IT Infrastructure Engineer (L3)

• Administer Microsoft Intune across Windows,macOS, iOS/iPadOS, and Android, covering device enrolment, Autopilot,compliance, application deployment, security policies, updates, and devicelifecycle management.
• Configure endpoint security controls, includingBitLocker, Microsoft Defender Antivirus, firewall, attack surface reduction,EDR onboarding, and local administrator access.
• Troubleshoot complex endpoint issues and useIntune reporting, PowerShell, and Microsoft Graph to monitor device health andautomate administrative tasks.

• Administer Microsoft Entra ID/Azure AD,including users, groups, roles, device identities, authentication methods,enterprise applications, and service principals.
• Implement and troubleshoot Conditional Access,MFA, passwordless authentication, Windows Hello for Business, self-servicepassword reset, and other Zero Trust controls.
• Manage identity governance, privileged access,access reviews, lifecycle processes, and hybrid identity synchronizationthrough Microsoft Entra Connect or Cloud Sync.

• Administer Microsoft Defender XDR acrossendpoints, identities, email, collaboration services, and cloud applications.
• Investigate security incidents and alerts usingadvanced hunting, device timelines, automated investigation, and remediationcapabilities.
• Manage Defender for Endpoint, Office 365,Identity, and Cloud Apps controls, while working with security teams to improveSecure Score, contain threats, complete root-cause analysis, and strengthensecurity controls.

• Provide L3 support for Exchange Online,Microsoft Teams, SharePoint Online, OneDrive, and related Microsoft 365services.
• Plan and execute tenant-to-tenant migrationsusing Quest On Demand Migration, BitTitan MigrationWiz, or similar tools,covering assessment, identity mapping, pilot, coexistence, cutover, validation,and rollback.
• Ensure migrations address Intune devices, EntraID identities, Conditional Access, enterprise applications, Defender,certificates, security policies, and end-user transition requirements.

• 7+ years of experienceadministering and supporting enterprise Microsoft 365 environments, includingsenior or L3 engineering responsibilities.
• Strong hands-onexperience with Microsoft Intune, Microsoft Entra ID / Azure AD, ConditionalAccess, Microsoft Defender XDR, and Microsoft Defender for Endpoint.
• Experience with WindowsAutopilot, endpoint configuration and compliance, application management,security baselines, patching, and mobile application management.
• Solid understanding ofidentity security, privileged access, hybrid identity, authentication,authorization, device identity, and Zero Trust principles.
• Practical experienceinvestigating and remediating security incidents in the Microsoft Defenderportal.
• Advanced troubleshootingskills across Microsoft 365, Windows endpoints, networking, authentication,certificates, and cloud integrations.
• Experience usingPowerShell and Microsoft Graph for automation, reporting, and bulkadministration.
• Experience withMicrosoft 365 tenant-to-tenant migrations and Quest On Demand Migration or anequivalent migration platform.
• Strong documentation,communication, analytical, and stakeholder-management skills.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.