Senior Microsoft 365 Migration Engineer

Role Summary

We are looking for an experienced Microsoft 365 Migration Engineer to lead and deliver an enterprise migration from on-premises Microsoft workloads to Microsoft 365 with the first priority workload being Exchange (Exchange Online). This role will partner closely with infrastructure security and business stakeholders to plan and execute a secure compliant and low-disruption transition.

The ideal candidate has hands-on experience migrating Exchange and has strong capability across Active Directory (AD) and Microsoft Entra ID including hybrid identity configuration directory sync and authentication patterns. Experience using third-party migration tooling (e.g. MigrationWiz AvePoint Quest) is required to support structured migrations reporting and workload transition at scale.

Key Responsibilities

Microsoft 365 / Exchange Migration (Primary Focus)

• Lead the planning and execution of the Exchange on-prem Exchange Online migration strategy (hybrid or cutover based on requirements).
• Assess migration readiness including mailbox inventory/complexity network planning client readiness coexistence requirements and DNS strategy.
• Configure and manage Exchange hybrid components as required (mail routing connectors accepted domains Autodiscover migration endpoints certificates and TLS).
• Execute migration waves monitor progress and ensure minimal disruption to end-users.
• Troubleshoot and resolve migration issues (mail flow permissions Outlook profiles authentication device access).

Third-Party Migration Tools (Required)

• Plan and execute migrations using tools such as MigrationWiz AvePoint Quest or similar.
• Configure and manage migration projects including source/target tenant settings permissions endpoints service accounts pre-staging/delta sync and wave scheduling.
• Produce migration reporting for stakeholders including progress tracking exception handling and completion validation.
• Use tooling to enable repeatable migrations and reduce manual effort.

Identity: Active Directory Entra ID (Required)

• Own and maintain identity integration between on-prem AD and Microsoft Entra ID (Azure AD) including Azure AD Connect/Entra Connect.
• Support UPN alignment email address policy planning and user/group object hygiene.
• Implement secure authentication patterns (Modern Authentication MFA Conditional Access) in partnership with security teams.
• Ensure least-privilege access and appropriate auditing for privileged operations.

Security Compliance & Operational Readiness

• Ensure the migration approach aligns with banking-grade security expectations (secure credential handling access reviews separation of duties).
• Participate in change management processes (CAB/change windows) and document runbooks rollback plans and operational handover.
• Coordinate with service desk teams to ensure escalation paths and user support readiness during migration waves.

Required Skills & Experience

• 5 years experience in Microsoft infrastructure messaging and identity environments.
• Hands-on experience delivering Exchange migrations to Exchange Online.
• Hands-on experience with third-party migration tools such as MigrationWiz (BitTitan) AvePoint Quest or similar enterprise migration tooling.
• Strong working knowledge of Exchange Server (2016/2019 preferred) and Exchange Online.
• Strong knowledge of Active Directory (users groups DNS basics GPO awareness).
• Strong knowledge of Microsoft Entra ID (Azure AD) administration and identity concepts.
• Solid understanding of mail flow and DNS (MX Autodiscover SPF/DKIM/DMARC awareness).
• Experience with certificates TLS transport rules and connector configuration.
• Strong PowerShell skills (Exchange Microsoft 365 AD automation).
• Comfortable operating in structured enterprise environments (change control documentation compliance requirements).

Preferred / Nice-to-Have

• Experience migrating additional Microsoft 365 workloads (SharePoint Online OneDrive Microsoft Teams readiness).
• Familiarity with Microsoft security tooling (Defender for Office 365 Purview retention and eDiscovery concepts).
• Experience with legacy auth retirement and hybrid access patterns (modern auth rollout planning Azure AD Connect troubleshooting).

Deliverables & Outcomes

• Successful migration of the first workload: Exchange to Exchange Online.
• Stable hybrid identity foundation: AD Entra integration operating cleanly.
• Migration plans/runbooks established using repeatable tool-assisted processes.
• Clear reporting exception handling and operational handover to support teams.

What Success Looks Like (First 60 90 Days)

• Migration approach finalized and signed off (timeline risks dependencies).
• Identity readiness confirmed (directory sync and authentication model stable).
• Pilot migration executed using approved tooling with minimal user disruption.
• Migration waves planned with communications and support model in place.