Project Engineer

Accountabilities:

Microsoft 365 and Cloud Migrations:
Plan and execute end-to-end mailbox, tenant-to-tenant, file, and Active Directory domain migrations using appropriate migration tools.
Manage every migration phase, including discovery, assessment, pilot groups, cutover planning, execution, and post-migration support.
Establish migration downtime windows and rollback criteria with clients, ensuring agreed procedures are followed throughout the transition.
Reconcile migrated data and workloads against original inventories, investigate discrepancies, and ensure data integrity.
Execute migrations involving Exchange Online, Google Workspace, IMAP, SharePoint Online, OneDrive, Teams, file servers, NAS environments, and Active Directory domains.
Microsoft 365 and Identity Administration:
Configure, administer, and maintain Microsoft 365 environments across multiple client tenants.
Manage Exchange Online, including mail flow, connectors, transport rules, shared mailboxes, delegation, message tracing, and retention settings.
Administer SharePoint Online, OneDrive, and Microsoft Teams, including site provisioning, permissions, sharing policies, guest access, and synchronization troubleshooting.
Manage Microsoft Entra ID, including users, groups, administrative roles, dynamic groups, and group-based licensing.
Configure and troubleshoot Entra Connect Sync and Cloud Sync, hybrid identity environments, device joins, Conditional Access, MFA, and self-service password reset.
Implement enterprise application integrations and single sign-on using SAML and OIDC protocols.
Azure Infrastructure and Endpoint Management:
Deploy and maintain Azure infrastructure, including virtual machines, virtual networks, Network Security Groups, public IP addresses, and site-to-site VPN connections.
Configure and manage Azure Files, Azure Backup, Recovery Services vaults, and Azure Virtual Desktop environments where required.
Administer Azure subscriptions, resource groups, role-based access control (RBAC), and basic cloud cost management.
Manage client endpoints through Microsoft Intune, including Windows Autopilot enrollment, device compliance, configuration profiles, application packaging, and deployment.
Implement endpoint security policies covering BitLocker, Microsoft Defender for Endpoint, device updates, and Windows Update for Business.
Support device enrollment and management across Windows, Apple, and Android environments, including BYOD and co-management scenarios.
Windows Server, Networking, and Automation:
Administer Windows Server environments and Active Directory Domain Services, including DNS, DHCP, Group Policy, and file and print services.
Configure and maintain Hyper-V environments and support hybrid infrastructure requirements.
Develop, modify, and execute PowerShell scripts to automate bulk operations across Exchange Online, Microsoft Graph, and Entra ID.
Troubleshoot synchronization, identity, networking, infrastructure, and migration-related issues across client environments.
Project Delivery and Client Communication:
Independently manage approximately two to five concurrent client projects at different stages, taking responsibility for technical execution and delivery.
Coordinate with senior engineers and architects when architectural decisions or complex technical escalations are required.
Prepare detailed as-built documentation and maintain accurate technical records within IT Glue.
Provide structured handovers and technical briefings to service desk teams to ensure smooth ongoing support.
Maintain accurate project timelines, time records, and status updates within the relevant professional services automation (PSA) platform.
Participate in client meetings to explain technical changes, migration schedules, potential service interruptions, and project progress.
Ensure projects are delivered according to agreed scope, timelines, quality standards, and client expectations.
Support scheduled after-hours and weekend migration activities when required.
Requirements:
Between 5 and 10 years of overall IT experience, including at least 2 years of hands-on Microsoft 365 and Entra ID administration across multiple organizations or client tenants.
Demonstrable experience personally executing at least five migrations, covering mailbox, tenant-to-tenant, file, or Active Directory domain migrations. Candidates should be able to identify the migration tools and methodologies used.
Strong practical knowledge of Microsoft 365 administration, including Exchange Online, mail flow, connectors, transport rules, shared mailboxes, delegation, message tracing, and retention fundamentals.
Good understanding of email DNS configuration, including MX, SPF, DKIM, DMARC, Autodiscover, and DNS TTL considerations during migration cutovers.
Hands-on experience with SharePoint Online, OneDrive, and Microsoft Teams, including site and library creation, permission inheritance, sharing policies, guest access, and synchronization troubleshooting.
Strong knowledge of Microsoft Entra ID, including user and group administration, dynamic groups, administrative roles, organizational units, Entra Connect Sync, Cloud Sync, and hybrid identity configurations.
Experience configuring Conditional Access policies, MFA, self-service password reset, hybrid and cloud device joins, and enterprise application authentication using SAML or OIDC.
Practical Azure administration experience, including virtual machines, virtual networks, NSGs, public IPs, site-to-site VPNs, Azure Files, Azure Backup, Recovery Services vaults, and basic Azure Virtual Desktop administration.
Understanding of Azure subscriptions, resource groups, RBAC, and cloud resource cost management.
Strong Microsoft Intune expertise, including Windows Autopilot, co-management, BYOD, Apple and Android enrollment, compliance policies, configuration profiles, and the Settings Catalog.
Experience packaging and deploying Win32 applications using the .intunewin format, as well as managing Microsoft Store and line-of-business applications.
Knowledge of endpoint security management, including BitLocker policies, Defender for Endpoint onboarding, update rings, and Windows Update for Business.
Demonstrable migration experience in at least two of the following areas:
On-premises Exchange to Exchange Online using cutover, staged, or hybrid migration approaches and the Hybrid Configuration Wizard.
Tenant-to-tenant Microsoft 365 migrations following acquisitions, divestitures, or organizational rebranding.
Google Workspace or IMAP migrations to Microsoft 365.
File server or NAS migrations to SharePoint Online, OneDrive, or Teams.
Active Directory domain migration or consolidation using tools and techniques such as ADMT, SID history, forest trusts, UPN suffix changes, and workstation re-domain processes.
Migration from another mobile device management (MDM) platform to Intune.
Strong Windows Server and Active Directory Domain Services experience, including DNS, DHCP, Group Policy, file and print services, and Hyper-V administration.
Practical PowerShell scripting skills, with the ability to read, modify, troubleshoot, and develop scripts for Exchange Online, Microsoft Graph, and Entra ID rather than simply executing existing scripts.
Experience working in fully remote teams and managing multiple client engagements, preferably within a managed service provider (MSP) or multi-client IT services environment.
Excellent written and verbal communication skills, with the ability to explain technical issues, migration timelines, and service interruptions to non-technical stakeholders.
Strong organizational skills and attention to detail, particularly regarding technical documentation, project tracking, and migration planning.
Willingness and availability to participate in scheduled after-hours and weekend cutover windows.
At least one current Microsoft role-based certification or equivalent demonstrable professional experience. Relevant certifications include:
MS-102 – Microsoft 365 Administrator Expert.
SC-300 – Identity and Access Administrator.
MD-102 – Endpoint Administrator.
AZ-104 – Azure Administrator Associate.
AZ-800 / AZ-801 – Windows Server Hybrid Administrator.
MS-700 – Teams Administrator.
SC-200 – Security Operations Analyst.
Additional desirable qualifications:
Security and Compliance: Experience with Microsoft Purview, including Data Loss Prevention (DLP), retention policies, sensitivity labels, and eDiscovery; Defender for Office 365; Defender for Cloud Apps; Microsoft Secure Score remediation; CIS benchmarks; and compliance-related environments such as HIPAA or CMMC.
Privileged Identity Management: Familiarity with Microsoft Entra Privileged Identity Management (PIM), access reviews, and entitlement management.
Automation and Development: Experience with Power Automate, Power Apps, Azure Automation, Logic Apps, and advanced Microsoft Graph API scripting.
Backup and Business Continuity: Knowledge of Microsoft 365 backup and disaster recovery solutions such as Veeam, Datto, Dropsuite, Afi, Acronis, or Keepit.
Virtualization: Experience with VMware ESXi or Nutanix Acropolis.
Additional Platforms: Familiarity with AWS, Google Workspace administration, Egnyte, Citrix ShareFile, Cloudflare, and QuickBooks Online.
Apple Ecosystem: Experience managing macOS and iOS deployments, Apple Business Manager, Jamf, Mosyle, or Mac management through Intune.
Networking and Infrastructure: Knowledge of SonicWall and Fortinet firewalls, Cisco Meraki and Ubiquiti wireless solutions, and Cisco or Dell switching infrastructure.
Storage Technologies: Experience with QNAP, Synology, and Dell NAS environments, particularly as sources for data migrations.
MSP and IT Management Tools: Familiarity with ConnectWise Manage and Automate, Sention, Autotask, Kaseya, NinjaOne, Datto RMM, IT Glue, and Hudu.
Multi-Tenant Administration: Experience with Microsoft 365 administration platforms such as Nerdio, inforcer, and CIPP, as well as password management solutions such as Keeper and migration tools such as BitTitan.
Benefits:
Competitive annual salary ranging from ₹2,000,000 to ₹2,300,000.
Comprehensive health insurance coverage.
Employee wellness program with a focus on mental health and overall well-being.
Employee reward and recognition programs celebrating individual and team achievements.
Company incentive programs.
Attractive leave policy, including:
Holiday leave.
Paid annual leave and personal time off.
Maternity leave.
Paternity leave.
Birthday leave.
Bereavement leave.
Fully remote working opportunities, providing flexibility and location independence.
Strong emphasis on work-life balance and employee well-being.
Opportunities for professional development, continuous learning, and career advancement.
Exposure to international clients and complex Microsoft cloud, identity, and infrastructure projects.
Immigration support program for eligible employees interested in relocating to Canada.