Microsoft Systems Engineer

TGI MAIN COMPANY•Boca Raton, FL

1d•$110,000 - $115,000•Hybrid

About The Position

We are seeking a Microsoft Systems Engineer with real-world, hands-on experience managing modern Microsoft cloud environments. This role focuses on endpoint management, identity, tenant integrations, and automation, with a strong emphasis on Microsoft Intune, Entra ID, cross-tenant integrations, Power Automate, and AI-driven automation. This is a production-focused role supporting live tenants.

Requirements

4–7+ years of experience in Microsoft systems administration, endpoint engineering, or Microsoft 365 infrastructure support
Strong hands-on production experience with Microsoft Intune, including device enrollment, compliance policies, configuration profiles, application deployment, update rings, Autopilot, and endpoint security baselines across Windows, macOS, iOS, and Android
Strong experience with Microsoft Entra ID, including Conditional Access, MFA, RBAC, enterprise applications, app registrations, service principals, SSO, access reviews, and identity lifecycle management
Proficiency with PowerShell automation and troubleshooting, including scripting for provisioning, reporting, remediation, and administrative task automation
Experience building and maintaining workflows using Power Automate for onboarding, offboarding, approval, notification, and operational process automation
Working knowledge of Microsoft Defender, endpoint compliance, tenant security posture, and troubleshooting policy conflicts in live environments
Ability to document standards, runbooks, implementation steps, rollback plans, and operational procedures with a production-support mindset
Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
Microsoft 365 Certified : Microsoft 365 Administrator (MS-102)

Nice To Haves

MSP, consulting, or multi-tenant experience, including migration, coexistence, cross-tenant access, and high-volume operational support, is highly desirable
Additional Microsoft certifications in Microsoft 365 administration, identity and access, security, or Azure are preferred
Experience supporting multiple tenants, documenting runbooks, and participating in on-call or escalation support is strongly preferred

Responsibilities

Administer and manage Microsoft Intune across Windows, macOS, iOS, and Android
Configure compliance policies, configuration profiles, and application deployment
Manage Entra ID including Conditional Access, MFA, RBAC, and identity lifecycle
Integrate Intune with Conditional Access and Defender for policy enforcement
Manage Microsoft 365 tenant integrations and cross-tenant access (B2B)
Configure app registrations and secure API access
Support tenant-to-tenant migrations and coexistence scenarios
Build workflows using Power Automate for onboarding, offboarding, and lifecycle management
Use PowerShell to support and extend automation scenarios
Leverage AI and Copilot-based tools to improve operational efficiency and standardization
Support Conditional Access and device compliance
Troubleshoot access, device, and policy conflicts in live environments
Document standards, procedures, and automation workflows