Want to know if this job is worth applying to?
Colombo, Western Province, Sri Lanka
Onsite
We are seeking an experienced Senior Microsoft Engineer (Level 3) to serve as a technical authority within a high-performing operations team, supporting complex Microsoft cloud environments across multiple commercial customers.
This is a hands-on senior engineering role focused on resolving complex technical escalations, strengthening security standards, driving technology modernisation, and improving operational efficiency. You will leverage your expertise across Microsoft 365, Microsoft Intune, Microsoft Entra ID, Microsoft Defender, and Microsoft Azure to deliver secure, scalable, and reliable technology solutions.
Beyond reactive support, you will proactively identify opportunities to optimise customer environments, enhance security, improve licensing efficiency, and reduce operational complexity. You will also play a key role in mentoring engineers, establishing technical standards, and driving continuous improvement across the wider technical team.
You will be working with an established technology services provider that delivers managed IT services and Microsoft cloud solutions to commercial customers. The organisation prioritises security, operational excellence, and proactive technology management, empowering its technical teams to deliver reliable solutions while continuously improving customer environments.
Professional Experience
At least 7 years of experience in systems engineering, cloud engineering, or managed IT services, including significant experience in senior technical support or Level 3 engineering.
Proven experience working within a Managed Service Provider (MSP), supporting multiple commercial customer environments.
Strong understanding of managed services operations, incident management, problem management, and change management.
Demonstrated ability to own complex technical issues, conduct root-cause analysis, and deliver sustainable solutions.
Microsoft Intune & Endpoint Management
Advanced hands-on experience with Microsoft Intune and Microsoft Endpoint Manager.
Strong knowledge of Windows Autopilot, device enrolment, configuration profiles, compliance policies, application deployment, and Windows 10/11 administration.
Experience with endpoint security, device lifecycle management, update management, and Microsoft Defender for Endpoint integration.
Microsoft 365
Advanced administration and troubleshooting experience across Microsoft 365, including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams.
Knowledge of Microsoft 365 licensing, including Business Premium, E3, and E5, and their associated security and compliance capabilities.
Understanding of Microsoft Purview, including Data Loss Prevention (DLP) policies and sensitivity labels.
Microsoft Entra ID & Identity Security
Deep expertise in identity and access management, authentication, identity protection, and access governance.
Advanced experience implementing and troubleshooting Conditional Access, multifactor authentication (MFA), and Single Sign-On (SSO).
Knowledge of hybrid identity, Entra Connect, directory synchronisation, authentication protocols, role-based access control, and least-privilege security models.
Familiarity with Granular Delegated Admin Privileges (GDAP) and delegated administration across multiple customer tenants.
Microsoft Defender & Cybersecurity
Strong hands-on experience with Microsoft Defender for Endpoint and the broader Microsoft Defender security ecosystem.
Experience implementing endpoint protection, attack surface reduction, vulnerability management, and security policies.
Knowledge of Microsoft Defender for Office 365, Microsoft Defender XDR, Zero Trust principles, and Microsoft security best practices.
Ability to review Microsoft Secure Score and implement recommendations to strengthen security posture.
Microsoft Azure
Strong experience administering and troubleshooting Azure environments, including virtual machines, networking, storage, backup, monitoring, and resource management.
Knowledge of Azure role-based access control, Azure Policy, security configuration, governance, and cost management.
Familiarity with Azure Lighthouse and multi-tenant Azure administration.
Scripting & Automation
Advanced PowerShell scripting skills for automating Microsoft 365, Intune, Entra ID, and Azure administration.
Strong experience with Microsoft Graph API for automation, reporting, and configuration management.
Ability to develop, troubleshoot, and maintain secure, reusable, and well-documented scripts and automated processes.
Security Frameworks & Additional Technical Knowledge
Familiarity with the Australian Signals Directorate (ASD) Essential Eight framework and its application to commercial environments.
Experience implementing Microsoft security controls to support Essential Eight maturity improvements.
Exposure to Microsoft Sentinel, Log Analytics, advanced security monitoring, and broader Microsoft Purview compliance capabilities.
Familiarity with multi-tenant management platforms, including Microsoft 365 Lighthouse, Azure Lighthouse, and PSA/RMM tools such as ConnectWise, HaloPSA, Autotask, NinjaOne, or Datto RMM.
Experience contributing to customer technology roadmaps, security improvement plans, and Microsoft licensing reviews.
Understanding of ITIL-aligned service management practices.
Preferred Certifications
Microsoft Certified: Endpoint Administrator Associate (MD-102).
Microsoft 365 Certified: Administrator Expert (MS-102).
Microsoft Certified: Azure Administrator Associate (AZ-104).
Additional certifications in identity and access management, such as SC-300, and Azure security, such as SC-500, are advantageous. Equivalent practical experience and technical knowledge are also valued.
Key Competencies
Technical Expertise: Applies in-depth Microsoft technology knowledge to resolve complex engineering challenges independently.
Ownership & Accountability: Takes responsibility for issues from investigation through resolution and addresses recurring problems at their source.
Proactive Thinking: Identifies opportunities to modernise environments, improve security, and prevent recurring incidents.
Analytical Problem-Solving: Uses structured troubleshooting and evidence-based analysis to develop sustainable solutions.
Security-Focused Mindset: Maintains secure, consistent, and well-governed Microsoft environments.
Communication & Collaboration: Communicates technical concepts, risks, and recommendations clearly to technical and non-technical stakeholders.
Mentoring & Knowledge Sharing: Supports the development of junior engineers and contributes to a collaborative technical culture.
Documentation & Continuous Improvement: Maintains high-quality documentation and continually improves technical standards, processes, and automation.
1. Level 3 Technical Escalation & Problem Management
Serve as the primary escalation point for complex incidents across Microsoft Intune, Microsoft 365, Entra ID, Microsoft Defender, and Azure.
Diagnose and resolve advanced issues involving endpoint management, identity, authentication, security, cloud infrastructure, and Microsoft services.
Lead root-cause analysis and problem management to identify recurring issues and implement permanent solutions.
Manage complex technical problems through to resolution, coordinating with Microsoft Support and third-party vendors when necessary.
Develop preventative measures to reduce recurring incidents and improve customer experience.
Provide technical guidance and troubleshooting support to Level 1 and Level 2 engineers.
2. Microsoft Security & Configuration Standards
Establish, maintain, and continuously improve Microsoft security and configuration baselines across customer environments.
Standardise configurations across Intune, Microsoft 365, Entra ID, Microsoft Defender, and Azure.
Implement and optimise Conditional Access, MFA, endpoint protection, device compliance, and privileged access controls.
Monitor environments for configuration drift, security vulnerabilities, and deviations from approved standards.
Identify security improvements using Microsoft Secure Score, Defender recommendations, and established security frameworks.
Support the implementation of Microsoft security best practices and, where applicable, ASD Essential Eight controls.
3. Proactive Technology Modernisation & Optimisation
Monitor Microsoft product updates, roadmap changes, feature releases, deprecations, and security advisories.
Assess platform changes and recommend actions to maintain security, compatibility, and operational effectiveness.
Identify opportunities to modernise infrastructure, enhance endpoint management, strengthen security, and optimise Microsoft licensing.
Maximise the value of existing Microsoft licensing entitlements while reducing unnecessary expenditure.
Prepare structured technical recommendations outlining issues, proposed improvements, business benefits, risks, and implementation considerations.
Collaborate with account management teams to support proactive customer engagement and technology roadmap planning.
Promote standardisation across customer environments to reduce operational complexity.
4. Multi-Tenant Microsoft Environment Management
Administer and support multiple commercial customer environments using Microsoft multi-tenant management tools and processes.
Manage delegated administrative access through GDAP and maintain appropriate permissions and governance controls.
Use Microsoft 365 Lighthouse and Azure Lighthouse to improve visibility, security, and administration across customer tenants.
Conduct tenant security reviews, compliance assessments, and configuration improvements.
Identify opportunities to improve the scalability, consistency, and efficiency of multi-tenant operations.
5. Automation & Operational Efficiency
Develop and maintain PowerShell scripts and Microsoft Graph API integrations to automate administrative and support activities.
Identify repetitive tasks across Microsoft 365, Intune, Entra ID, and Azure that can be streamlined through automation.
Build reusable automation for standardised configuration, reporting, monitoring, and remediation.
Improve the reliability and efficiency of customer environment management through automation and process standardisation.
Document automation solutions to ensure they are secure, maintainable, and accessible to the wider technical team.
6. Technical Leadership & Knowledge Development
Mentor Level 1 and Level 2 engineers, strengthening their troubleshooting capabilities and Microsoft platform knowledge.
Develop and maintain technical runbooks, standard operating procedures, troubleshooting guides, and knowledge base articles.
Conduct peer reviews of technical changes, scripts, and configurations to ensure quality, consistency, and security.
Lead knowledge-sharing initiatives and contribute to the professional development of the Operations team.
Identify skills gaps and recommend opportunities to strengthen technical capabilities.
Promote technical ownership, proactive problem-solving, continuous improvement, and high-quality documentation.
7. Change Management & Technical Risk Assessment
Assess proposed technical changes across customer Microsoft environments, identifying security, availability, operational, and customer risks.
Review change requests and validate implementation plans, testing requirements, dependencies, and rollback procedures.
Ensure changes are appropriately assessed, documented, and controlled through established change management processes.
Conduct technical peer reviews and recommend measures to minimise implementation risks.
Support post-change reviews and apply lessons learned to improve future change activities.
š° Get paid in Australian Dollars
š„ Medical insurance from day one for you + spouse (or parents if unmarried)
š©ŗ Generous OPD coverage from doctor visits to all your medical needs
š” Home office setup allowance to build your ideal workspace
š Internet allowance to keep you connected
šŖ Gym & wellness allowance to stay fit and balanced
š Work hard, play hard ā regular team events & engagement activities
š§ Diji Assist ā Mental health & counseling support when you need it
š We invest in you ā reimbursement for industry certifications
š£ļø Open-door culture ā your ideas and feedback always matter
š Flexible work ā home or office, wherever you do your best work
š Rewards & recognition that actually recognize you
š„³ Great christmas & financial year-end parties to unwind with your loved ones
.jpg?1732270634){kind=logo}
