Senior System Engineer ( L2 Level )

Knoldus; Indore District; On-site; INR 900,000 - 1,400,000; Full time

Job summary

Knoldus is seeking a System Engineer with 4–6 years of experience to manage client environments focused on Microsoft Entra Connect, Azure Entra ID, and M365 administration.

You will handle security configurations, Intune integrations, and device management across Windows, iOS, Android, and macOS in hybrid environments.

Qualifications

• 4–6 years of experience in Active Directory, M365, and Azure environments.
• Experience with on-premises to cloud migrations (Exchange to Exchange Online).
• Strong knowledge of security policies for Azure environments and conditional access.
• Experience with mail flow, SPF, DKIM, and Autodiscover configurations.
• Proficient in configuring and managing Intune and Defender services.

Responsibilities

• Configure and manage Entra Connect for identity synchronization and SSO.
• Administer M365 services (Exchange Online, SharePoint, Teams, OneDrive).
• Manage hybrid Exchange environments and mail flow security.
• Implement and manage Intune policies and Azure AD integrations.
• Plan and execute on-premises to cloud migrations and DR planning.

Skills

Microsoft Entra Connect

Azure Entra ID

M365 administration

Intune policies

Security configurations

Hybrid environments

Endpoint management

Exchange Online

SharePoint/Teams/OneDrive

Intune integration

Defender for Endpoint

Defender for Identity

Autodiscover/SPF/DKIM/DNS

Troubleshooting skills

Documentation writing

Education

Bachelor’s degree in Computer Science / IT

Tools

Microsoft Defender for Endpoint

Microsoft Intune

Azure AD / Exchange Online

VMware/Hyper-V

Job description

We are a Microsoft Gold Partner and a Great Place to Work-certified company. "Happy Team Members, Happy Clients" is a principle we hold dear. We are an international IT consulting and software services firm committed to providing. Cutting-edge services and products that satisfy our clients' global needs. Our company was established in 2005, and since then we've expanded our team by including more than 350+ Talented skilled software professionals. Our clients come from the United States, Canada, Europe, Australia, the Middle East, and India, and we create and design IT solutions for them. If you need any more details, you can get them at https://www.beyondkey.com/about and https://www.beyondcloudtek.com/.

Overview:

We are seeking a skilled System Engineer with 4–6 years of experience to manage and support client environments. The role requires strong expertise in Microsoft Entra Connect, Azure Entra ID, hybrid environments, and M365 administration, with a focus on security, migrations, and endpoint management.

Must Have:

Active Directory & Identity

• Configure and manage Microsoft Entra Connect for on-premises identity synchronization with Azure AD and SSO.
• Manage and support hybrid Exchange environments (on-premises Exchange integrated with M365).
• Basic knowledge of antispam and mail flow settings (e.g., AV, spam filtering).
• Advanced configuration of Autodiscover, SPF, DKIM, and public DNS management.
• Administer and manage M365 services (Exchange Online, SharePoint, Teams, OneDrive, etc.).
• Implement and manage M365 compliance requirements and security configurations.
• Maintain mail security configurations for spam filtering, AV, and other protections.
• Implement and manage security policies for Azure environments (access management, encryption).
• Collaborate with IT teams and stakeholders to troubleshoot and provide support.
• M365 user and group migration from on-premises to cloud-based services.
• Design, deploy, and manage Intune policies and profiles for Windows 10, iOS, Android, macOS.
• Configure and troubleshoot device enrollment, compliance, conditional access, app protection, and app deployment.
• Integrate Intune with Azure AD, Exchange Online, SharePoint, Teams, OneDrive.
• Implement and manage Microsoft Defender for Endpoint to protect devices from threats.
• Experience with Microsoft Intune (enrollment, policy, compliance, integration).
• Proficient in Microsoft Defender for Endpoint and Defender for Identity (incident response).
• Strong understanding of Autodiscover, SPF, DKIM, DNS, and conditional access policies.
• Strong communication and troubleshooting skills to support client projects.
• Basic knowledge of Azure Information Protection for data security.

Should Have:

• Advanced troubleshooting of Active Directory, M365 environments, and associated issues.
• Conduct advanced mailbox searches using eDiscovery.
• Configure and manage conditional access policies, SSO, and other M365 security options.
• Perform regular backups and develop/test disaster recovery plans.
• Manage and monitor Azure subscriptions (resource provisioning, access controls, governance).
• Provision and manage Azure resources (VMs, storage, databases, networks).
• Stay updated on new M365 and Azure features to optimize infrastructure.
• Train and support end users on M365 applications and features.
• Write and maintain technical documentation for processes and configurations.
• Plan and execute on-premises to cloud Sacloud migrations (e.g., Exchange to Exchange Online).
• M365 tenant-to-tenant migrations and infrastructure migration to Azure.
• Hybrid setup and troubleshooting during migration phases.
• Provide post-migration support (stability, performance, security).
• Monitor and remediate device health using Microsoft Endpoint Analytics/Health.
• Create and maintain documentation, reports, dashboards for Intune and Defender.
• Configure and manage Microsoft Defender for Identity (identity protection).
• 4–6 years of experience managing Active Directory, M365, and Azure environments.
• Expertise in on-prem to cloud migrations (Exchange, tenant-to-tenant, etc.).

Good to Have:

• L2-level management and maintenance of on-premises Active Directory.
• PowerShell scripting for bulk migration, admin tasks, reporting in M365.
• Design and implement backup and DR solutions for Azure.
• Automate Azure tasks using PowerShell and Azure CLI.
• Monitor service health and performance of M365 and Azure (proactive measures).
• Conduct research on new products/solutions to improve efficiency.
• Design, implement, and troubleshoot Windows Autopilot.
• Implement and manage Microsoft 365 Defender (incident detection/mitigation).
• Respond to security incidents via M365 Defender portal/Security Center.
• Stay updated on Microsoft Defender trends and developments.
• Bachelor’s degree in Computer Science, IT, or related field.
• Proficient in M365 compliance and security configuration (regulatory compliance).
• Experience managing hybrid Exchange and mail flow security (AV, spam, routing).
• Familiar with Windows Server Administration (2012, 2016, 2019).
• Basic Linux skills and knowledge of basic Linux commands.
• Deep understanding of networking concepts (TCP/IP, VLANs, firewalls, routing, etc.).
• Experience with Windows and Linux servers.
• Working knowledge of virtualization (VMware, Hyper‑V, or similar).

Preferred Certifications (Good to Have)

• Microsoft Certified: Security Administrator Associate.