Project Engineer III Microsoft Cloud Specialization

Description

The Project Engineer III - (Microsoft Cloud Specialization) is a senior, hands-on engineer who assesses, designs, and delivers technology solutions for primarily small and mid-sized customers, including larger organizations with internal IT teams. The primary focus is Microsoft 365, Microsoft Entra , Microsoft Intune, Windows Autopilot, Azure, endpoint management, and automation. The role is not limited to Microsoft cloud solutions and requires strong networking, on-premises infrastructure, and hybrid-environment skills.

The engineer performs pre-sales assessments and solution architecture for existing customers, then owns the technical execution and quality of assigned projects within approved Statements of Work (SOWs) and project plans. Working with Project Managers, Sales and account teams, support and security teams, vendors, and client stakeholders, the engineer also helps establish standards and reusable solutions across the customer base and for the internal team.

Project Managers retain responsibility for project governance, schedule, budget, resources, change control, status reporting, and acceptance.

Other duties may be assigned to meet business needs.

• Existing-customer assessments and pre-sales architecture: Assess existing customer environments, identify technical gaps and improvement opportunities, and develop practical solution architectures and recommendations. Collaborate with Sales, account teams, and engineering leadership on options, technical designs, SOWs, effort estimates, dependencies, and risks before project approval.
• Project planning, delivery, and coordination: Own assigned technical work streams from implementation planning through completion. Define prerequisites, task sequencing, maintenance windows, estimates, and rollback plans; execute approved scope; and keep the Project Manager informed through accurate tasks, time entries, status, risks, and completion evidence. Escalate scope, schedule, budget, quality, or client-impact concerns promptly.
• Microsoft 365 and identity: Design, implement, and migrate Microsoft 365 and Microsoft Entra environments, including tenant configuration, Exchange Online and hybrid migrations, Teams, SharePoint, One Drive, Entra Join, hybrid identity, Entra Connect Sync or Cloud Sync, authentication, Conditional Access, MFA, passwordless access, and identity governance.
• Modern endpoint and application management: Design and implement Intune and Windows Autopilot solutions, including enrollment and join strategies, deployment profiles and device preparation, configuration and compliance policies, device filters and assignments, application packaging and deployment, Windows Update for Business or Windows Autopatch where licensed, and workstation lifecycle support.
• Azure infrastructure and virtual desktop: Design and implement Azure virtual machines, virtual networks, storage, private and site-to-site connectivity, monitoring, backup, and recovery. Deliver Azure Virtual Desktop and Windows 365 solutions when included in customer requirements and project scope.
• Networking and on-premises infrastructure: Design, implement, and troubleshoot routing, switching, VLANs, wireless, firewalls, VPNs, DNS/DHCP, Windows Server, Active Directory, virtualization, storage, and backup/recovery. Work across Meraki/Cisco, Ruckus, HP, and other supported platforms, including cross-vendor migrations and integration with Microsoft cloud services.
• Deployment and lifecycle automation: Build repeatable, low-touch desktop and cloud workflows using Power Shell, Microsoft Graph, Intune scripts and remediations, Azure CLI, Bicep or Terraform, Git, and platform APIs. Automate device registration, provisioning, dynamic group and policy assignments, application delivery, validation, redeployment, wipe, retirement, and infrastructure configuration wherever practical.
• Security and governance: Apply least privilege, RBAC, privileged access controls, Azure Policy, logging, and secure configuration standards across cloud and on-premises environments. Implement endpoint security baselines, Bit Locker, Windows LAPS, Defender integration, and Purview information-protection controls as applicable.
• Testing, cutover, and quality assurance: Obtain technical peer review of designs and material changes. Execute controlled changes with approved access, communication, backups, and rollback procedures. Record pre/post-change evidence for functionality, enrollment, applications,…