Systems Engineer II - Microsoft

BAYTREE HEADQUARTERS
8045 North Wickham Road
Melbourne, FL 32940, USA

Space Coast Credit Union (SCCU), the 3 rd largest credit union in Florida, is looking for a Systems Engineer II to join our ONESCCU team at our Melbourne Headquarters or Miramar Operations Center locations! SCCU has been in business for over 70 years, has over 9 billion dollars in assets and WE ARE GROWING!

Our Members are our top priority and we stand behind our Brand Promise:
Honest People, Trusted Products, Time Valued
. We offer a rich benefits package and career advancement opportunities.

This is a 6 month contract to hire.

• ONESCCU annual bonus available!
• Hybrid Work Options - Work from home up to 3 days a week.
• Flexible Schedule options!
• HSA (Health Savings Account) with SCCU matching contribution
• SCCU Paid Long Term and Short Term Disability coverage
• SCCU Paid Term Life Insurance
• Employee Assistance Program (EAP)
• Paid Time Off
• 401(K) Pre-Tax Savings Plan with SCCU match- 100% of the first 5% of employee contributions
• Tuition Reimbursement Program

SCCU Team Member financial discounts & perks (save money every month!):

• Loan Discounts - Mortgage, 2nd Mortgage, Auto, Motorcycle, Boat etc. / GAP coverage at half price
• Fixed low rate credit card-5.99%,if approved
• FREE
  Identify Theft Protection!
• No fee
  SCCU accounts

Salary Range:

$111,100 - $117,665

Purpose: The Microsoft Systems Engineer will design, build, implement, and maintain Space Coast Credit Union’s enterprise Microsoft platforms. This includes:

• Administering and optimizing On Premises Active Directory—with an emphasis on replication topology, Sites & Services, multi forest trust models, and CIS benchmark hardening.
• Engineering hybrid identity with Azure AD Connect / Entra Cloud Sync (Password Hash Sync, Pass through Authentication, and staging/swing migration), Hybrid Join, and Microsoft Entra  (SCIM, SAML 2.0, OAuth/OIDC, and Just In Time provisioning).
• Owning full lifecycle deployment of Intune MDM/MAM, Windows Autopilot, GPO to Intune configuration/compliance profile conversion, and endpoint protection with Microsoft Defender for Endpoint.
• Architecting, administering, and troubleshooting Proofpoint PPS/TAP secure mail gateways (DMARC / DKIM / SPF, malware & impersonation defense, smart host connectors, DLP, encryption).
• Supporting Microsoft 365 (Exchange Online, SharePoint Online, One Drive, Teams) and Azure IaaS/PaaS resources for resilient collaboration and messaging.

Principal Duties and Responsibilities:

• Active Directory Engineering – Administer multi site, multi forest AD DS; design replication, schema/forest upgrades, delegated OU structures, and PKI/CA integration.
• Hybrid Identity & Entra  – Plan, deploy, and maintain Azure AD Connect / Cloud Sync, Hybrid Join, Conditional Access, PIM, and SSO integrations
  
  IM, SAML, OAuth/OIDC).
• Intune / Autopilot / Endpoint Security – Build and maintain Intune tenant, migrate legacy GPOs to Intune, create Autopilot deployment rings, publish compliance & configuration profiles, implement Defender for Endpoint and Proactive Remediations.
• Proofpoint Administration – Install, configure, and tune PPS/TAP clusters; manage policies, mail flow connectors, quarantine, and threat intel; troubleshoot end to end message delivery.
• Microsoft 365 Services – Administer Exchange Online (hybrid mail flow, EOP), SharePoint Online, One Drive, and Teams retention/eDiscovery.
• Automation & Scripting – Develop Power Shell / Graph scripts for deployment, reporting, and proofpoint/intune automation; maintain CI/CD pipelines where applicable.
• Technical Support – Provide Tier III response and on call escalation for identity, device management, mail security, and collaboration platforms.
• Project Participation – Lead or contribute to IT projects, create charters, timelines, and deliverables, and coordinate with cross functional teams.
• Documentation – Produce and maintain high level/low level designs, runbooks, SOPs, and change control artifacts.
• Security & Compliance – Enforce SCCU security baselines and FFIEC/NCUA requirements; participate in audits and risk assessments.
• Vendor Liaison – Act as primary contact with Microsoft, Proofpoint, and other vendors for support cases, roadmap…