Microsoft 365 Azure Engineer

Job Description

Job Description

Description

We are seeking a highly skilled Senior Microsoft 365 / Entra Engineer to lead identity engineering, Microsoft 365 migration initiatives, and platform automation across a mature enterprise Microsoft ecosystem. This role is heavily focused on Entra ID architecture, Microsoft Graph API integrations, advanced PowerShell automation, and acquisition-driven Microsoft 365 migrations. The ideal candidate has extensive experience migrating organizations into Microsoft 365 environments, automating identity processes, administering SharePoint Online, and supporting cloud collaboration platforms. This is a hands-on engineering role responsible for building scalable processes, documenting systems, and ensuring operational excellence across the Microsoft 365 platform..

This is a hands-on engineering role with direct impact. You will take ownership of a mature, well-governed tenant, and your first mandate is to independently validate and document how it works, then keep it that way. Every system you build or change gets documented, every process gets a runbook, and knowledge stays with the team, not with one person.

Core Responsibilities

Microsoft 365 Migrations and Acquisition Integration

•Onboard newly acquired practices

•Execute mailbox, OneDrive, and file migrations, including tenant-to-tenant, Google Workspace, and legacy or non-standard email platforms (IMAP/POP hosts, registrar-hosted email, and other one-off systems common in practice acquisitions)

•Plan and coordinate domain transitions, DNS cutovers, and post-cutover support

•Build repeatable, documented migration processes that scale with acquisition volume

Identity and Access (Entra ID)

•Design and maintain identity architecture, including Active Directory to Entra ID synchronization

•Administer conditional access, MFA strategy, and authentication modernization

•Run Entra governance activities: access reviews, tenant permission reviews, provisioning workflows

•Build and maintain Microsoft Graph API integrations for identity and lifecycle automation

Endpoint Management (Intune)

•Design and maintain device onboarding, enrollment, and lifecycle processes

•Lead Azure AD Join migration planning and execution

•Support BitLocker management and endpoint remediation

•Train internal IT staff on device onboarding procedures

SharePoint and File Platform Architecture

•Lead file share to SharePoint migrations

•Design and enforce SharePoint permission models, security hardening, and access governance

•Support platform integrations with related SaaS tools across the portfolio

Automation and Integration

•Build and support Power Automate workflows and process automation

•Develop and troubleshoot API integrations (Microsoft Graph, monday.com, and other SaaS platforms)

•Support SSO implementation and troubleshooting across the SaaS portfolio

Security and Governance

•Execute tenant hardening, security architecture reviews, and Microsoft Defender recommendations

•Support account compromise investigations and email security response

•Operate within client IT governance framework; architecture and governance decisions are set by IT leadership and executed by this role

Documentation and Knowledge Transfer (Non-Negotiable)

•Produce and maintain technical documentation, migration runbooks, and operational handoff materials for every system and process you own

•Deliver knowledge transfer to internal IT staff as a standing expectation, not an afterthought

•Success in this role means no single person, including you, is ever the only one who knows how the tenant works

Hard Requirements

•5+ years of hands-on Microsoft 365 and Azure/Entra engineering experience in a multi-site or enterprise environment

•Microsoft Graph API proficiency: proven experience building and maintaining Graph API integrations for identity, provisioning, and automation. This is a hard requirement, not a nice-to-have.

•PowerShell automation: advanced scripting for M365, Entra ID, Exchange Online, and Intune administration. This is a hard requirement, not a nice-to-have.

•Demonstrated experience with tenant-to-tenant, Google Workspace, and IMAP or legacy email platform migrations to M365

•Deep working knowledge of Entra ID, conditional access, Intune, Exchange Online, and SharePoint Online administration

•Proven ability to walk into an unfamiliar tenant and reverse-engineer it: auditing existing configurations, mapping dependencies, and producing documentation where none exists. Candidates should expect to demonstrate this skill in the interview process.

•Strong documentation discipline with work samples or examples available on request

Preferred Qualifications

•Healthcare or regulated-industry experience, with working knowledge of HIPAA technical safeguards and the governance expectations that come with PHI-adjacent systems

•Experience supporting M&A or acquisition integration at volume

•Microsoft certifications: SC-300, MS-102, AZ-104, or equivalent

•Power BI administration experience (dashboard development is a plus but is not the core of this role)

•Experience in environments with formal change management and audit-driven governance

What Success Looks Like

•90 days: You have completed a full discovery and documentation pass of the tenant: identity architecture, conditional access policies, sync configuration, Intune profiles, SharePoint permission models, automation workflows, and API integrations. Findings are documented as the new system of record. You can independently run an acquisition migration end to end.

•6 months: Migration runbooks, identity documentation, and endpoint processes are current, peer-reviewed, and usable by other team members without your involvement.

•12 months: Acquisition onboarding is a repeatable, measured process. Automation has reduced manual migration effort. No tribal knowledge gaps exist in the platforms you own.

Skills

Azure, Api development, Powershell

Top Skills Details

Azure,Api development,Powershell

Additional Skills & Qualifications

Applicable Job Titles

•Senior Microsoft 365 Engineer

•Microsoft 365 Engineer

•Microsoft 365 Architect

•Entra ID Engineer

•Identity Engineer

•Microsoft Cloud Engineer

•Modern Workplace Engineer

•Microsoft Platform Engineer

•M365 Migration Engineer

•Microsoft 365 Solutions Engineer

•Collaboration Engineer

•Azure / M365 Engineer

________________________________________

Top Technical Priorities

1. Identity Engineering (Primary Focus)

•Microsoft Entra ID architecture and administration

•Conditional Access design and governance

•Identity lifecycle management

•Authentication modernization

•Access governance and security controls

2. Microsoft Graph API & PowerShell Automation (Non-Negotiable)

•Microsoft Graph API integrations and development

•Advanced PowerShell scripting and automation

•User provisioning/deprovisioning automation

•Administrative workflow automation

•Microsoft 365 operational automation

3. Microsoft 365 Migration Engineering

•Tenant-to-tenant Microsoft 365 migrations

•Exchange Online mailbox migrations

•Google Workspace migrations

•IMAP/POP and legacy platform migrations

•OneDrive and file migration projects

•Acquisition and merger integration experience

4. SharePoint Online Administration

•SharePoint permission management

•Security hardening and governance

•File share to SharePoint migrations

•Site administration and access management

Required Skills, Tools, Technologies & Services

Identity & Access Management

•Microsoft Entra ID (Azure Active Directory)

•Conditional Access

•Multi-Factor Authentication (MFA)

•Identity Governance

•Access Reviews

•User Lifecycle Management

•Entra Connect / Azure AD Connect

•Single Sign-On (SSO)

•Security and Authentication C

Experience Level

Expert Level

Job Type & Location

This is a Permanent position based out of Carrollton, TX.

Pay and Benefits

The pay range for this position is $125000.00 - $140000.00/yr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

AM has benefits guide for request,

Workplace Type

This is a fully onsite position in Carrollton,TX.

Application Deadline

This position is anticipated to close on Oct 5, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We’re a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We’re strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.