System Engineer (L2 Level) @ Beyond Key

Overview:

We are looking for a System Engineer with 4 to 6 years of experience, excellent communication skills, and the ability to work on client projects and support client environments. The ideal candidate should have expertise in managing on-premises Active Directory, Microsoft Entra Connect, and Azure EntraID, as well as advanced M365 administration.

Key Responsibilities:

Active Directory and M365 Administration:

L2-level management and maintenance of on-premises Active Directory.

Configure and manage Microsoft Entra Connect for on-premises identity synchronization with Azure AD and Single Sign-On (SSO).

Advanced troubleshooting of Active Directory, M365 environments, and associated issues.

PowerShell scripting for bulk migration , administrative tasks, and reporting within M365.

Conduct advanced mailbox searches using eDiscovery .

Basic knowledge of Azure Information Protection for data security.

Manage and support hybrid Exchange environments (on-premises Exchange integrated with M365).

Basic knowledge of antispam and mail flow settings (e.g., AV, spam filtering).

Advanced configuration of Autodiscover , SPF , DKIM , and public DNS management.

Administer and manage M365 services such as Exchange Online, SharePoint, Teams, OneDrive, and other Microsoft 365 tools.

Security, Compliance, and Disaster Recovery:

Implement and manage M365 compliance requirements and security configurations.

Configure and manage conditional access policies , SSO, and other M365 security options.

Perform regular backups of data and systems, and develop and test disaster recovery plans .

Maintain mail security configurations for spam filtering, AV, and other protections.

Azure Administration:

Manage and monitor Azure subscriptions , including resource provisioning, access controls, and governance.

Provision, configure, and manage Azure resources such as VMs, storage accounts, databases, and networks.

Implement and manage security policies for Azure environments, including access management and encryption.

Design and implement backup and disaster recovery solutions for Azure.

Automate Azure administration tasks using PowerShell and Azure CLI .

Monitoring, Optimization, and Support:

Monitor the service health and performance of M365 and Azure environments, taking proactive measures to prevent or resolve issues.

Stay updated on new features and capabilities in M365 and Azure to ensure the infrastructure is running optimally.

Collaborate with other IT teams and stakeholders to troubleshoot issues and provide support.

Train and support end users on M365 applications and features.

Documentation and Research:

Write and maintain technical documentation for processes, procedures, and configurations.

Conduct research on new products and solutions to improve productivity and efficiency within M365 and Azure environments.

On-premise to Cloud Migration:

Plan, manage, and execute on-premises to cloud migrations , including Exchange to Exchange Online migrations.

M365 tenant-to-tenant migrations and on-premises infrastructure migration to Microsoft Azure .

M365 user and group migration from on-premises environments to cloud-based M365 services.

Hybrid setup and troubleshooting of on-premises and cloud environments during migration phases.

Provide post-migration support , ensuring stability, performance, and security after cloud adoption.

Intune and Endpoint Management:

Design, deploy, and manage Intune policies and profiles for Windows 10, iOS, Android, and macOS devices.

Configure and troubleshoot device enrollment, compliance , conditional access, app protection, and app deployment.

Integrate Intune with other Microsoft services such as Azure AD , Exchange Online , SharePoint Online , Teams , and OneDrive .

Monitor and remediate device health, performance , and security issues using Microsoft Endpoint Analytics and Microsoft Endpoint Health .

Design, implement, and troubleshoot Windows Autopilot solutions for clients.

Create and maintain documentation, reports, and dashboards for Intune and Microsoft Defender solutions.

Microsoft Defender:

Implement and manage Microsoft Defender for Endpoint to protect devices from advanced threats, vulnerabilities, and exploits.

Configure and manage Microsoft Defender for Identity to protect identities from credential compromises, lateral movement, and privilege escalation.

Implement and manage Microsoft 365 Defender for proactive security incident detection and mitigation.

Respond to and investigate security incidents and alerts using the Microsoft 365 Defender portal and Microsoft 365 Security Center .

Stays updated on the latest trends and developments in Microsoft Defender solutions.

Skills and Qualifications:

Bachelor s degree in Computer Science, Information Technology, or a related field.

4-6 years of experience managing Active Directory , M365 , and Azure environments .

PowerShell scripting expertise for M365, Intune, and Azure automation.

Experience with Microsoft Intune , including device enrollment, policy management, compliance, and integration with other Microsoft services (Azure AD, Exchange, SharePoint, Teams, and OneDrive).

Proficient in Microsoft Defender for Endpoint and Microsoft Defender for Identity , managing and responding to security incidents and alerts.

Expertise in on-premise to cloud migrations , including Exchange to Exchange Online, M365 tenant-to-tenant migrations, and other cloud transition projects.

Strong understanding of Auto discover , SPF , DKIM , DNS management , and conditional access policies .

Proficient in M365 compliance requirements and security configuration , ensuring regulatory compliance and protection of data.

Experience managing hybrid Exchange environments and mail flow security settings such as AV, spam filtering, and message routing.

Familiar with Windows Server Administration (2012, 2016, 2019).

Strong communication and troubleshooting skills to effectively collaborate with teams and support client projects.

Preferred Certifications:

Microsoft Certified: Enterprise Administrator Expert

Microsoft Certified: Security Administrator Associate

Microsoft Azure Administrator or similar certifications