Senior Project Engineer - Azure​/M365

Tier 3 Project Engineer (Azure/Microsoft 365) — Remote Position Summary

The Tier 3 Project Engineer is a senior technical role responsible for designing, implementing, and delivering projects centered on Microsoft Azure and the Microsoft 365 ecosystem (Office 365, Entra , Intune). You will own projects end-to-end (discovery through deployment and handoff), troubleshoot complex technical issues, and collaborate closely with internal teams and client stakeholders in a fast‑paced MSP environment.

This is a 100% remote position (no onsite travel required).

• Lead delivery of Tier 3 projects including Azure and Microsoft 365 implementations, migrations, and modernization initiatives.
• Design and implement Azure solutions aligned with best practices (subscriptions/RBAC, core services, security, and Azure networking).
• Execute Microsoft 365 projects across Exchange Online, SharePoint/One Drive, Teams, and tenant/security configuration.
• Design and implement identity solutions using Microsoft Entra  (Azure AD):
  Conditional Access, MFA, SSO, role‑based access, and hybrid identity scenarios where applicable.
• Implement endpoint management with Microsoft Intune: enrollment, compliance/configuration profiles, application deployment, Windows update rings, and Autopilot (where applicable).
• Serve as escalation for complex Azure/M365/identity/endpoint issues; perform root‑cause analysis and document preventive actions.
• Troubleshoot networking issues impacting cloud services (DNS, DHCP, routing, VPNs, firewall/NAT, latency, certificates).
• Produce high‑quality client‑ready documentation: implementation plans, change/rollback plans, diagrams, configurations, and handoff notes.
• Mentor Tier 1–2 engineers and contribute to internal standards, runbooks, and knowledge base.

• 5+ years of hands‑on IT engineering experience (MSP experience strongly preferred).
• Very strong, current experience with:
  • Microsoft Azure
  • Microsoft 365 / Office 365
  • Microsoft Entra  (Azure AD) (MFA, Conditional Access, SSO, RBAC)
  • Microsoft Intune (device management, compliance, policies, app deployment)
• Strong networking fundamentals and troubleshooting ability (TCP/IP, DNS, DHCP, VLANs, routing basics, VPNs, firewalls/NAT, certificates/PKI).
• Proven ability to lead and deliver projects end‑to‑end with strong documentation and change control discipline.
• Excellent communication skills in a remote‑first environment.

Candidates must have one of the following (active or earned within the last 24 months preferred):

• Microsoft 365 Certified:
  Administrator Expert (preferred), or
• MS-102 (Microsoft 365 Administrator) plus at least one relevant associate‑level Microsoft credential such as:
  • Endpoint Administrator Associate (Intune‑focused), and/or
  • Identity and Access Administrator Associate (Entra ‑focused)

If not currently held, certification must be obtained within an agreed timeframe after hire (e.g., 90–180 days).

• Microsoft security experience (e.g., Defender for Endpoint/Office 365), Purview, and Azure security features.
• Azure Virtual Desktop (AVD) experience.
• Power Shell automation (Microsoft Graph familiarity a plus).
• Additional certifications (nice‑to‑have):
  • Azure Administrator / Azure Solutions Architect
• Network+ / CCNA or equivalent networking background
• Security+, SC-xxx, or similar