Senior Modern Workplace Engineer

The Senior Engineer is a hands-on modern workplace engineer responsible for building, configuring, and supporting Microsoft 365 and Microsoft Intune solutions with a strong emphasis on endpoint management, identity integration, and Zero Trust-aligned controls. This role executes scoped engineering work, troubleshoots complex issues and escalations, and contributes to operational readiness through documentation and runbooks. The position works under the direction of technical leads/architects (no direct technical leadership responsibilities) 

Key Responsibilities: 

• Engineering & Escalation Support: Own advanced troubleshooting for Microsoft 365 and Intune issues (enrollment, compliance, app deployment, Conditional Access impact, endpoint security policy conflicts). Perform root cause analysis, document findings, and implement corrective actions under change control.
• Collaboration & Handoffs: Work closely with onshore leads/architects, security, identity, messaging/collaboration, and networking teams to execute assigned work packages. Provide clear status updates, validate dependencies, and ensure smooth handoffs to operations and support teams.
• Project Delivery (Execution Focus): Deliver scoped engineering tasks aligned to project plans (policy implementation, testing, pilot support, remediation, and deployment activities). Track work items, raise risks early, and support cutovers and post-deployment stabilization to meet SLAs and project milestones.
• Microsoft 365 / Intune Configuration: Configure and support Microsoft Intune and core M365 services based on defined standards, including Entra ID integration, Conditional Access configurations, device enrollment (Windows Autopilot, ADE/DEP, Android Enterprise), compliance policies, configuration profiles, app deployment (Win32/LOB/store), Windows Update for Business, and lifecycle operations. Validate policy design through testing and assist with operational transition.
• Endpoint Security Controls: Implement and maintain endpoint security configurations including Intune security baselines, Microsoft Defender for Endpoint onboarding/configuration support, ASR rules, BitLocker/FileVault policies, local admin controls, and remediation of security findings. Assist with evidence gathering for audits and support incident response activities as needed.
• Documentation & Continuous Improvement: Create and maintain runbooks, SOPs, troubleshooting guides, and knowledge articles. Identify recurring issues and propose automation/standardization opportunities (PowerShell, Microsoft Graph) to improve reliability and reduce manual effort. 

Required Qualifications: 

• Experience: 6+ years in IT, with 3+ years focused on Microsoft 365 and/or endpoint management. Demonstrated experience supporting production environments, handling escalations, and executing project work with minimal supervision.
• Microsoft 365 / Endpoint Expertise: Strong hands-on administration experience with Microsoft 365 and Intune, including Entra ID, Conditional Access fundamentals, Intune device/app management, and M365 service operations (service health, incident management, and change control). Working knowledge of Exchange Online, Teams, SharePoint/OneDrive administration and common end-user issues.
• Modern Endpoint Management: Experience managing Windows (primary), and familiarity with macOS, iOS/iPadOS, and Android at scale. Hands-on work with Autopilot, configuration profiles, compliance policies, app packaging/deployment (Win32, LOB, store apps), and patch/update strategies (Windows Update for Business). Experience with troubleshooting enrollment and policy/app conflicts.
• Security & Compliance Knowledge: Practical experience implementing or supporting endpoint security controls (Defender for Endpoint, Intune endpoint security, BitLocker, ASR) and understanding of Zero Trust concepts (identity/device conditional access, least privilege). Ability to support audit requests and remediation activities in regulated environments.
• Automation & Scripting: Working PowerShell skills and familiarity with Microsoft Graph for reporting, bulk changes, and operational automation. Ability to read/modify scripts, troubleshoot failures, and follow secure coding practices.
• Soft Skills: Strong troubleshooting mindset, attention to detail, and clear written/verbal communication. Ability to document work thoroughly, collaborate across time zones, and manage multiple tickets/tasks while meeting SLAs.
• Certifications: Microsoft certifications are preferred.  Examples: MD-102 (Endpoint Administrator), MS-102 (Microsoft 365 Administrator), SC-300 (Identity and Access Administrator). 

Preferred Qualifications: 

• Advanced Troubleshooting & Platform Experience: Experience supporting hybrid identity and device environments (on-prem AD, Entra ID, Microsoft 365), including device registration (Entra join/hybrid join), SSO issues, and authentication troubleshooting. Exposure to logging/monitoring tools (e.g., Azure Monitor/Log Analytics) is a plus.
• Endpoint Ecosystem Familiarity: Familiarity with third-party endpoint/security tooling (e.g., Jamf, Workspace ONE, Ivanti, Okta, Duo, CrowdStrike) and how it integrates with Microsoft 365 and Intune environments.
• ITSM / Operations: Experience working within ITIL-aligned processes, including incident/problem management, change management, and using tools such as ServiceNow or similar ticketing platforms.
• Consulting / Microsoft Partner Experience: Prior consulting experience is a plus, particularly supporting delivery teams with implementation work, documentation, and support transition for M365/Intune engagements.