Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 hours agoWe saw it 76 min after it went up

M365 Specialist

Prophix

Where
Etobicoke, ON, Canada
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowM365 SpecialistProphix · Etobicoke, ON, Canada

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Prophix's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.4% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.4%7 days
  4. 20.0%14 days
  5. 35.5%30 days
  6. 58.6%60 days
This job: posted 3 hours ago

The posting

See what you can do with Prophix

At Prophix, we’re building the platform that helps finance teams stop managing spreadsheets and start driving strategy. Prophix One™ brings planning, reporting, consolidation, and automation together in a single place, and we are expanding its AI capabilities faster than ever. If you want to work on a product that genuinely changes how finance teams operate, and do it alongside people who care about getting it right, this is where you want to be.

We’re headquartered in the Greater Toronto Area, with teams and offices across North America, Europe, and Australia. Trusted by more than 3,000 finance teams across 100+ countries, Prophix One™ is built for organizations that want to plan smarter and move faster.

As an M365 Specialist, you are the single owner of Prophix’s Microsoft 365 tenant, accountable for its security, compliance, and day-to-day health for employees across North America, Europe, and Australia. You will work closely with IT, Security, and the service desk to replace reactive, shared coverage with documented controls and clear ownership across Entra ID, Intune, Teams, SharePoint Online, and Exchange Online. Your work reduces risk, keeps evidence ready for ISO, SOC II, and HITRUST assessments, and frees the broader team to focus on higher-order problems.

This is a hybrid role reporting to our Etobicoke, ON headquarters 1x/week or as needed.

What You Will Do

Own the M365 Platform

· Take end-to-end ownership of Entra ID, Intune, Teams, SharePoint Online, OneDrive, and Exchange Online, including policies, permissions, and tenant-wide configuration standards.

· Complete a tenant audit and maintain a documented RACI so every M365 service and critical configuration has a named owner.

· Serve as the Tier 3 escalation point for complex Microsoft 365 incidents from the service desk, and publish the knowledge articles that prevent repeat tickets.

· Monitor the Microsoft 365 Message Center and roadmap, assess the impact of upcoming changes and deprecations, and plan configuration changes and user communications ahead of time.

· Manage M365 licensing and rollout, and set and enforce standards for site and team naming, ownership, and sharing.

· Plan and run tenant-to-tenant and content migrations (Teams, SharePoint, OneDrive, and mailboxes) for acquisitions, divestitures, and reorganizations, using tools such as ShareGate. Map permissions and sensitive-data requirements before content moves, validate results afterward, and document cutover and rollback steps.

Identity, Access, and Endpoint Security

· Administer Entra ID, Conditional Access, and MFA policies, and resolve risky sign-in alerts and exception requests quickly, with new items closed in under five business days.

· Set up and maintain SSO (SAML and OIDC) and SCIM provisioning for new and existing applications.

· Run scheduled access reviews for privileged roles, guest users, app registrations, enterprise applications, and admin-consent grants. Document every decision and removal.

· Maintain a register of certificates and credentials, and renew them before expiry.

· Track patch and vulnerability status across Windows and Mac devices in Intune, follow up on overdue items, and drive remediation to closure with a target of 95% or better critical patch compliance.

Govern Data and Collaboration

· Implement and enforce tenant-wide standards for sensitivity labels, data loss prevention policies, retention configurations, and guest sharing controls, and track progress with a Purview compliance score or equivalent metric.

· Manage SharePoint Online and OneDrive: site provisioning, permission models, external sharing settings, storage consumption, and archival of stale content.

· Extend the same governance standards to Power Platform.

Automate and Manage Change

· Build PowerShell and Microsoft Graph automations for high-frequency recurring work such as access reviews, patch compliance reporting, and certificate expiry tracking, with scheduled reports delivered to IT and security leadership.

· Develop reports in Splunk and workflow automations in n8n to surface compliance status and operational metrics.

· Raise and manage changes in ServiceNow for anything that touches the production environment.

Stay Audit-Ready

· Keep audit evidence current for ISO, SOC II, and HITRUST, with runbooks, supporting documentation, and evidence packages ready for examiner review ahead of each assessment cycle.

· Write and maintain runbooks covering the configurations, automations, and processes you own.

· Identify gaps in existing documentation and close them proactively.

Requirements

What You Will Bring

We hire for potential as much as experience. If this role excites you but you don’t check every box, we still want to hear from you. At Prophix, people who ask good questions, adapt quickly, and bring a fresh perspective often make the biggest impact.

Required Qualifications

· Degree or diploma in IT or a related field, or equivalent experience backed by Microsoft certifications (for example MS-102, SC-300, or MD-102)

· 3 to 5+ years of experience in Microsoft 365 administration, systems engineering, or endpoint and identity management in an enterprise environment.

· Hands-on administration of Microsoft 365 services including Entra ID, Intune, Teams, SharePoint Online, and Exchange Online in an enterprise environment.

· Practical experience with identity and access management: Conditional Access, MFA, SSO using SAML and OIDC, SCIM provisioning, and certificate lifecycle management.

· Working knowledge of endpoint patching and vulnerability management practices, including compliance reporting and remediation tracking across Windows and Mac devices.

· Demonstrated scripting ability in PowerShell and Microsoft Graph for reporting, automation, and operational tooling.

· Experience writing and maintaining runbooks, technical documentation, and change records in a structured IT environment.

· Clear written and verbal communication, including the ability to explain technical findings such as patch gaps, access exceptions, and compliance risks to IT, security, and business stakeholders.

· Experience with tenant migrations using ShareGate.

· Familiarity with Microsoft Purview and Power Platform governance.

· Hands-on experience with Ivanti and Jamf for endpoint management.

· Experience with ServiceNow, Splunk, and n8n in an IT operations or automation context.

· Audit support experience with ISO, SOC II, or HITRUST, or Microsoft certifications such as MS-102, SC-300, MD-102, or SC-200.

· Must be legally entitled to work in the country where this role is located (Etobicoke, Ontario, Canada)

Preferred Qualifications

· Corporate Performance Management, FP&A, SaaS industry experience

· Comfortable using AI tools responsibly to support research, drafting, and data review, and quick to learn new tools as technology and workflows evolve.

· Curious, collaborative, and motivated to keep improving how you work across teams and with AI-supported tooling.

Benefits

Compensation

The total target compensation for this role is $80,000 - $113,000 CAD, in accordance with applicable pay transparency laws. Actual compensation will be determined based on factors such as skills, experience, location, and internal equity.

What’s Included for You?

Comprehensive health, dental, vision, and mental-health coverage

Retirement savings with employer contributions

Parental leave top-up

Annual wellness allowance

Generous paid time off including vacation and sick time

Education assistance and tuition reimbursement

Social events, team activities, and opportunities to build community

Opportunities to participate in Environmental, Social, and Governance (ESG) initiatives

Quarterly Town Halls and Kickoffs that bring teams together to celebrate wins, share updates, and look ahead at what’s next

Apply Now!

If you’re looking for a place where your work touches real products, real customers, and real decisions, and where your career can grow in the direction you choose, we would love to meet you. Apply and let’s talk about what’s possible.

Accessibility & AI Transparency

Prophix promotes an accessible hiring process. If you need accommodation at any stage, we’ll work with you. Some interviews may be recorded so our hiring team can review and assess responses fairly and consistently. As part of our commitment to Responsible AI, we use a small number of AI-supported tools to help with tasks like resume review, shortlisting, or creating interview summaries. AI is never used as the sole basis for hiring decisions, and your personal data is never used to train AI models. If you'd prefer not to take part in any AI-assisted step, just let us know and we’ll be happy to accommodate.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Prophix's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Prophix's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Prophix's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.