Staff M365 Systems Engineer

Leading the future in luxury electric and mobility At Lucid, we set out to introduce the most captivating, luxury electric vehicles that elevate the human experience and transcend the perceived limitations of space, performance, and intelligence. Vehicles that are intuitive, liberating, and designed for the future of mobility.   We plan to lead in this new era of luxury electric by returning to the fundamentals of great design – where every decision we make is in service of the individual and environment. Because when you are no longer bound by convention, you are free to define your own experience.   Come work alongside some of the most accomplished minds in the industry. Beyond providing competitive salaries, we’re providing a community for innovators who want to make an immediate and significant impact. If you are driven to create a better, more sustainable future, then this is the right place for you.

Lucid is seeking to hire a Staff M365 Systems Engineer who is responsible for architecting and managing end-to-end Microsoft 365 solutions, with a focus on Azure AD, on-premise Active Directory, and Certificate Services. They lead administration efforts for hybrid identity environments, implement advanced Azure AD features (e.g., MFA, Conditional Access), and manage PKI solutions to secure communications and services. The role emphasizes security and compliance by enforcing robust controls, conducting risk assessments, and ensuring governance across hybrid environments. Additionally, the engineer acts as a technical leader, collaborating with teams, mentoring staff, and optimizing system performance while maintaining detailed documentation and providing tier-3 support. 

You Will: 

Solution Architecture & Design 

• Architect and design end-to-end Microsoft 365 solutions, with a special emphasis on Azure AD, on-premise Active Directory, and Certificate Services (e.g., Active Directory Certificate Services, Public Key Infrastructure). 

• Collaborate with stakeholders to gather requirements, define best-fit solutions, and create detailed architectural diagrams and documentation. 

• Drive the adoption and integration of new technologies and advanced features across the M365 suite (e.g., Exchange Online, SharePoint Online, Teams). 

Azure AD & On-Premise AD Administration & Management 

• Lead administration efforts for Azure AD and on-premise Active Directory, including setting up and maintaining federation, hybrid identity, and user provisioning. 

• Configure and manage advanced Azure AD features such as multifactor authentication (MFA), conditional access policies, and Privileged Identity Management (PIM). 

• Oversee automated identity lifecycle management in both on-premise and cloud environments, ensuring that onboarding/offboarding processes align with organizational policies and security requirements. 

• Plan and execute Azure AD Connect installations, migrations, and upgrades to maintain a healthy hybrid identity environment. 

Certificate Services (PKI) Management 

• Design, deploy, and manage Active Directory Certificate Services (AD CS) or other PKI solutions to secure internal and external communications, devices, and services. 

• Ensure certificate renewal, revocation, and compliance processes are efficient, automated where possible, and aligned with industry standards. 

• Troubleshoot and resolve complex certificate-related issues and provide guidance on PKI best practices to internal teams. 

Security & Compliance 

• Implement robust security controls that align with industry standards and regulatory requirements, leveraging Azure AD features like Identity Protection and Access Reviews. 

• Develop and maintain governance policies for identity, devices, data protection, and certificate management. 

• Conduct periodic security risk assessments, recommend remediation strategies, and ensure that security measures are consistently enforced across hybrid environments. 

Technical Leadership & Collaboration 

 

• Serve as a subject matter expert for Azure AD, on-premise Active Directory, and certificate services (PKI), mentoring ju