Systems Engineer; Tier 2

We are seeking a hands-on IT Systems Engineer (Tier 2 Support)to support and enhance our Microsoft-based digital workplace environment. This role serves as a key escalation point for endpoint, identity, access, and Microsoft 365-related issues while helping drive operational excellence across user technologies and enterprise systems.

The ideal candidate has strong experience with Microsoft Intune, Entra , Active Directory, Microsoft 365, Autopilot, endpoint security, and device lifecycle management
, along with a passion for problem-solving and improving the employee technology experience.

This position offers a blend of daily operational support, engineering initiatives, automation opportunities, and project work within a highly collaborative IT environment.

• Administer and support Microsoft 365, Entra , Active Directory, Intune, and Windows endpoint environments.
• Manage device provisioning, enrollment, compliance, patching, software deployment, and endpoint lifecycle processes.
• Support Windows Autopilot deployments and device refresh initiatives.
• Troubleshoot and resolve escalated endpoint, identity, authentication, and access-management issues.
• Administer user provisioning, RBAC, group memberships, MFA configurations, and Conditional Access policies.
• Support Microsoft Teams, Exchange Online, SharePoint Online, One Drive, and related M365 services.
• Assist with endpoint security initiatives including Bit Locker, Defender, device compliance, and vulnerability remediation.
• Develop and maintain Power Shell scripts to automate administrative and operational tasks.
• Support core networking services including DNS, DHCP, VPN connectivity, wireless networking, and TCP/IP troubleshooting.
• Participate in infrastructure and digital workplace projects while continuously improving processes and documentation.
• Create and maintain technical documentation, standard operating procedures, and knowledge base articles.

• 3+ years of experience in Systems Administration, Endpoint Administration, Desktop Engineering, Technical Support Engineering, or a similar role.
• Strong hands-on experience with:
  • Microsoft Intune
  • Windows Autopilot
  • Microsoft Entra  (Azure AD)
  • Microsoft 365 Administration
  • Active Directory
  • Multi-Factor Authentication (MFA)
  • Conditional Access
  • Endpoint Security & Compliance
  • Power Shell
  • Endpoint Deployment & Software Distribution
  • Service Now or similar ITSM platform
• Strong troubleshooting skills across Windows endpoint, identity, authentication, and Microsoft 365 environments.
• Experience supporting enterprise endpoint environments and distributed user populations.
• Excellent communication, documentation, and customer service skills.
• Ability to prioritize and manage multiple initiatives in a fast-paced environment.

• Experience with:
  • Microsoft Defender
  • SCCM / MECM
  • JAMF
  • Veeam
  • Meraki
  • Azure administration
  • Endpoint vulnerability remediation
• Microsoft certifications such as:
  • Microsoft Endpoint Administrator Associate
  • Azure Administrator Associate (AZ-104)
  • Microsoft 365 Administrator
  • Microsoft Certified:
    Identity and Access Administrator
• Security+, Network+, or similar certifications.
• Experience supporting hybrid cloud environments.

• Becomes a trusted escalation resource for endpoint, Microsoft 365, and identity-related issues.
• Delivers a seamless onboarding, offboarding, and device management experience.
• Maintains secure, compliant, and properly managed endpoint environments.
• Automates repetitive tasks and identifies opportunities for operational improvement.
• Contributes to technical projects while providing exceptional support to employees across the organization.