Microsoft 365 Engineer

Responsibilities

Microsoft 365 Administration & Operations

• Administer and optimise Microsoft 365 across the environment(s), including Exchange Online, SharePoint Online, OneDrive and Microsoft Teams.
• Maintain the health, performance and configuration of environments, monitoring service health and acting on issues proactively.
• Maintain accurate configuration baselines, documentation and runbooks.
• Manage change in line with governance and ITIL processes, ensuring changes are well-tested and clearly communicated.
• Monitor licensing, capacity and adoption, recommending cost and end-user experience improvements where appropriate.

Identity & Access Management

• Manage identity and access using Microsoft Entra ID, including Conditional Access, single sign-on, MFA and privileged access controls.
• Implement and maintain identity governance aligned to the organisation's security posture and regulatory obligations.
• Troubleshoot and resolve complex authentication, access and directory synchronisation issues.
• Ensure identity configurations are consistent, well-documented and aligned to platform standards.

Endpoint & Device Management

• Engineer device management and provisioning with Microsoft Intune and Windows Autopilot at scale.
• Build and maintain compliance, configuration and application deployment policies across managed devices.
• Support and improve the end-user device experience, reducing friction and manual effort wherever possible.
• Resolve complex endpoint issues escalated from the service desk across Windows and, where applicable, macOS and mobile.

Security & Compliance

• Implement and monitor security controls using Microsoft Defender, Conditional Access and Microsoft Secure Score.
• Configure and maintain compliance capability in Microsoft Purview, including data loss prevention, retention and sensitivity labels.
• Align modern workplace configurations to relevant regulatory obligations (e.g. APRA CPS 234/230, ISO 27001, Essential Eight — adjust to your industry context).
• Identify and remediate security and configuration risks.
• Contribute to incident response and post-incident improvement for modern workplace security events.

Project Delivery & Stakeholder Engagement

• Deliver Microsoft 365 projects — migrations, service rollouts, tenant configuration and modern workplace transformations.
• Scope and plan work with stakeholders, communicating clearly and managing expectations throughout delivery.
• Act as a trusted technical advisor, translating business needs into practical, well-governed modern workplace solutions.
• Manage competing priorities and context-switch effectively across environments/projects.
• Document and hand over delivered work so it can be supported consistently by the wider team.
• Build strong working relationships with IT and business stakeholders.

Automation & Continuous Improvement

• Build automation and reduce manual effort using PowerShell, Microsoft Graph and the Power Platform.
• Identify opportunities to standardise and streamline modern workplace delivery.
• Contribute to the continuous improvement of standards, tooling and ways of working.

Technical Escalation & Quality

• Act as an escalation point for complex modern workplace incidents.
• Maintain a high standard of quality in the configurations and solutions delivered and operated.
• Share knowledge and mentor service desk and support colleagues to lift overall team capability.

Role Boundaries
Accountable for: The quality, security and consistency of the Microsoft 365 environment(s) engineered and supported — spanning identity, device, collaboration, security and compliance configuration — and the resolution of complex escalated issues.
Not accountable for: Direct people management, ownership of commercial relationships/contracts, SLA ownership, or the day-to-day running of the service desk (these sit with the relevant leads and managers).

Success Measures

• Microsoft 365 environments are secure, well-configured and consistently maintained to organisational standards.
• Projects are delivered to scope, on time and with minimal disruption to operations.
• Complex escalations are resolved efficiently, with a reduction in recurring issues over time.
• Identity, device and security configurations are consistent and well-documented.
• Stakeholders regard the engineer as a trusted, responsive technical partner.
• Manual effort is reduced through effective automation and standardisation.
• Modern workplace configurations meet relevant regulatory and security obligations.
• Service desk and support colleagues are supported and up-skilled through knowledge sharing.
• Measurable improvement in the quality, security and reliability of the modern workplace environment over time.

Skills and Experience

• 3 or more years engineering and supporting Microsoft 365, ideally in a managed service or multi-tenant environment.
• Strong hands-on experience with Microsoft Entra ID, Intune, Exchange Online, Teams and SharePoint Online.
• Working knowledge of Microsoft 365 security and compliance tooling, including Defender, Conditional Access and Purview.
• Proficiency in PowerShell scripting and familiarity with Microsoft Graph for automation and reporting.
• Experience with Windows Autopilot and modern device provisioning at scale.
• Ability to manage competing priorities and context-switch across multiple environments/projects.
• Strong client-facing communication skills, with the ability to document and explain technical decisions to varied audiences.
• Prior experience in an MSP, consultancy or multi-tenant environment (highly regarded).
• Exposure to Azure infrastructure, hybrid identity (Microsoft Entra Connect) and the Power Platform.
• Familiarity with regulated-industry frameworks such as ISO 27001, Essential Eight, or sector-specific standards, and relevant Microsoft certifications (highly regarded).