Systems Engineer

BAL•Richardson, TX

12h

About The Position

The Systems Engineer builds and improves the Microsoft 365 tenant and adjacent platforms to enhance reliability, security, and user experience. The role owns solution design and implementation for Intune, SharePoint, Teams, Entra ID integrations, Exchange Online, OneLogin SSO, and targeted Azure and AWS WorkSpaces capabilities. The engineer emphasizes automation (PowerShell/Graph, Azure Automation) and safe change delivery.

Requirements

4+ years in enterprise systems engineering focused on Microsoft 365 and Intune.
Hands-on expertise with Exchange Online administration (mail flow, transport rules, connectors, shared mailboxes).
Demonstrated automation with PowerShell and Microsoft Graph; experience creating Azure Automation runbooks.
Experience with OneLogin or Entra ID app integrations (SAML/OIDC/SCIM) and Conditional Access.
Proven experience with Microsoft 365 Admin Center licensing provisioning and lifecycle management.

Nice To Haves

SharePoint/Teams governance and lifecycle design.
AWS WorkSpaces image engineering and policy integration.
Exposure to DLP/Insider Risk and SIEM integrations (with Security).
Certifications: MS-102, MD-102, SC-300, AWS Associate (nice-to-have).

Responsibilities

Designs and implements solutions across multiple Microsoft 365 workloads with measurable reliability and security gains.
Influences standards through engineering, documentation, and peer reviews.
Partners with Cyber and Network to deliver end-to-end outcomes (identity, device posture, secure access).
Engineer Intune baselines (compliance, configuration, update rings), Autopilot, app packaging/lifecycle.
Automate tenant tasks via PowerShell and Microsoft Graph; develop Azure Automation runbooks and schedules.
Build SharePoint/Teams information architecture and governance (site templates, lifecycle, external access controls).
Design and manage Exchange Online configurations: transport rules, connectors, accepted domains, anti-spam/phish posture (with Security).
Integrate applications with OneLogin and/or Entra ID using SAML/OIDC and SCIM; implement role- and group-based access.
Implement Conditional Access and device-based controls in partnership with Cyber.
Execute Microsoft 365 Admin Center licensing provisioning at scale; optimize assignments and reclaim unused licenses.
Author RFCs/CRs; perform impact analysis, pilots, staged rollouts, and backout plans.
Create monitoring/health dashboards (Intune compliance, device posture, sign-in risk, Exchange mail flow).
Contribute to audit evidence and control alignment (ISO/NIST/CIS) in collaboration with Cyber.