you interview you should hire me.
  
-App registration & lifecycle management+Think of the question as a trade Off.
  
-Conditional access / access controls+- **I'm not the fastest worker** / but what work I do submit is accurate and is meant to be a reference for others to use for future references will be . what extra time i do // does not cause any issues // (mitigation) i always make sure i clarify what time frame is good and if it works well.
  
-Governance for apps integrated with Entra ID (consent, permissions, reviews)+In a recent merger and acquisition, I took time to chronically identify records and archives during the company's adoption of different products. For example, on-premises data is held on tape, and to break it down on how its processed, in what year, and how destruction occurs paints a complete picture. It also provides a guide for legal and compliance to identify where these artifacts reside and if they still exist.
  
-Core competency: 
  
-Design and manage secure identity, SSO, and app integrations in Entra ID.+====== What are your Salary Expectations? ======
  
-3. Messaging, Email Security & Routing+  - I would need additional details? Feel for the culture. 
 +  - Approved position > What range > That would work well for me. 
 +  - No Range > Between 100-170 year.
  
-Tech + responsibilities: 
  
-Domain & email auth: 
  
-SPF, DKIM, DMARC+====== #1 LendingClub – Senior Microsoft 365 Engineer ======
  
-Email security stack:+https://lendingclub.wd1.myworkdayjobs.com/en-US/External/job/Sr-Microsoft-M365-Engineer_R0007146
  
-Proofpoint + M365 transport rules+===== 1. M365 Platform Ownership & Governance =====
  
-Mail flow operations:+Administer and optimize:
  
-Routing, relays, connectors, spam/phish tuning+Exchange Online
  
-Message tracking, send/receive troubleshooting+SharePoint
  
-Proactive monitoring and incident prevention+OneDrive
  
-Core competency:+Microsoft Entra ID (Azure AD)
  
-Own enterprise mail flow and email security from DNS to inbox, including Proofpoint + EXO + routing.+Intune
  
-4. Automation, Scripting & Reporting+Define and enforce messaging and collaboration architecture best practices
  
-They explicitly call out:+Plan and document technical changes (change control, design docs, runbooks)
  
-Heavy PowerShell for:+Review and maintain scheduled tasks and jobs related to M365
  
-Automation of admin tasks+Work with cross-functional teams to translate business needs into secure, scalable solutions
  
-Recurring O365 jobs+===== 2. Identity & Application Management (Entra ID) =====
  
-Reporting / inventory / compliance checks+Oversee application registration and lifecycle management in Entra ID
  
-Building proactive tools & monitoring to detect issues early+Manage access controls (permissions, app roles, consent)
  
-Core competency:+Implement governance for apps integrated with Entra ID
  
-Use PowerShell and tooling to turn manual M365 ops into reliable, observable, automated workflows.+Ensure secure SSO and identity flows for internal and third-party apps
  
-5. Copilot, Power Platform & Secure Enablement+===== 3. Messaging, Email Security & Routing =====
  
-Newer / strategic area:+Manage company email domains and DNS records:
  
-Oversee Copilot for M365+SPF
  
-Set guardrails & frameworks for:+DKIM 
 + 
 +DMARC 
 + 
 +Configure and operate Proofpoint and M365 transport rules 
 + 
 +Manage routing, relays, and connectors for internal/external mail flows 
 + 
 +Proactively monitor mail flow and investigate delivery and spam/phish issues 
 + 
 +Troubleshoot: 
 + 
 +Send/receive failures 
 + 
 +Message tracking 
 + 
 +Relays and connectivity to messaging systems 
 + 
 +Implement and maintain organization-wide mail policies, rules, and aliases 
 + 
 +===== 4. Automation, Scripting & Reporting (PowerShell) ===== 
 + 
 +Automate repetitive M365 tasks with PowerShell 
 + 
 +Develop and maintain: 
 + 
 +Automation scripts 
 + 
 +Scheduled O365 jobs 
 + 
 +Reporting and inventory scripts 
 + 
 +Build proactive tools and monitoring to detect and resolve issues early 
 + 
 +Standardize admin workflows through reusable functions and modules 
 + 
 +===== 5. Copilot, Power Platform & Secure Enablement ===== 
 + 
 +Oversee Copilot for M365 configuration and rollout 
 + 
 +Define secure guardrails for:
  
 Copilot Studio Copilot Studio
  
-Power Automate / end-user automation+Power Automate and end-user automation
  
-Drive adoption & training while keeping data safe+Balance enablement vs. data protection (access scopes, data boundaries)
  
-Core competency:+Provide end-user training and guidance for safe and effective use of AI and low-code tools
  
-Safely enable AI and low-code automation (Copilot / Power Platform) for end users in a governed way.+===== 6. Support, Escalations & Operations =====
  
-6. Support, Escalations & Operations+Act as Tier 3/4 escalation for complex M365 and messaging issues
  
-Operational expectations:+Partner with the Service Desk to:
  
-Act as Tier 3/4 escalation for complex M365/messaging issues+Resolve advanced issues
  
-Partner with Service Desk:+Create SOPs and runbooks for common tickets
  
-Resolve tough cases+Review and communicate about global outages:
  
-Create SOPs / runbooks so they can handle common tickets+Impact
  
-Communicate during:+Status
  
-Global outages (impact, status, remediation)+Remediation steps
  
-Participate in on-call rotation and off-hours work when needed+Participate in on-call rotations and off-hours support as needed
  
-Core competency:+Ensure consistent operational excellence across the M365 environment
  
-Be the senior M365/messaging SME for escalations, runbook creation, and incident/outage handling.+===== 7. Security, Compliance, eDiscovery & Legal =====
  
-7. Security, Compliance, eDiscovery & Legal+Partner with Legal and Compliance on:
  
-This is big for them:+Email retention and archival policies
  
-Partner with Legal & Compliance:+Data governance and classification
  
-Email retention & archival policies+Execute and manage legal holds and ensure data integrity
  
-Data governance policies+Support eDiscovery workflows across Exchange, SharePoint, and OneDrive
  
-Execute legal holds, preserve data+Maintain strong cloud security and compliance posture across M365 services
  
-Maintain cloud security & compliance posture across:+Align platform configuration with regulatory and audit requirements
  
-Exchange Online+===== 8. End-User Productivity & Tooling Ecosystem ===== 
 + 
 +Support end users on: 
 + 
 +Microsoft 365 apps 
 + 
 +Windows and macOS environments 
 + 
 +Collaboration tools (Zoom, Atlassian, Slack) 
 + 
 +Demonstrate a customer-first support mindset 
 + 
 +Improve end-user experience and productivity through configuration, policies, and guidance 
 + 
 +Collaborate with teams in a hybrid work environment (onsite and remote) 
 + 
 +===== 9. Networking & Endpoint Fundamentals =====
  
-SharePoint / OneDrive+Apply core networking knowledge:
  
-Entra ID / Intune+DNS
  
-Core competency:+DHCP
  
-Translate regulatory / legal requirements into concrete M365 retention, eDiscovery, and security controls.+HTTP
  
-8. End-User Productivity & Tooling Ecosystem+SSL/TLS
  
-Broader environment:+TCP/IP
  
-Support Windows & macOS clients+Understand identity and access flows affecting M365
  
-Familiarity with:+Support:
  
-Zoom+Device imaging
  
-Atlassian+Software deployment
  
-Slack+Remote support solutions
  
-Strong customer-first support mindset+Diagnose issues across client, network, and cloud layers
  
-Core competency:+===== 10. Experience Profile & Role Fit =====
  
-Make collaboration tools (M365 + third-party) work smoothly for end users, with a service mindset.+Experience:
  
-9. Networking & Endpoint Fundamentals+6+ years supporting Microsoft 365 and Exchange environments
  
-They expect you to “just know”:+Bonus: 3+ years in highly regulated industries
  
-Core networking concepts:+Legacy Exchange Server experience (on-prem)
  
-DNS, DHCP, HTTP, SSL, TCP/IP+Skills:
  
-Identity, access, device imaging, software deployment, remote support+Strong PowerShell and automation
  
-Core competency:+Documentation, organization, and communication
  
-Troubleshoot M365 / messaging issues across the full stack: client, network, identity, and service.+Vendor and partner management (bonus)
  
-10. Experience Profile & “Fit” Signals+Ability to quickly learn and integrate new tools into M365
  
-Must-have profile:+Work model:
  
-6+ years with Microsoft 365 & Exchange+Hybrid (San Francisco or Lehi), in-office Tue–Thu
  
-Comfortable in regulated / enterprise-like environments+Flexible across time zones (HQ in Pacific Time)
  
-Strong documentation, communication, and organization+Willing to participate in 24/7 on-call as needed
  
-Willing to:+Certifications (bonus):
  
-Work hybrid (SF or Lehi, in-office Tu/W/Th)+M365 / security-related certs
  
-Participate in 24/7 on-call+CompTIA / PMP / similar (project and best-practice alignment)
  
-Flex across time zones (HQ in PT) 
  
-Bonus differentiators:+===== 10. Networking & Endpoint Fundamentals =====
  
-3+ years in highly regulated industry (finance, healthcare, etc.) 
  
-Legacy Exchange on-prem experience+====== Copilot Guardrails ======
  
-Vendor management+As part of our organization's rollout of Microsoft Copilot, we are implementing a set of structured guardrails to ensure responsible AI usage, data governance, and compliance with industry and internal standards. This page outlines the technical, administrative, and user-level controls being applied.
  
-Relevant certs: M365, security, maybe PMP/ITIL, etc.+===== Overview ===== 
 +Copilot is a powerful generative AI tool designed to enhance productivity across the Microsoft 365 suite. To maximize its value while minimizing risk, guardrails have been established to:
  
-How you can use this+  * Prevent unauthorized data exposure 
 +  * Maintain compliance with internal and external regulations 
 +  * Ensure responsible and ethical AI usage 
 +  * Protect against misuse or prompt injection
  
-You can literally turn each competency into a section or bullet theme on:+These guardrails align with Microsoft’s Responsible AI framework and our internal IT security policies.
  
-Resume: 1–2 bullets per core competency with metrics.+===== Guardrail Categories =====
  
-Cover letter: Group paragraphs by 1) M365 ownership, 2) messaging/email security, 3) security/compliance, 4) automation.+==== 1. Access & Identity Controls ==== 
 +  * Copilot access is scoped using Entra ID (Azure AD) group memberships. 
 +  * Only licensed and security-cleared users are granted access. 
 +  * Multi-Factor Authentication (MFA) is enforced for all Copilot users. 
 +  * Conditional Access policies apply to manage risk-based access.
  
-Interview prep: Have at least one story each for:+==== 2. Data Access Governance ==== 
 +  * Copilot is restricted to accessing only authorized Microsoft 365 data repositories (SharePoint Online, OneDrive, Teams). 
 +  * Sensitivity labels and Microsoft Purview DLP policies are used to limit access to classified or high-risk data. 
 +  * Data classification and label inheritance are enforced at the file and container level.
  
-Major tenant / messaging architecture change+==== 3. Prompt Management & Input Control ==== 
 +  * Prompt best practices training is provided to all users. 
 +  * Prompts are monitored for malicious intent, sensitive content, or misuse. 
 +  * Guardrails are configured within Copilot Studio for custom Copilot applications, limiting scope and context access.
  
-Ugly mail flow / spam / spoofing incident+==== 4. Auditing & Monitoring ==== 
 +  * Microsoft 365 unified audit logs are enabled to track Copilot interactions. 
 +  * Defender for Cloud Apps is used to monitor for abnormal or noncompliant behavior. 
 +  * Alerts are integrated into our SIEM for incident response and anomaly detection.
  
-Legal hold / eDiscovery request under pressure+==== 5. User Training & Awareness ==== 
 +  * Required onboarding covers: 
 +    * Understanding what Copilot can/can’t access 
 +    * Safe prompt writing and reviewing AI-generated output 
 +    * Data sensitivity and acceptable use 
 +  * A Copilot-specific Acceptable Use Policy (AUP) is included in onboarding materials. 
 +  * Periodic reminders and updates are issued via email and the company intranet.
  
-PowerShell automation that saved real time or reduced risk+===== Communication to End Users ===== 
 +>>> 
 +Copilot is here to support your daily work—but just like any AI tool, it must be used responsibly. Our guardrails ensure Copilot can only access data you're already authorized to see. Never input sensitive personal or client data into prompts. Always review Copilot responses critically and consult the Copilot Usage Guide if you're unsure.
  
-Outage / incident where you owned comms and resolution+If you have questions, reach out to the IT Compliance team at [[itcompliance@example.com]].
  
-If you want, next step I can:+===== Resources ===== 
 +  * [[https://learn.microsoft.com/en-us/microsoft-365-copilot/ | Microsoft Copilot Documentation]] 
 +  * [[https://www.microsoft.com/en-us/ai/responsible-ai | Microsoft Responsible AI Principles]] 
 +  * [[internal:policies:acceptable_use_policy | Acceptable Use Policy]] 
 +  * [[internal:training:copilot_quickstart | Copilot User Quick Start Guide]]
  
-Map your existing JPM/FRB experience directly onto these 10 competency buckets, or+===== Maintainers ===== 
 +  * IT Security 
 +  * Microsoft 365 Engineering 
 +  * Compliance & Risk Management 
 +</showif>
  
-Draft a bullet-ready “Core Competencies” section customized to this role that you can drop into your resume or LinkedIn.