Senior Microsoft Engineer – Azure, M365, Security

• Serve as the primary escalation point for complex incidents across Microsoft Intune, Microsoft 365, Entra ID, Microsoft Defender, and Azure
• Diagnose and resolve advanced endpoint management, identity, authentication, security, cloud infrastructure, and Microsoft service issues
• Lead root-cause analysis and problem management and implement permanent solutions
• Coordinate with Microsoft Support and third-party vendors when necessary
• Provide technical guidance and troubleshooting support to Level 1 and Level 2 engineers
• Establish, maintain, and improve Microsoft security and configuration baselines across customer environments
• Standardise configurations across Intune, Microsoft 365, Entra ID, Microsoft Defender, and Azure
• Implement and optimise Conditional Access, MFA, endpoint protection, device compliance, and privileged access controls
• Monitor configuration drift, security vulnerabilities, and deviations from approved standards
• Identify and implement security improvements using Microsoft Secure Score, Defender recommendations, and security frameworks
• Monitor Microsoft product updates, roadmap changes, feature releases, deprecations, and security advisories
• Recommend infrastructure modernisation, endpoint management improvements, security enhancements, and licensing optimisation
• Prepare technical recommendations covering issues, improvements, benefits, risks, and implementation considerations
• Support proactive customer engagement and technology roadmap planning
• Administer multiple commercial customer environments using multi-tenant management tools
• Manage delegated administrative access through GDAP and maintain permissions and governance controls
• Use Microsoft 365 Lighthouse and Azure Lighthouse across customer tenants
• Conduct tenant security reviews, compliance assessments, and configuration improvements
• Develop and maintain PowerShell scripts and Microsoft Graph API integrations
• Build reusable automation for configuration, reporting, monitoring, and remediation
• Document automation solutions
• Mentor Level 1 and Level 2 engineers
• Develop technical runbooks, standard operating procedures, troubleshooting guides, and knowledge base articles
• Conduct peer reviews of technical changes, scripts, and configurations
• Lead knowledge-sharing initiatives and contribute to professional development
• Assess technical changes and validate implementation plans, testing, dependencies, and rollback procedures
• Support post-change reviews and apply lessons learned

• At least 7 years of experience in systems engineering, cloud engineering, or managed IT services, including significant experience in senior technical support or Level 3 engineering
• Proven experience working within a Managed Service Provider (MSP), supporting multiple commercial customer environments
• Strong understanding of managed services operations, incident management, problem management, and change management
• Demonstrated ability to own complex technical issues, conduct root-cause analysis, and deliver sustainable solutions
• Advanced hands-on experience with Microsoft Intune and Microsoft Endpoint Manager
• Strong knowledge of Windows Autopilot, device enrolment, configuration profiles, compliance policies, application deployment, and Windows 10/11 administration
• Experience with endpoint security, device lifecycle management, update management, and Microsoft Defender for Endpoint integration
• Advanced administration and troubleshooting experience across Microsoft 365, including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams
• Knowledge of Microsoft 365 licensing, including Business Premium, E3, and E5
• Understanding of Microsoft Purview, including Data Loss Prevention (DLP) policies and sensitivity labels
• Deep expertise in identity and access management, authentication, identity protection, and access governance
• Advanced experience implementing and troubleshooting Conditional Access, multifactor authentication (MFA), and Single Sign-On (SSO)
• Knowledge of hybrid identity, Entra Connect, directory synchronisation, authentication protocols, role-based access control, and least-privilege security models
• Familiarity with Granular Delegated Admin Privileges (GDAP) and delegated administration across multiple customer tenants
• Strong hands-on experience with Microsoft Defender for Endpoint and the broader Microsoft Defender security ecosystem
• Experience implementing endpoint protection, attack surface reduction, vulnerability management, and security policies
• Knowledge of Microsoft Defender for Office 365, Microsoft Defender XDR, Zero Trust principles, and Microsoft security best practices
• Ability to review Microsoft Secure Score and implement recommendations to strengthen security posture
• Strong experience administering and troubleshooting Azure environments, including virtual machines, networking, storage, backup, monitoring, and resource management
• Knowledge of Azure role-based access control, Azure Policy, security configuration, governance, and cost management
• Familiarity with Azure Lighthouse and multi-tenant Azure administration
• Advanced PowerShell scripting skills
• Strong experience with Microsoft Graph API
• Ability to develop, troubleshoot, and maintain secure, reusable, and well-documented scripts and automated processes
• Familiarity with the Australian Signals Directorate (ASD) Essential Eight framework
• Experience implementing Microsoft security controls to support Essential Eight maturity improvements
• Exposure to Microsoft Sentinel, Log Analytics, advanced security monitoring, and broader Microsoft Purview compliance capabilities
• Familiarity with multi-tenant management platforms, including Microsoft 365 Lighthouse, Azure Lighthouse, and PSA/RMM tools such as ConnectWise, HaloPSA, Autotask, NinjaOne, or Datto RMM
• Experience contributing to customer technology roadmaps, security improvement plans, and Microsoft licensing reviews
• Understanding of ITIL-aligned service management practices
• Preferred certifications: MD-102, MS-102, and AZ-104
• Additional SC-300 and AZ-500 certifications are advantageous
• Equivalent practical experience and technical knowledge are valued

• Get paid in Australian Dollars
• Medical insurance from day one for you + spouse (or parents if unmarried)
• Generous OPD coverage from doctor visits to all your medical needs
• Home office setup allowance
• Internet allowance
• Gym & wellness allowance
• Regular team events and engagement activities
• Diji Assist mental health and counseling support
• Reimbursement for industry certifications
• Flexible work – home or office
• Rewards and recognition
• Christmas and financial year-end parties