Tier 3 Project Engineer (Azure/Microsoft 365)

Position Summary

The Tier 3 Project Engineer is a senior technical role responsible for designing, implementing, and delivering projects centered on Microsoft Azure and the Microsoft 365 ecosystem (Office 365, Entra ID, Intune). You will own projects end-to-end (discovery through deployment and handoff), troubleshoot complex technical issues, and collaborate closely with internal teams and client stakeholders in a fast-paced MSP environment.

This is a 100% remote position (no onsite travel required).

Key Responsibilities

• Lead delivery of Tier 3 projects including Azure and Microsoft 365 implementations, migrations, and modernization initiatives.
• Design and implement Azure solutions aligned with best practices (subscriptions/RBAC, core services, security, and Azure networking).
• Execute Microsoft 365 projects across Exchange Online, Share Point/One Drive, Teams, and tenant/security configuration.
• Design and implement identity solutions using Microsoft Entra ID (Azure AD): Conditional Access, MFA, SSO, role-based access, and hybrid identity scenarios where applicable.
• Implement endpoint management with Microsoft Intune: enrollment, compliance/configuration profiles, application deployment, Windows update rings, and Autopilot (where applicable).
• Serve as escalation for complex Azure/M365/identity/endpoint issues; perform root-cause analysis and document preventive actions.
• Troubleshoot networking issues impacting cloud services (DNS, DHCP, routing, VPNs, firewall/NAT, latency, certificates).
• Produce high-quality client-ready documentation: implementation plans, change/rollback plans, diagrams, configurations, and handoff notes.
• Mentor Tier 1–2 engineers and contribute to internal standards, runbooks, and knowledge base.

Required Qualifications (Must-Have)

• 5+ years of hands-on IT engineering experience (MSP experience strongly preferred).
• Very strong, current experience with:
  • Microsoft Azure
  • Microsoft 365 / Office 365
  • Microsoft Entra ID (Azure AD) (MFA, Conditional Access, SSO, RBAC)
  • Microsoft Intune (device management, compliance, policies, app deployment)
• Strong networking fundamentals and troubleshooting ability (TCP/IP, DNS, DHCP, VLANs, routing basics, VPNs, firewalls/NAT, certificates/PKI).
• Proven ability to lead and deliver projects end-to-end with strong documentation and change control discipline.
• Excellent communication skills in a remote-first environment.
• Microsoft 365 Certification Requirement: Candidates must have one of the following (active or earned within the last 24 months preferred):
  • Microsoft 365 Certified: Administrator Expert (preferred)
  • MS-102 (Microsoft 365 Administrator) plus at least one relevant associate-level Microsoft credential such as:
    • Endpoint Administrator Associate (Intune-focused)
    • Identity and Access Administrator Associate (Entra ID-focused)
• If not currently held, certification must be obtained within an agreed timeframe after hire (e.g., 90–180 days).

Preferred Qualifications (Nice-to-Have)

• Microsoft security experience (e.g., Defender for Endpoint/Office 365), Purview, and Azure security features.
• Azure Virtual Desktop (AVD) experience.
• Power Shell automation (Microsoft Graph familiarity a plus).
• Additional certifications (nice-to-have):
  • Azure Administrator / Azure Solutions Architect
  • Network+ / CCNA or equivalent networking background
  • Security+, SC-xxx, or similar