Modern Workplace Engineer

Wrench Group•Sarasota, FL

3d•$85,000 - $90,000•Remote

About The Position

At Wrench Group, we are scaling rapidly through aggressive growth and need a Modern Workplace Engineer who thrives in high-impact environments where automation, security, and innovation collide. This role will own critical enterprise infrastructure supporting over 7,000 employees across a rapidly growing national organization. The engineer will serve as the technical powerhouse behind cloud identity, endpoint management, automation, and Microsoft ecosystem security. This is not just an administrative role; it's for an architect, an automator, and an escalation point for complex issues. The position operates as the definitive technical "Number 2" to IT Operations leadership. The ideal candidate has a strong preference for using PowerShell over GUI interfaces, is proficient with Microsoft Entra ID, Intune, Conditional Access, and the Microsoft Graph API, and has experience with tenant-to-tenant migrations, securing enterprise identities, and building automation to eliminate manual work. This is a unique opportunity for qualified candidates.

Requirements

Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field.
5+ years of experience in data engineering or a related field, with a proven track record of delivering high-quality data solutions.
Proven proficiency in PowerShell scripting
Proven proficiency in Microsoft Graph API
Proven proficiency in Microsoft Entra ID / Azure AD
Proven proficiency in Conditional Access Policies
Proven proficiency in PIM (Privileged Identity Management)
Proven proficiency in Microsoft Intune
Proven proficiency in Windows Autopilot
Proven proficiency in Microsoft Defender for Endpoint
Proven proficiency in Exchange Online & Microsoft 365 Administration
Proven proficiency in Azure RBAC
Proven proficiency in Enterprise Application Security

Nice To Haves

Tenant-to-tenant migrations
M&A integration experience
BitTitan MigrationWiz
Azure AD Connect / Cloud Sync
Microsoft Purview
SC-300 or AZ-104 Certifications

Responsibilities

Own and optimize Microsoft Entra ID (Azure AD)
Design and manage Conditional Access Policies
Configure PIM (Privileged Identity Management) and Azure RBAC
Secure Enterprise Applications and B2B/guest environments
Manage Microsoft Purview, DLP, retention policies, and eDiscovery
Build enterprise automations using PowerShell (5.1 / 7.x) and Microsoft Graph API
Eliminate manual bottlenecks through scripting and automation
Execute complex tenant-to-tenant migrations, domain cutovers, and M&A integrations
Utilize BitTitan MigrationWiz for enterprise migrations
Architect and manage Microsoft Intune, Windows Autopilot, MDM/MAM policies, and Defender for Endpoint
Serve as the highest-level escalation point for identity and endpoint challenges