Power Automate + M365 Automation Expert (Paycom Email → DG Updates + Terminations | Hybrid Cloud + VM/PowerShell)
Budget: $250 – $750 USD
We need an expert-level Microsoft Power Automate / Microsoft 365 automation engineer to take ownership of an existing automation landscape and harden/extend it.
Context (what we have today)
Our “source of truth” is the HR system (Paycom). When employee changes happen, we receive structured emails (Status Change / Termination). Those emails should drive:
1. Distribution Group (DG) membership updates for specific roles
2. Termination handling (disable sign-in + create ticket + notifications)
3. Mapping validation using Excel files stored in SharePoint/OneDrive
4. Some DG updates are done via hybrid approach (Power Automate Desktop + PowerShell on a VM using certificate-based auth)
Core Logic (must implement exactly)
We have validated business rules:
1. MA/RAM movement within same district → NO ACTION (no DG remove/add)
2. MA/RAM transfer to different district → remove old district DG + add new district DG
3. RSM transfer → location-based DG update based on New Location (district compare not required)
4. RSM demotion → apply DG rules based on new role + new store + new district
5. Promotion to RSM → assign RSM DG(s) for the new location
6. Termination email → disable sign-in on the effective date (not immediately if future-dated) + create ticket + alerts
Existing Flows Landscape (high level)
1. Cloud flows triggered by incoming emails
2. Mapping/reference files consolidated into SharePoint with consistent filenames
3. Hybrid path: Cloud flow passes parameters to PAD on VM → PowerShell updates Exchange Online DGs
4. Alerts + logging + confirmation emails to IT mailboxes
Ticketing integration (Autotask)
What we need from you
1. Understand current flows end-to-end (no guesswork)
2. Implement or correct logic to match the rules above
3. Improve reliability: email parsing drift, missing fields, mapping mismatches, retries, clear alerts
4. Ensure safe execution (especially terminations and “effective date” timing)
5. Document the flows and handover to IT
Required Skills (must-have)
1. Power Automate (cloud) expert: advanced expressions, error handling, child flows, concurrency controls
2. Microsoft 365 ecosystem: SharePoint/OneDrive, Outlook triggers, Excel Online connectors, Power Query awareness
3. Exchange Online DG updates (either Graph / Exchange Online PowerShell / supported connectors)
4. Hybrid automation experience: Power Automate Desktop + running PowerShell on a VM
5. Strong debugging discipline: run history analysis, test plans, controlled rollout
Nice to have
1. Azure Automation / Functions / Logic Apps experience (for modernization option)
2. Autotask API integration experience
3. Security best practices: certificate auth, least privilege, audit trails
Important Constraints
1. You must be comfortable working in a controlled IT environment
2. We will provide sample emails + mapping files + service accounts as needed
3. We want zero disruption to production: changes must be staged/tested first
4. Clear communication is mandatory (daily updates during active work)
To Apply (screening questions – answer all)
1. Describe a similar automation you built (email/HR event → user changes or group membership).
2. How would you update Exchange Online DG membership from Power Automate safely?
3. How do you design “effective date” actions to avoid accidental early terminations?
4. What’s your approach to handling email format drift and missing fields?
5. Are you comfortable with hybrid PAD + VM PowerShell, and certificate-based auth?
Budget: Open to fixed-price milestones after discovery. Please propose your approach and estimate.
Context (what we have today)
Our “source of truth” is the HR system (Paycom). When employee changes happen, we receive structured emails (Status Change / Termination). Those emails should drive:
1. Distribution Group (DG) membership updates for specific roles
2. Termination handling (disable sign-in + create ticket + notifications)
3. Mapping validation using Excel files stored in SharePoint/OneDrive
4. Some DG updates are done via hybrid approach (Power Automate Desktop + PowerShell on a VM using certificate-based auth)
Core Logic (must implement exactly)
We have validated business rules:
1. MA/RAM movement within same district → NO ACTION (no DG remove/add)
2. MA/RAM transfer to different district → remove old district DG + add new district DG
3. RSM transfer → location-based DG update based on New Location (district compare not required)
4. RSM demotion → apply DG rules based on new role + new store + new district
5. Promotion to RSM → assign RSM DG(s) for the new location
6. Termination email → disable sign-in on the effective date (not immediately if future-dated) + create ticket + alerts
Existing Flows Landscape (high level)
1. Cloud flows triggered by incoming emails
2. Mapping/reference files consolidated into SharePoint with consistent filenames
3. Hybrid path: Cloud flow passes parameters to PAD on VM → PowerShell updates Exchange Online DGs
4. Alerts + logging + confirmation emails to IT mailboxes
Ticketing integration (Autotask)
What we need from you
1. Understand current flows end-to-end (no guesswork)
2. Implement or correct logic to match the rules above
3. Improve reliability: email parsing drift, missing fields, mapping mismatches, retries, clear alerts
4. Ensure safe execution (especially terminations and “effective date” timing)
5. Document the flows and handover to IT
Required Skills (must-have)
1. Power Automate (cloud) expert: advanced expressions, error handling, child flows, concurrency controls
2. Microsoft 365 ecosystem: SharePoint/OneDrive, Outlook triggers, Excel Online connectors, Power Query awareness
3. Exchange Online DG updates (either Graph / Exchange Online PowerShell / supported connectors)
4. Hybrid automation experience: Power Automate Desktop + running PowerShell on a VM
5. Strong debugging discipline: run history analysis, test plans, controlled rollout
Nice to have
1. Azure Automation / Functions / Logic Apps experience (for modernization option)
2. Autotask API integration experience
3. Security best practices: certificate auth, least privilege, audit trails
Important Constraints
1. You must be comfortable working in a controlled IT environment
2. We will provide sample emails + mapping files + service accounts as needed
3. We want zero disruption to production: changes must be staged/tested first
4. Clear communication is mandatory (daily updates during active work)
To Apply (screening questions – answer all)
1. Describe a similar automation you built (email/HR event → user changes or group membership).
2. How would you update Exchange Online DG membership from Power Automate safely?
3. How do you design “effective date” actions to avoid accidental early terminations?
4. What’s your approach to handling email format drift and missing fields?
5. Are you comfortable with hybrid PAD + VM PowerShell, and certificate-based auth?
Budget: Open to fixed-price milestones after discovery. Please propose your approach and estimate.