Senior Microsoft Engineer (Level 3) | Azure | M365 | Security

Dijital-Team-Pty-Ltd; Colombo; Hybrid; BRL 180,000 - 290,000; Full time

Benefits offered by this job

Medical insurance

Home office setup allowance

Internet allowance

Gym & wellness allowance

Flexible work – home or office

Job summary

Dijital Team Pty is seeking a Senior Microsoft Engineer (Level 3) to act as a technical authority in a fast‑paced MSP setting. You will resolve complex escalations, strengthen security standards, and drive modernization across Microsoft 365, Intune, Entra ID, Defender, and Azure.

You will mentor engineers, contribute to technical standards, and improve operational efficiency for multiple commercial customers while reducing complexity and licensing costs.

Qualifications

• At least 7 years in systems/cloud engineering or MSP contexts.
• Experience supporting multiple commercial customer environments.
• Strong incident, problem, and change management knowledge.
• Ability to own complex issues and deliver sustainable solutions.

Responsibilities

• Level 3 escalation across Intune, 365, Entra ID, Defender, and Azure.
• Lead root-cause analyses and implement permanent fixes.
• Mentor junior engineers and develop runbooks and SOPs.
• Collaborate on customer cybersecurity roadmaps and licensing reviews.

Skills

Senior technical support

MSP experience

Root-cause analysis

Threat and security focus

Mentoring engineers

Education

Bachelor's degree in CS/IT

MD-102 / MS-102 / AZ-104 certifications

Tools

Microsoft Intune

Endpoint Manager

Azure / Entra ID

Microsoft Defender

PowerShell

Microsoft Graph API

GDAP / Lighthouse

Job description

About the Role

We are seeking an experienced Senior Microsoft Engineer (Level 3) to serve as a technical authority within a high-performing operations team, supporting complex Microsoft cloud environments across multiple commercial customers.

This is a hands‑on senior engineering role focused on resolving complex technical escalations, strengthening security standards, driving technology modernisation, and improving operational efficiency. You will leverage your expertise across Microsoft 365, Microsoft Intune, Microsoft Entra ID, Microsoft Defender, and Microsoft Azure to deliver secure, scalable, and reliable technology solutions.

Beyond reactive support, you will proactively identify opportunities to optimise customer environments, enhance security, improve licensing efficiency, and reduce operational complexity. You will also play a key role in mentoring engineers, establishing technical standards, and driving continuous improvement across the wider technical team.

About the Client

You will be working with an established technology services provider that delivers managed IT services and Microsoft cloud solutions to commercial customers. The organisation prioritises security, operational excellence, and proactive technology management, empowering its technical teams to deliver reliable solutions while continuously improving customer environments.

Ideal Profile

Professional Experience

• At least 7 years of experience in systems engineering, cloud engineering, or managed IT services, including significant experience in senior technical support or Level 3 engineering.

• Proven experience working within a Managed Service Provider (MSP), supporting multiple commercial customer environments.

• Strong understanding of managed services operations, incident management, problem management, and change management.

• Demonstrated ability to own complex technical issues, conduct root‑cause analysis, and deliver sustainable solutions.

Microsoft Intune & Endpoint Management

• Advanced hands‑on experience with Microsoft Intune and Microsoft Endpoint Manager.

• Strong knowledge of Windows Autopilot, device enrolment, configuration profiles, compliance policies, application deployment, and Windows 10/11 administration.

• Experience with endpoint security, device lifecycle management, update management, and Microsoft Defender for Endpoint integration.

Microsoft 365

• Advanced administration and troubleshooting experience across Microsoft 365, including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams.

• Knowledge of Microsoft 365 licensing, including Business Premium, E3, and E5, and their associated security and compliance capabilities.

• Understanding of Microsoft Purview, including Data Loss Prevention (DLP) policies and sensitivity labels.

Microsoft Entra ID & Identity Security

• Deep expertise in identity and access management, authentication, identity protection, and access governance.

• Advanced experience implementing and troubleshooting Conditional Access, multifactor authentication (MFA), and Single Sign‑On (SSO).

• Knowledge of hybrid identity, Entra Connect, directory synchronisation, authentication protocols, role‑based access control, and least‑privilege security models.

• Familiarity with Granular Delegated Admin Privileges (GDAP) and delegated administration across multiple customer tenants.

Microsoft Defender & Cybersecurity

• Strong hands‑on experience with Microsoft Defender for Endpoint and the broader Microsoft Defender security ecosystem.

• Experience implementing endpoint protection, attack surface reduction, vulnerability management, and security policies.

• Knowledge of Microsoft Defender for Office 365, Microsoft Defender XDR, Zero Trust principles, and Microsoft security best practices.

• Ability to review Microsoft Secure Score and implement recommendations to strengthen security posture.

Microsoft Azure

• Strong experience administering and troubleshooting Azure environments, including virtual machines, networking, storage, backup, monitoring, and resource management.

• Knowledge of Azure role‑based access control, Azure Policy, security configuration, governance, and cost management.

• Familiarity with Azure Lighthouse and multi‑tenant Azure administration.

Scripting & Automation

• Advanced PowerShell scripting skills for automating Microsoft 365, Intune, Entra ID, and Azure administration.

• Strong experience with Microsoft Graph API for automation, reporting, and configuration management.

• Ability to develop, troubleshoot, and maintain secure, reusable, and well‑documented scripts and automated processes.

Security Frameworks & Additional Technical Knowledge

• Familiarity with the Australian Signals Directorate (ASD) Essential Eight framework and its application to commercial environments.

• Experience implementing Microsoft security controls to support Essential Eight maturity improvements.

• Exposure to Microsoft Sentinel, Log Analytics, advanced security monitoring, and broader Microsoft Purview compliance capabilities.

• Familiarity with multi‑tenant management platforms, including Microsoft 365 Lighthouse, Azure Lighthouse, and PSA/RMM tools such as ConnectWise, HaloPSA, Autotask, NinjaOne, or Datto RMM.

• Experience contributing to customer technology roadmaps, security improvement plans, and Microsoft licensing reviews.

• Understanding of ITIL‑aligned service management practices.

Preferred Certifications

• Microsoft Certified: Endpoint Administrator Associate (MD‑102).

• Microsoft 365 Certified: Administrator Expert (MS‑102).

• Microsoft Certified: Azure Administrator Associate (AZ‑104).

Additional certifications in identity and access management, such as SC‑300, and Azure security, such as SC‑500, are advantageous. Equivalent practical experience and technical knowledge are also valued.

Key Competencies

• Technical Expertise: Applies in‑depth Microsoft technology knowledge to resolve complex engineering challenges independently.

• Ownership & Accountability: Takes responsibility for issues from investigation through resolution and addresses recurring problems at their source.

• Proactive Thinking: Identifies opportunities to modernise environments, improve security, and prevent recurring incidents.

• Analytical Problem‑Solving: Uses structured troubleshooting and evidence‑based analysis to develop sustainable solutions.

• Security‑Focused Mindset: Maintains secure, consistent, and well‑governed Microsoft environments.

• Communication & Collaboration: Communicates technical concepts, risks, and recommendations clearly to technical and non‑technical stakeholders.

• Mentoring & Knowledge Sharing: Supports the development of junior engineers and contributes to a collaborative technical culture.

• Documentation & Continuous Improvement: Maintains high‑quality documentation and continually improves technical standards, processes, and automation.

Responsibilities

1. Level 3 Technical Escalation & Problem Management

• Serve as the primary escalation point for complex incidents across Microsoft Intune, Microsoft 365, Entra ID, Microsoft Defender, and Azure.

• Diagnose and resolve advanced issues involving endpoint management, identity, authentication, security, cloud infrastructure, and Microsoft services.

• Lead root‑cause analysis and problem management to identify recurring issues and implement permanent solutions.

• Manage complex technical problems through to resolution, coordinating with Microsoft Support and third‑party vendors when necessary.

• Develop preventative measures to reduce recurring incidents and improve customer experience.

• Provide technical guidance and troubleshooting support to Level 1 and Level 2 engineers.

2. Microsoft Security & Configuration Standards

• Establish, maintain, and continuously improve Microsoft security and configuration baselines across customer environments.

• Standardise configurations across Intune, Microsoft 365, Entra ID, Microsoft Defender, and Azure.

• Implement and optimise Conditional Access, MFA, endpoint protection, device compliance, and privileged access controls.

• Monitor environments for configuration drift, security vulnerabilities, and deviations from approved standards.

• Identify security improvements using Microsoft Secure Score, Defender recommendations, and established security frameworks.

• Support the implementation of Microsoft security best practices and, where applicable, ASD Essential Eight controls.

3. Proactive Technology Modernisation & Optimisation

• Monitor Microsoft product updates, roadmap changes, feature releases, deprecations, and security advisories.

• Assess platform changes and recommend actions to maintain security, compatibility, and operational effectiveness.

• Identify opportunities to modernise infrastructure, enhance endpoint management, strengthen security, and optimise Microsoft licensing.

• Maximise the value of existing Microsoft licensing entitlements while reducing unnecessary expenditure.

• Prepare structured technical recommendations outlining issues, proposed improvements, business benefits, risks, and implementation considerations.

• Collaborate with account management teams to support proactive customer engagement and technology roadmap planning.

• Promote standardisation across customer environments to reduce operational complexity.

4. Multi‑Tenant Microsoft Environment Management

• Administer and support multiple commercial customer environments using Microsoft multi‑tenant management tools and processes.

• Manage delegated administrative access through GDAP and maintain appropriate permissions and governance controls.

• Use Microsoft 365 Lighthouse and Azure Lighthouse to improve visibility, security, and administration across customer tenants.

• Conduct tenant security reviews, compliance assessments, and configuration improvements.

• Identify opportunities to improve the scalability, consistency, and efficiency of multi‑tenant operations.

5. Automation & Operational Efficiency

• Develop and maintain PowerShell scripts and Microsoft Graph API integrations to automate administrative and support activities.

• Identify repetitive tasks across Microsoft 365, Intune, Entra ID, and Azure that can be streamlined through automation.

• Build reusable automation for standardised configuration, reporting, monitoring, and remediation.

• Improve the reliability and efficiency of customer environment management through automation and process standardisation.

• Document automation solutions to ensure they are secure, maintainable, and accessible to the wider technical team.

6. Technical Leadership & Knowledge Development

• Mentor Level 1 and Level 2 engineers, strengthening their troubleshooting capabilities and Microsoft platform knowledge.

• Develop and maintain technical runbooks, standard operating procedures, troubleshooting guides, and knowledge base articles.

• Conduct peer reviews of technical changes, scripts, and configurations to ensure quality, consistency, and security.

• Lead knowledge‑sharing initiatives and contribute to the professional development of the Operations team.

• Identify skills gaps and recommend opportunities to strengthen technical capabilities.

• Promote technical ownership, proactive problem‑solving, continuous improvement, and high‑quality documentation.

7. Change Management & Technical Risk Assessment

• Assess proposed technical changes across customer Microsoft environments, identifying security, availability, operational, and customer risks.

• Review change requests and validate implementation plans, testing requirements, dependencies, and rollback procedures.

• Ensure changes are appropriately assessed, documented, and controlled through established change management processes.

• Conduct technical peer reviews and recommend measures to minimise implementation risks.

• Support post‑change reviews and apply lessons learned to improve future change activities.

How we take care of our team

Get paid in Australian Dollars

Medical insurance from day one for you + spouse (or parents if unmarried)

Generous OPD coverage from doctor visits to all your medical needs

Home office setup allowance to build your ideal workspace

Internet allowance to keep you connected

Gym & wellness allowance to stay fit and balanced

Work hard, play hard – regular team events & engagement activities

Diji Assist – Mental health & counseling support when you need it

We invest in you – reimbursement for industry certifications

Open‑door culture – your ideas and feedback always matter

Flexible work – home or office, wherever you do your best work

Rewards & recognition that actually recognize you

Great christmas & financial year‑end parties to unwind with your loved ones

By applying for this role, your contact details will be securely stored in our candidate database. If you're not selected for this role, our Talent Acquisition Team may contact you regarding future opportunities that match your profile.Additionally, your email address will be automatically subscribed to our monthly newsletter, as well as special announcements such as upcoming webinars and events that we host. You may unsubscribe from these communications at any time by clicking the Unsubscribe link at the bottom of any of our emails.