Microsoft 365 Architect: Zero-Trust & MSP Lead

RemoteFetch; Mexico; Remote; PHP 3,281,000 - 4,375,000; Full time

Benefits offered by this job

Monthly pantry voucher

Vacation + PTO

Medical insurance

Internet & electricity allowance

Job summary

Inviso seeks a seasoned Microsoft 365 Engineer to design, implement and secure modern work environments for enterprise clients. You will own client relationships, run workshops, and deliver Zero Trust aligned M365 architectures across Exchange Online, SharePoint Online, Teams, Intune, Defender, Entra ID, and Purview.

You will also design Azure/VDI environments, automate with PowerShell and Power Automate, manage identity controls, governance, and deliver concise status updates.

Qualifications

• 6+ years of Microsoft 365 consulting, professional services, or MSP experience with direct responsibility for client-facing project delivery.
• Strong expertise in M365 architecture, security, compliance, and automation, including Zero Trustaligned controls, Entra ID licensing, and tenant configuration.
• Excellent written communication; client-ready emails and updates that are clear, concise, and the right level of detail.
• Comfortable presenting to clients; explains technical concepts clearly without needing to be polished.
• Strong independent problem-solving and end-to-end project ownership.
• PowerShell and Power Automate automation, plus SharePoint governance and migration experience.
• Proficiency with Azure, Azure Virtual Desktop, Intune, and Windows 365.
• Nerdio experience, or the ability to work in Nerdio-managed environments.
• DevOps experience including CI/CD and Azure DevOps.
• Hands-on collaboration platform migrations from Google Workspace, Slack, and Zoom.
• Familiarity with Defender for Cloud Apps, Defender for Endpoint, and Purview.
• Microsoft certifications preferred (e.g., SC-300, MS-102, MD-102).

Responsibilities

• Lead Microsoft 365 implementations, migrations, and modernization efforts.
• Serve as the client-facing technical lead: run working sessions and translate technical details into terms clients understand.
• Draft clear, concise customer communications status updates, cutover notices, and recommendations at the right level of detail.
• Assess customer environments and design and deploy secure, Zero Trustaligned M365 architectures and services including: Exchange Online, SharePoint Online, Teams, Intune, Defender, Entra ID, and Purview.
• Design, deploy, and support Azure, Azure Virtual Desktop, and Windows 365 environments, including Nerdio-managed estates.
• Automate with PowerShell and Power Automate; build and govern SharePoint solutions.
• Manage identity and access controls (CA Policy, MFA, RBAC, hybrid identity) and M365 governance frameworks.
• Monitor and administer M365 using security, compliance, and admin centers.
• Partner with security/infrastructure teams to integrate M365 with cloud and on-prem systems.
• Maintain work items and delivery status in Azure DevOps or other work item tracking systems.
• Ensure environments remain secure, compliant, and aligned with best practices.
• Document cloud architectures, processes, and procedures.
• Respond to incidents and support requests.
• Identify opportunities to adopt new services and improve productivity.
• Participate in training and knowledge-sharing activities.
• Maintain =85% billable utilization.

Skills

M365 architecture

Security & compliance

Entra ID

PowerShell

Power Automate

SharePoint governance

Azure & VDI

Nerdio

DevOps CI/CD

Azure DevOps

Migrations - Google Workspace

Defender & Purview

Certifications

Job description

Inviso seeks a seasoned Microsoft 365 Engineer to design, implement and secure modern work environments for enterprise clients. You will own client relationships, run workshops, and deliver Zero Trust aligned M365 architectures across Exchange Online, SharePoint Online, Teams, Intune, Defender, Entra ID, and Purview.

You will also design Azure/VDI environments, automate with PowerShell and Power Automate, manage identity controls, governance, and deliver concise status updates.