Microsoft 365 Engineer

Responsibilities

Microsoft 365 Administration & Operations

• Administer and optimise Microsoft 365 across the environment(s) including Exchange Online SharePoint Online OneDrive and Microsoft Teams.
• Maintain the health performance and configuration of environments monitoring service health and acting on issues proactively.
• Maintain accurate configuration baselines documentation and runbooks.
• Manage change in line with governance and ITIL processes ensuring changes are well-tested and clearly communicated.
• Monitor licensing capacity and adoption recommending cost and end-user experience improvements where appropriate.

Identity & Access Management

• Manage identity and access using Microsoft Entra ID including Conditional Access single sign-on MFA and privileged access controls.
• Implement and maintain identity governance aligned to the organisations security posture and regulatory obligations.
• Troubleshoot and resolve complex authentication access and directory synchronisation issues.
• Ensure identity configurations are consistent well-documented and aligned to platform standards.

Endpoint & Device Management

• Engineer device management and provisioning with Microsoft Intune and Windows Autopilot at scale.
• Build and maintain compliance configuration and application deployment policies across managed devices.
• Support and improve the end-user device experience reducing friction and manual effort wherever possible.
• Resolve complex endpoint issues escalated from the service desk across Windows and where applicable macOS and mobile.

Security & Compliance

• Implement and monitor security controls using Microsoft Defender Conditional Access and Microsoft Secure Score.
• Configure and maintain compliance capability in Microsoft Purview including data loss prevention retention and sensitivity labels.
• Align modern workplace configurations to relevant regulatory obligations (e.g. APRA CPS 234/230 ISO 27001 Essential Eight adjust to your industry context).
• Identify and remediate security and configuration risks.
• Contribute to incident response and post-incident improvement for modern workplace security events.

Project Delivery & Stakeholder Engagement

• Deliver Microsoft 365 projects migrations service rollouts tenant configuration and modern workplace transformations.
• Scope and plan work with stakeholders communicating clearly and managing expectations throughout delivery.
• Act as a trusted technical advisor translating business needs into practical well-governed modern workplace solutions.
• Manage competing priorities and context-switch effectively across environments/projects.
• Document and hand over delivered work so it can be supported consistently by the wider team.
• Build strong working relationships with IT and business stakeholders.

Automation & Continuous Improvement

• Build automation and reduce manual effort using PowerShell Microsoft Graph and the Power Platform.
• Identify opportunities to standardise and streamline modern workplace delivery.
• Contribute to the continuous improvement of standards tooling and ways of working.

Technical Escalation & Quality

• Act as an escalation point for complex modern workplace incidents.
• Maintain a high standard of quality in the configurations and solutions delivered and operated.
• Share knowledge and mentor service desk and support colleagues to lift overall team capability.

Role Boundaries
Accountable for: The quality security and consistency of the Microsoft 365 environment(s) engineered and supported spanning identity device collaboration security and compliance configuration and the resolution of complex escalated issues.
Not accountable for: Direct people management ownership of commercial relationships/contracts SLA ownership or the day-to-day running of the service desk (these sit with the relevant leads and managers).

Success Measures

• Microsoft 365 environments are secure well-configured and consistently maintained to organisational standards.
• Projects are delivered to scope on time and with minimal disruption to operations.
• Complex escalations are resolved efficiently with a reduction in recurring issues over time.
• Identity device and security configurations are consistent and well-documented.
• Stakeholders regard the engineer as a trusted responsive technical partner.
• Manual effort is reduced through effective automation and standardisation.
• Modern workplace configurations meet relevant regulatory and security obligations.
• Service desk and support colleagues are supported and up-skilled through knowledge sharing.
• Measurable improvement in the quality security and reliability of the modern workplace environment over time.

Skills and Experience

• 3 or more years engineering and supporting Microsoft 365 ideally in a managed service or multi-tenant environment.
• Strong hands-on experience with Microsoft Entra ID Intune Exchange Online Teams and SharePoint Online.
• Working knowledge of Microsoft 365 security and compliance tooling including Defender Conditional Access and Purview.
• Proficiency in PowerShell scripting and familiarity with Microsoft Graph for automation and reporting.
• Experience with Windows Autopilot and modern device provisioning at scale.
• Ability to manage competing priorities and context-switch across multiple environments/projects.
• Strong client-facing communication skills with the ability to document and explain technical decisions to varied audiences.
• Prior experience in an MSP consultancy or multi-tenant environment (highly regarded).
• Exposure to Azure infrastructure hybrid identity (Microsoft Entra Connect) and the Power Platform.
• Familiarity with regulated-industry frameworks such as ISO 27001 Essential Eight or sector-specific standards and relevant Microsoft certifications (highly regarded).