Senior Microsoft Engineer (Level 3) | Azure | M365 | Security

About the Role

We are seeking an experienced Senior Microsoft Engineer (Level 3) to serve as a technical authority within a high-performing operations team, supporting complex Microsoft cloud environments across multiple commercial customers.

This is a hands-on senior engineering role focused on resolving complex technical escalations, strengthening security standards, driving technology modernisation, and improving operational efficiency. You will leverage your expertise across Microsoft 365, Microsoft Intune, Microsoft Entra ID, Microsoft Defender, and Microsoft Azure to deliver secure, scalable, and reliable technology solutions.

Beyond reactive support, you will proactively identify opportunities to optimise customer environments, enhance security, improve licensing efficiency, and reduce operational complexity. You will also play a key role in mentoring engineers, establishing technical standards, and driving continuous improvement across the wider technical team.

About the Client

You will be working with an established technology services provider that delivers managed IT services and Microsoft cloud solutions to commercial customers. The organisation prioritises security, operational excellence, and proactive technology management, empowering its technical teams to deliver reliable solutions while continuously improving customer environments.

Ideal Profile

Professional Experience

At least 7 years of experience in systems engineering, cloud engineering, or managed IT services, including significant experience in senior technical support or Level 3 engineering.

Proven experience working within a Managed Service Provider (MSP), supporting multiple commercial customer environments.

Strong understanding of managed services operations, incident management, problem management, and change management.

Demonstrated ability to own complex technical issues, conduct root-cause analysis, and deliver sustainable solutions.

Microsoft Intune & Endpoint Management

Advanced hands-on experience with Microsoft Intune and Microsoft Endpoint Manager.

Strong knowledge of Windows Autopilot, device enrolment, configuration profiles, compliance policies, application deployment, and Windows 10/11 administration.

Experience with endpoint security, device lifecycle management, update management, and Microsoft Defender for Endpoint integration.

Microsoft 365

Advanced administration and troubleshooting experience across Microsoft 365, including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams.

Knowledge of Microsoft 365 licensing, including Business Premium, E3, and E5, and their associated security and compliance capabilities.

Understanding of Microsoft Purview, including Data Loss Prevention (DLP) policies and sensitivity labels.

Microsoft Entra ID & Identity Security

Deep expertise in identity and access management, authentication, identity protection, and access governance.

Advanced experience implementing and troubleshooting Conditional Access, multifactor authentication (MFA), and Single Sign-On (SSO).

Knowledge of hybrid identity, Entra Connect, directory synchronisation, authentication protocols, role-based access control, and least-privilege security models.

Familiarity with Granular Delegated Admin Privileges (GDAP) and delegated administration across multiple customer tenants.

Microsoft Defender & Cybersecurity

Strong hands-on experience with Microsoft Defender for Endpoint and the broader Microsoft Defender security ecosystem.

Experience implementing endpoint protection, attack surface reduction, vulnerability management, and security policies.

Knowledge of Microsoft Defender for Office 365, Microsoft Defender XDR, Zero Trust principles, and Microsoft security best practices.

Ability to review Microsoft Secure Score and implement recommendations to strengthen security posture.

Microsoft Azure

Strong experience administering and troubleshooting Azure environments, including virtual machines, networking, storage, backup, monitoring, and resource management.

Knowledge of Azure role-based access control, Azure Policy, security configuration, governance, and cost management.

Familiarity with Azure Lighthouse and multi-tenant Azure administration.

Scripting & Automation

Advanced PowerShell scripting skills for automating Microsoft 365, Intune, Entra ID, and Azure administration.

Strong experience with Microsoft Graph API for automation, reporting, and configuration management.

Ability to develop, troubleshoot, and maintain secure, reusable, and well-documented scripts and automated processes.

Security Frameworks & Additional Technical Knowledge

Familiarity with the Australian Signals Directorate (ASD) Essential Eight framework and its application to commercial environments.

Experience implementing Microsoft security controls to support Essential Eight maturity improvements.

Exposure to Microsoft Sentinel, Log Analytics, advanced security monitoring, and broader Microsoft Purview compliance capabilities.

Familiarity with multi-tenant management platforms, including Microsoft 365 Lighthouse, Azure Lighthouse, and PSA/RMM tools such as ConnectWise, HaloPSA, Autotask, NinjaOne, or Datto RMM.

Experience contributing to customer technology roadmaps, security improvement plans, and Microsoft licensing reviews.

Understanding of ITIL-aligned service management practices.

Preferred Certifications

Microsoft Certified: Endpoint Administrator Associate (MD-102).

Microsoft 365 Certified: Administrator Expert (MS-102).

Microsoft Certified: Azure Administrator Associate (AZ-104).

Additional certifications in identity and access management, such as SC-300, and Azure security, such as SC-500, are advantageous. Equivalent practical experience and technical knowledge are also valued.

Key Competencies

Technical Expertise: Applies in-depth Microsoft technology knowledge to resolve complex engineering challenges independently.

Ownership & Accountability: Takes responsibility for issues from investigation through resolution and addresses recurring problems at their source.

Proactive Thinking: Identifies opportunities to modernise environments, improve security, and prevent recurring incidents.

Analytical Problem-Solving: Uses structured troubleshooting and evidence-based analysis to develop sustainable solutions.

Security-Focused Mindset: Maintains secure, consistent, and well-governed Microsoft environments.

Communication & Collaboration: Communicates technical concepts, risks, and recommendations clearly to technical and non-technical stakeholders.

Mentoring & Knowledge Sharing: Supports the development of junior engineers and contributes to a collaborative technical culture.

Documentation & Continuous Improvement: Maintains high-quality documentation and continually improves technical standards, processes, and automation.

Responsibilities

1. Level 3 Technical Escalation & Problem Management

Serve as the primary escalation point for complex incidents across Microsoft Intune, Microsoft 365, Entra ID, Microsoft Defender, and Azure.

Diagnose and resolve advanced issues involving endpoint management, identity, authentication, security, cloud infrastructure, and Microsoft services.

Lead root-cause analysis and problem management to identify recurring issues and implement permanent solutions.

Manage complex technical problems through to resolution, coordinating with Microsoft Support and third-party vendors when necessary.

Develop preventative measures to reduce recurring incidents and improve customer experience.

Provide technical guidance and troubleshooting support to Level 1 and Level 2 engineers.

2. Microsoft Security & Configuration Standards

Establish, maintain, and continuously improve Microsoft security and configuration baselines across customer environments.

Standardise configurations across Intune, Microsoft 365, Entra ID, Microsoft Defender, and Azure.

Implement and optimise Conditio