Project Engineer

Accountabilities

Microsoft 365 and Cloud Migrations:

• Plan and execute end-to-end mailbox, tenant-to-tenant, file, and Active Directory domain migrations using appropriate migration tools.
• Manage every migration phase, including discovery, assessment, pilot groups, cutover planning, execution, and post-migration support.
• Establish migration downtime windows and rollback criteria with clients, ensuring agreed procedures are followed throughout the transition.
• Reconcile migrated data and workloads against original inventories, investigate discrepancies, and ensure data integrity.
• Execute migrations involving Exchange Online, Google Workspace, IMAP, SharePoint Online, OneDrive, Teams, file servers, NAS environments, and Active Directory domains.

Microsoft 365 and Identity Administration:

• Configure, administer, and maintain Microsoft 365 environments across multiple client tenants.
• Manage Exchange Online, including mail flow, connectors, transport rules, shared mailboxes, delegation, message tracing, and retention settings.
• Administer SharePoint Online, OneDrive, and Microsoft Teams, including site provisioning, permissions, sharing policies, guest access, and synchronization troubleshooting.
• Manage Microsoft Entra ID, including users, groups, administrative roles, dynamic groups, and group-based licensing.
• Configure and troubleshoot Entra Connect Sync and Cloud Sync, hybrid identity environments, device joins, Conditional Access, MFA, and self-service password reset.
• Implement enterprise application integrations and single sign-on using SAML and OIDC protocols.

Azure Infrastructure and Endpoint Management:

• Deploy and maintain Azure infrastructure, including virtual machines, virtual networks, Network Security Groups, public IP addresses, and site-to-site VPN connections.
• Configure and manage Azure Files, Azure Backup, Recovery Services vaults, and Azure Virtual Desktop environments where required.
• Administer Azure subscriptions, resource groups, role-based access control (RBAC), and basic cloud cost management.
• Manage client endpoints through Microsoft Intune, including Windows Autopilot enrollment, device compliance, configuration profiles, application packaging, and deployment.
• Implement endpoint security policies covering BitLocker, Microsoft Defender for Endpoint, device updates, and Windows Update for Business.
• Support device enrollment and management across Windows, Apple, and Android environments, including BYOD and co-management scenarios.

Windows Server, Networking, and Automation:

• Administer Windows Server environments and Active Directory Domain Services, including DNS, DHCP, Group Policy, and file and print services.
• Configure and maintain Hyper-V environments and support hybrid infrastructure requirements.
• Develop, modify, and execute PowerShell scripts to automate bulk operations across Exchange Online, Microsoft Graph, and Entra ID.
• Troubleshoot synchronization, identity, networking, infrastructure, and migration-related issues across client environments.

Project Delivery and Client Communication:

• Independently manage approximately two to five concurrent client projects at different stages, taking responsibility for technical execution and delivery.
• Coordinate with senior engineers and architects when architectural decisions or complex technical escalations are required.
• Prepare detailed as-built documentation and maintain accurate technical records within IT Glue.
• Provide structured handovers and technical briefings to service desk teams to ensure smooth ongoing support.
• Maintain accurate project timelines, time records, and status updates within the relevant professional services automation (PSA) platform.
• Participate in client meetings to explain technical changes, migration schedules, potential service interruptions, and project progress.
• Ensure projects are delivered according to agreed scope, timelines, quality standards, and client expectations.
• Support scheduled after-hours and weekend migration activities when required.

Requirements:

• Between 5 and 10 years of overall IT experience, including at least 2 years of hands-on Microsoft 365 and Entra ID administration across multiple organizations or client tenants.
• Demonstrable experience personally executing at least five migrations, covering mailbox, tenant-to-tenant, file, or Active Directory domain migrations. Candidates should be able to identify the migration tools and methodologies used.
• Strong practical knowledge of Microsoft 365 administration, including Exchange Online, mail flow, connectors, transport rules, shared mailboxes, delegation, message tracing, and retention fundamentals.
• Good understanding of email DNS configuration, including MX, SPF, DKIM, DMARC, Autodiscover, and DNS TTL considerations during migration cutovers.
• Hands-on experience with SharePoint Online, OneDrive, and Microsoft Teams, including site and library creation, permission inheritance, sharing policies, guest access, and synchronization troubleshooting.
• Strong knowledge of Microsoft Entra ID, including user and group administration, dynamic groups, administrative roles, organizational units, Entra Connect Sync, Cloud Sync, and hybrid identity configurations.
• Experience configuring Conditional Access policies, MFA, self-service password reset, hybrid and cloud device joins, and enterprise application authentication using SAML or OIDC.
• Practical Azure administration experience, including virtual machines, virtual networks, NSGs, public IPs, site-to-site VPNs, Azure Files, Azure Backup, Recovery Services vaults, and basic Azure Virtual Desktop administration.
• Understanding of Azure subscriptions, resource groups, RBAC, and cloud resource cost management.
• Strong Microsoft Intune expertise, including Windows Autopilot, co-management, BYOD, Apple and Android enrollment, compliance policies, configuration profiles, and the Settings Catalog.
• Experience packaging and deploying Win32 applications using the .intunewin format, as well as managing Microsoft Store and line-of-business applications.
• Knowledge of endpoint security management, including BitLocker policies, Defender for Endpoint onboarding, update rings, and Windows Update for Business.
• Demonstrable migration experience in at least two of the following areas:
  • On-premises Exchange to Exchange Online using cutover, staged, or hybrid migration approaches and the Hybrid Configuration Wizard.
  • Tenant-to-tenant Microsoft 365 migrations following acquisitions, divestitures, or organizational rebranding.
  • Google Workspace or IMAP migrations to Microsoft 365.
  • File server or NAS migrations to SharePoint Online, OneDrive, or Teams.
  • Active Directory domain migration or consolidation using tools and techniques such as ADMT, SID history, forest trusts, UPN suffix changes, and workstation re-domain processes.
  • Migration from another mobile device management (MDM) platform to Intune.
• Strong Windows Server and Active Directory Domain Services experience, including DNS, DHCP, Group Policy, file and print services, and Hyper-V administration.
• Practical PowerShell scripting skills, with the ability to read, modify, troubleshoot, and develop scripts for Exchange Online, Microsoft Graph, and Entra ID rather than simply executing existing scripts.
• Experience working in fully remote teams and managing multiple client engagements, preferably within a managed service provider (MSP) or multi-client IT services environment.
• Excellent written and verbal communication skills, with the ability to explain technical issues, migration timelines, and service interruptions to non-technical stakeholders.
• Strong organizational skills and attention to detail, particularly regarding technical documentation, project tracking, and migration planning.
• Willingness and availability to participate in scheduled after-hours and weekend cutover windows.
• At least one current Microsoft role-based certification or equivalent demonstrable professional experience. Relevant certifications include:
  • MS-102 – Microsoft 365 Administrator Expert.
  • SC-300 – Identity and Access Administrator.
  • MD-102 – Endpoint Administrator.
  • AZ-104 – Azure Administrator Associate.
  • AZ-800 / AZ-801 – Windows Server Hybrid Administrator.
  • MS-700 – Teams Administrator.
  • SC-200 – Security Operations Analyst.

Additional desirable qualifications:

• Security and Compliance: Experience with Microsoft Purview, including Data Loss Prevention (DLP), retention policies, sensitivity labels, and eDiscovery; Defender for Office 365; Defender for Cloud Apps; Microsoft Secure Score remediation; CIS benchmarks; and compliance-related environments such as HIPAA or CMMC.
• Privileged Identity Management: Familiarity with Microsoft Entra Privileged Identity Management (PIM), access reviews, and entitlement management.
• Automation and Development: Experience with Power Automate, Power Apps, Azure Automation, Logic Apps, and advanced Microsoft Graph API scripting.
• Backup and Business Continuity: Knowledge of Microsoft 365 backup and disaster recovery solutions such as Veeam, Datto, Dropsuite, Afi, Acronis, or Keepit.
• Virtualization: Experience with VMware ESXi or Nutanix Acropolis.
• Additional Platforms: Familiarity with AWS, Google Workspace administration, Egnyte, Citrix ShareFile, Cloudflare, and QuickBooks Online.
• Apple Ecosystem: Experience managing macOS and iOS deployments, Apple Business Manager, Jamf, Mosyle, or Mac management through Intune.
• Networking and Infrastructure: Knowledge of SonicWall and Fortinet firewalls, Cisco Meraki and Ubiquiti wireless solutions, and Cisco or Dell switching infrastructure.
• Storage Technologies: Experience with QNAP, Synology, and Dell NAS environments, particularly as sources for data migrations.
• MSP and IT Management Tools: Familiarity with ConnectWise Manage and Automate, Sention, Autotask, Kaseya, NinjaOne, Datto RMM, IT Glue, and Hudu.
• Multi-Tenant Administration: Experience with Microsoft 365 administration platforms such as Nerdio, inforcer, and CIPP, as well as password management solutions such as Keeper and migration tools such as BitTitan.

Benefits:

• Competitive annual salary ranging from ₹2,000,000 to ₹2,300,000.
• Comprehensive health insurance coverage.
• Employee wellness program with a focus on mental health and overall well-being.
• Employee reward and recognition programs celebrating individual and team achievements.
• Company incentive programs.
• Attractive leave policy, including:
  • Holiday leave.
  • Paid annual leave and personal time off.
  • Maternity leave.
  • Paternity leave.
  • Birthday leave.
  • Bereavement leave.
• Fully remote working opportunities, providing flexibility and location independence.
• Strong emphasis on work-life balance and employee well-being.
• Opportunities for professional development, continuous learning, and career advancement.
• Exposure to international clients and complex Microsoft cloud, identity, and infrastructure projects.
• Immigration support program for eligible employees interested in relocating to Canada.