M365 Engineer | Work from Office | Morning Shift
Cloudstaff Philippines Inc.
Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.
Benefits offered by this job
Job summary
Cloudstaff Philippines Inc. is seeking a hands-on M365 Engineer to build, migrate, and operate the Microsoft 365 and Entra ID environment as Cloudstaff scales its tenant operations. You will deliver migrations, security hardening, and BAU support in a small, cross-functional team.
The role covers administration of Exchange Online, SharePoint, Teams, Intune and Defender, with a focus on secure, scalable tenancy and data protection. Office-based with a morning shift in the Philippines.
Qualifications
- Four+ years managing M365 and Entra ID in production.
- Experience with Exchange Online, SharePoint Online, OneDrive and Teams.
- Proficient in CA, MFA, SSO and Graph/PowerShell.
Responsibilities
- Build, migrate and operate M365/Entra ID environments.
- Migrate mailboxes, files and workloads between tenants.
- Administer Dynamics 365 / Power Platform alongside M365.
- Develop runbooks and provide end-user support post-migration.
Skills
Education
Tools
Job description
Looking for a role that fosters collaboration, creativity and career growth in a vibrant office environment? We got you covered! Join our team at Cloudstaff, the #1 workplace everywhere! Think you qualify for the role? Attach a 1-2 minute video intro and introduce yourself to us so we can meet you virtually. Attach this together with your updated CV to become a priority applicant!
M365 Engineer
Work from Office
Philippines - Pampanga (Angeles)/Ortigas
Morning Shift
The Microsoft 365 (M365) Engineer is a hands-on engineering role that helps build, migrate, and operate the Microsoft 365 and Microsoft Entra ID environment as Nexgen transitions off its incumbent managed service provider into its own dedicated tenant.
Early in the programme, the role builds familiarity with the new tenancy and helps develop the IT operating procedures alongside the Principal M365 Consultant, then delivers the hands-on migration before moving into business-as-usual operation, hardening and support.
Because the team is small, the role is deliberately broad and helps cover the parallel security and platform functions, including administration of the Nexgen Microsoft Dynamics 365 environment, alongside its primary Microsoft discipline.
- Support the build and configuration of the greenfield Microsoft 365 and Microsoft Entra ID tenant with the Principal M365 Consultant, covering Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Microsoft Intune and Microsoft Defender.
- Plan and execute the migration of mailboxes, files, collaboration content, Power Platform and Power BI workloads off the incumbent tenant into the Nexgen tenant.
- Manage Microsoft Entra ID for identity, single sign-on (SSO) and Conditional Access, implement phishing-resistant multi-factor authentication (MFA), and run Privileged Identity Management (PIM) using Microsoft Entra ID P2 add-on licensing.
- Manage the fleet as Microsoft Entra ID joined and Microsoft Intune managed, retiring remaining Windows 10 devices and enrolling workstations into the Nexgen tenant, applying Centre for Internet Security (CIS) and ACSC Essentials hardening baselines.
- Operate the endpoint protection platform (Microsoft Defender for Endpoint or CrowdStrike) and application control, restoring devices to full reporting coverage.
- Onboard remaining non-single sign-on applications to Microsoft Entra ID and roll out Microsoft Purview sensitivity labelling and Data Loss Prevention (DLP) across Microsoft 365.
- Provide day-to-day administration of Microsoft Dynamics 365, including user onboarding and licence assignment, security roles, security groups, and record and field-level permissions (administrative configuration and access management, not Dynamics development or customisation).
- Develop and maintain IT operations runbooks for the new environment, and provide day-to-day Microsoft 365 administration and end-user support after migration.
- Produce evidenced Essential Eight (Level 1) and Centre for Internet Security (CIS) self-assessments for the endpoint fleet.
- Deliver backup and disaster recovery independence for Microsoft 365, covering tenant configuration through Desired State Configuration (DSC) and immutable data backups.
- Administer the Power Platform, applying data loss prevention and tenant isolation to Power Apps, Power Automate and Power BI workspaces.
- Provide endpoint and identity telemetry to the Security Operations Engineer and the Security Operations Centre (SOC) to support detection and response.
- Microsoft 365 (E3 licensing with add-ons), Microsoft Entra ID with P2 for PIM, and Microsoft Intune for device management.
- Microsoft Defender for Endpoint or CrowdStrike for endpoint protection, with application control as the incumbent whitelisting tool.
- Microsoft Purview for classification, labelling and data loss prevention, and Microsoft 365 Desired State Configuration for tenant configuration management.
- Microsoft Dynamics 365 line of business applications, administered through the Power Platform admin centre, with access and permissions managed via Microsoft Entra ID security groups and Dynamics 365 security roles.
- Cloud-only Microsoft Entra ID hardened to the Australian Signals Directorate (ASD) Blueprint for Secure Cloud, feeding endpoint and identity telemetry to the Nexgen Security Information and Event Management (SIEM) platform.
- Four or more years administering Microsoft 365 and Microsoft Entra ID (Azure AD), including Exchange Online, SharePoint Online, OneDrive and Microsoft Teams in a production environment.
- Strong Microsoft Entra ID experience covering Conditional Access, multi-factor authentication (MFA), SSO and Privileged Identity Management.
- Practical Microsoft Intune experience enrolling and managing Microsoft Entra ID joined Windows 11 devices with compliance and configuration policies.
- Experience operating an endpoint protection platform and application control, and supporting endpoint telemetry.
- Scripting and automation with PowerShell and the Microsoft Graph.
- Experience administering Microsoft Dynamics 365 from an operational standpoint, covering user onboarding, licensing, security roles, security groups and permissions (rather than as a Dynamics developer or customiser).
- Working knowledge of the Essential Eight and CIS baselines, Microsoft 365 backup and migration between tenants.
- Experience hardening tenants to the ASD Blueprint for Secure Cloud and evidencing Essential Eight maturity.
- Tenant-to-tenant migration experience, including mail and file migration and the associated tooling.
- Power Platform administration experience covering Power Apps, Power Automate and Power BI governance.
- Exposure to Amazon Web Services (AWS) and hybrid identity, and ITIL or equivalent service management experience.
- Relevant Microsoft certifications such as MS-102 (Microsoft 365 Administrator), SC-300 (Identity and Access Administrator) or MD-102 (Endpoint Administrator), or equivalent experience.
- Microsoft certification in Dynamics 365 or Power Platform administration (for example PL-200 or MB910) is an advantage but not essential.
- A relevant tertiary qualification or equivalent experience.
- Work as part of a small, distributed team, taking broad ownership and covering adjacent roles when needed, collaborating closely with the vCISO, Security Operations Engineer and SOC Analyst.
- Maintain clear as-built documentation and configuration records so the Nexgen platform stays supportable after transition.
Need to have hands on experience in dealing with M365 tenants and have been involved in tenant migrations
- Comprehensive health and life insurance on your 16th day of employment, covering 1 free dependent on the 16th day of employment
- Up to 24 leave credits per year
- Flexible leave credits which may be used for vacation, emergency and sick leaves
- Endless opportunities for career advancement
- Exclusive ATM inside the office for employee's convenience
- Annual Performance Review with Salary Increase
- We set you up for success with a company-provided PC/Laptop and fiber internet connection
- Look forward to weekly office perks for work from office staff – Free Coffee, Meals and Beer Fridays!
- Top notch workplace with first class VIP lounge and game rooms
- Child friendly spaces to cater to the needs of employees with children, enhancing work-life balance
- Participate and join our CS Social Clubs and Special Interest Groups to connect with colleagues
- Mental Wellness Employee Assistance program through Lifeworks
- In-house psychiatrist available to support employees' well-being
- Become part of the Employee Share Units program
- Cloudstaff Dream Points - To be used for bidding useful items like appliances, kitchenettes etc.
Established in 2005, Cloudstaff is a leading outsourcing company that empowers businesses to thrive through smarter talent solutions. We're passionate about creating a work environment that fosters your professional growth and overall well-being.
- Award-winning Culture: We're committed to building the #1 Workplace Everywhere, with a proven track record of staff engagement initiatives and industry recognition
- Invest in You: We support your development through comprehensive training programs, mentoring and opportunities for career advancement
- Thrive as an Individual: We offer a strong work-life balance with flexible schedules, meaningful perks and a collaborative team environment.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
