Project Engineer III - (Microsoft Cloud Specialization)

Proven Business Systems LLC•Tinley Park, IL

11h•$120,000 - $150,000•Hybrid

About The Position

The Project Engineer III - (Microsoft Cloud Specialization) is a senior, hands-on engineer responsible for assessing, designing, and delivering technology solutions for small to mid-sized customers, and larger organizations with internal IT teams. The role primarily focuses on Microsoft 365, Microsoft Entra ID, Microsoft Intune, Windows Autopilot, Azure, endpoint management, and automation. While the focus is on Microsoft cloud solutions, strong networking, on-premises infrastructure, and hybrid-environment skills are also required. The engineer will perform pre-sales assessments and solution architecture, then own the technical execution and quality of assigned projects within approved Statements of Work (SOWs) and project plans. Collaboration with Project Managers, Sales, account teams, support and security teams, vendors, and client stakeholders is essential. The role also involves establishing standards and reusable solutions for both customers and the internal team. Project Managers will retain responsibility for project governance, schedule, budget, resources, change control, status reporting, and acceptance.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field preferred; equivalent relevant experience and professional certifications may substitute.
Minimum 8 years of progressive IT engineering experience, including 5+ years of substantial hands-on responsibility for Microsoft cloud, identity, endpoint management, or hybrid infrastructure projects.
Advanced hands-on experience with Microsoft 365 and Microsoft Entra ID, including Exchange Online, Teams, SharePoint/OneDrive, identity synchronization, authentication, Conditional Access, MFA, and hybrid identity.
Advanced Intune and Windows endpoint experience, including Windows 10/11, Entra Join and hybrid join, Windows Autopilot and device preparation, enrollment, policy and compliance management, application packaging, updates, endpoint security, and device lifecycle management.
Demonstrated automation skills using PowerShell, Microsoft Graph, Intune scripts and remediations, platform APIs, Git-based workflows, and reusable deployment and validation tooling; experience with Azure CLI and Bicep or Terraform.
Strong Azure skills across compute, networking, storage, identity, RBAC, Azure Policy, monitoring, backup, and recovery, with practical Azure Virtual Desktop or Windows 365 experience aligned to assigned customer solutions.
Solid networking knowledge and hands-on troubleshooting across TCP/IP, routing, switching, VLANs, wireless, firewalls, VPNs, DNS, and DHCP. Work across Meraki/Cisco, Ruckus, HP, and other supported platforms and resolve issues beyond the Microsoft cloud layer.
Strong on-premises and hybrid infrastructure knowledge, including Windows Server, Active Directory, Group Policy, certificates, virtualization, storage, backup/recovery, and integration with cloud services.
Ability to conduct existing-customer pre-sales assessments, develop solution architectures and SOWs, communicate technical options and risks, and contribute to reusable standards and solutions for customers and internal teams.
Demonstrated project-delivery discipline: estimates, implementation/rollback plans, peer review, documented testing, cutovers, accurate as-built records, and knowledge transfer. Explain and validate decisions with customer IT staff; manage multiple technical workstreams and escalate risks before committed milestones are affected.
Ability to travel for customer assessments and project work, typically locally within the Chicago metropolitan area; work planned after-hours implementation windows and respond to project-specific escalations when necessary.
Must hold at hire at least one current Microsoft certification directly aligned with the role. Continued development should include additional credentials aligned with the engineer's assigned technology responsibilities.

Nice To Haves

Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) - strongly preferred for Intune, Windows Autopilot, endpoint deployment, application delivery, security policy, and desktop lifecycle automation.
Microsoft Certified: Azure Solutions Architect Expert (AZ-305, with required AZ-104 prerequisite) - for assigned architecture-level Azure responsibilities.
Microsoft Certified: Azure Administrator Associate (AZ-104).
Microsoft Certified: Identity and Access Administrator Associate (SC-300).
Microsoft Certified: Windows Server Administrator Associate (AZ-802).
Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140).
Microsoft 365 Certified: Teams Administrator Associate (MS-700).
Microsoft Certified: Information Security Administrator Associate (SC-401) - when assigned Microsoft Purview, information protection, DLP, retention, or related compliance responsibilities.
ITIL Foundation (current version) preferred.

Responsibilities

Perform existing-customer assessments and pre-sales architecture, including identifying technical gaps and opportunities, and developing solution architectures and recommendations. Collaborate with Sales, account teams, and engineering leadership on options, technical designs, SOWs, effort estimates, dependencies, and risks.
Own assigned technical workstreams from implementation planning through completion, defining prerequisites, task sequencing, maintenance windows, estimates, and rollback plans. Execute approved scope and keep the Project Manager informed through accurate tasks, time entries, status, risks, and completion evidence. Escalate scope, schedule, budget, quality, or client-impact concerns promptly.
Design, implement, and migrate Microsoft 365 and Microsoft Entra environments, including tenant configuration, Exchange Online and hybrid migrations, Teams, SharePoint, OneDrive, Entra Join, hybrid identity, Entra Connect Sync or Cloud Sync, authentication, Conditional Access, MFA, passwordless access, and identity governance.
Design and implement Intune and Windows Autopilot solutions, including enrollment and join strategies, deployment profiles and device preparation, configuration and compliance policies, device filters and assignments, application packaging and deployment, Windows Update for Business or Windows Autopatch, and workstation lifecycle support.
Design and implement Azure virtual machines, virtual networks, storage, private and site-to-site connectivity, monitoring, backup, and recovery. Deliver Azure Virtual Desktop and Windows 365 solutions.
Design, implement, and troubleshoot networking and on-premises infrastructure, including routing, switching, VLANs, wireless, firewalls, VPNs, DNS/DHCP, Windows Server, Active Directory, virtualization, storage, and backup/recovery. Work across Meraki/Cisco, Ruckus, HP, and other supported platforms, including cross-vendor migrations and integration with Microsoft cloud services.
Build repeatable, low-touch desktop and cloud workflows using PowerShell, Microsoft Graph, Intune scripts and remediations, Azure CLI, Bicep or Terraform, Git, and platform APIs to automate device registration, provisioning, assignments, application delivery, validation, redeployment, wipe, retirement, and infrastructure configuration.
Apply least privilege, RBAC, privileged access controls, Azure Policy, logging, and secure configuration standards across cloud and on-premises environments. Implement endpoint security baselines, BitLocker, Windows LAPS, Defender integration, and Purview information-protection controls.
Obtain technical peer review of designs and material changes. Execute controlled changes with approved access, communication, backups, and rollback procedures. Record pre/post-change evidence and resolve findings.
Maintain accurate as-built diagrams, configuration records, scripts, application-package details, test evidence, change records, support procedures, and known limitations. Transfer knowledge to internal support and customer IT teams.
Evaluate technologies, develop reference architectures and deployment standards, and pilot reusable solutions for use across all customer environments and internally. Work with engineering leadership and support teams to validate, approve, maintain, and consistently apply those standards.
Lead customer technical discussions, explain designs and tradeoffs clearly, mentor Project Engineers I and II, and serve as a senior escalation resource for complex project issues. Share lessons learned and provide practical training to strengthen the team.