Project Engineer – Microsoft 365, Entra & Azure

ScalableOS; Makati; Remote; PHP 1,200,000 - 1,800,000; Full time

Job summary

ScalableOS is seeking a Project Engineer to deliver Microsoft 365, Entra ID, and migration projects for client environments. This hands-on cloud engineering role builds and hardens tenants, manages hybrid identity, and moves mail, files, and users without data loss.

You will work across multiple client tenants concurrently—from discovery to handover—with senior engineers available for architecture calls. This is a fully remote role.

Qualifications

• 5-10 years in IT overall, with at least 2 years administering Microsoft 365 and Entra ID across more than one tenant.
• Experience delivering migrations (mailbox, tenant-to-tenant, file, or AD domain) using enterprise tooling.
• Ability to own technical execution and elevate architecture decisions.

Responsibilities

• Migrations end-to-end: mailbox, tenant, file, domain across multiple tenants.
• Configure and troubleshoot Microsoft 365 services and Entra ID across tenants.
• Deploy and manage Azure infrastructure and Intune for client devices.
• Write as-built docs and brief service desk; keep clients informed of progress.

Tools

Intune

Azure

Entra ID

Hybrid identity

Job description

Makati, Philippines | Posted on 10/23/2026

• State/Province National Capital Region (Manila)
• Country Philippines

About Us

At ScalableOS, we're redefining offshoring by connecting growth-focused businesses with top talents across the Philippines. Our expertise is in providing top-tier talent for IT companies, with a strong focus on Managed Service Providers (MSPs), Tax & Accounting, and other industries. To continue delivering exceptional results, we’re looking for passionate individuals ready to make an impact and thrive in a team built on trust, integrity, and excellence. Join us as we drive continuous growth and scalability. Your next big opportunity starts here!

Job Description

SUMMARY

Intelligent Technical Solutions is hiring a Project Engineer to deliver Microsoft365, identity, and migration projects for our clients. This is hands-on cloudengineering, not advisory work: you build and harden tenants, untangle hybrididentity, manage devices through Intune, and move mail, files, and users betweenplatforms without losing data or a weekend.

You will work across many client tenants at once, typicallywith two to five projects running in parallel at different stages. Each projectis yours to execute — discovery, build, pilot, cutover, handover — with asenior engineer available for architecture calls.

JOB RESPONSIBILITIES

Migrations

• Run mailbox, tenant, file, and domain migrationsend to end using various migration tools — discovery, pilot group, cutoverplan, cutover, post-cutover support.
• Agree rollback criteria and a downtime windowwith the client before the window opens, and hold to them.
• Reconcile what actually moved against what wassupposed to move, and chase the difference.

Microsoft 365 andEntra ID

• Build and harden tenants: Entra ID, ConditionalAccess, MFA, SSPR, Exchange Online mail flow, SharePoint and OneDrivestructure, Teams provisioning.
• Configure and troubleshoot hybrid identity —Entra Connect and Cloud Sync, OU and attribute filtering, sync errors, UPN anddomain suffix changes, soft-match and hard-match object merges, immutableIDcollisions.
• Diagnose mail flow fast when it breaks: MX, SPF,DKIM, DMARC, Autodiscover, connectors, transport rules, message trace.

Azure and endpoints

• Deploy and maintain Azure infrastructure: VMs,virtual networks, NSGs, site-to-site VPN, Azure Files, Azure Backup, and AzureVirtual Desktop where clients use it.
• Manage client devices through Intune: Autopilotenrolment, compliance and configuration profiles, app packaging and deployment,BitLocker and Defender policy, update rings.

Delivery and handover

• Write the as-built documentation into IT Glueand brief the service desk, so nothing undocumented is left behind.
• Keep project time and status current in the PSAso account managers can see where things stand.
• Join client calls to explain what is changing,what will briefly break, and when.

Requirements

• 5-10 years in IT overall, with at least 2 yearsadministering Microsoft 365 and Entra ID across more than one organization ortenant.
• At least five migrations you personally executed— mailbox, tenant-to-tenant, file, or Active Directory domain — with thetooling you used named.
• You own the technical execution and elevate architecture decisions. You are not expected to design a client's identitystrategy from scratch; you are expected to implement one correctly and spotwhen it is wrong

All four of the pillars below are required. Within each, youshould be able to do most of what is listed without supervision.

1. Microsoft 365administration

• Exchange Online: mail flow, connectors,transport rules, shared and resource mailboxes, mailbox delegation, messagetrace, retention basics
• Mail DNS: MX, SPF, DKIM, DMARC, Autodiscover,and what TTL does to a cutover
• SharePoint Online and OneDrive: site and librarycreation, permission inheritance, sharing policies, sync troubleshooting
• Microsoft Teams: provisioning, guest access, andhow Teams relates to the SharePoint site behind it
• Microsoft 365 admin center, license assignment,and group-based licensing
• Users, groups, dynamic groups, administrativeroles and units
• Entra Connect Sync or Cloud Sync: installation,OU and attribute filtering, and resolving sync errors
• Hybrid join versus Entra join, and when eachapplies
• Conditional Access policy design, MFA rollout,SSPR, and why security defaults are not enough
• Enterprise applications and SAML or OIDC singlesign-on
• Azure Files with AD DS or Entra authentication;Azure Virtual Desktop basics
• Azure Backup and Recovery Services vaults
• Subscriptions, resource groups, RBAC, and enoughcost management to not surprise a client
• Enrollment: Windows Autopilot, co-management,BYOD, Apple and Android enrollment
• Compliance policies, configuration profiles, andthe Settings Catalog
• App deployment: Win32 packaging (.intunewin),Store apps, and line-of-business apps
• BitLocker policy and Defender for Endpointonboarding
• Update rings and Windows Update for Business

5. Migration delivery — demonstrable experience in at least two of:

• On-premises Exchange to Exchange Online:cutover, staged, or hybrid using the Hybrid Configuration Wizard
• Tenant-to-tenant migration following anacquisition, divestiture, or rebrand
• Google Workspace or IMAP to Microsoft 365
• File server or NAS to SharePoint Online,OneDrive, or Teams
• Active Directory domain migration orconsolidation: ADMT, SID history, forest trusts, UPN suffix change, workstationre-domain
• Another MDM platform into Intune

6. Windows Server andAD DS

• Active Directory Domain Services, DNS, DHCP,Group Policy, file and print services
• Hyper-V setup and configuration

7. PowerShell

• Bulk operations against Exchange Online,Microsoft Graph, and Entra
• You read and modify scripts rather than onlyrunning ones you found

8. Working style

• Experience working on a fully remote team.
• Client-facing: comfortable explaining a downtimewindow to a non-technical stakeholder.
• Documentation discipline — across many tenants,undocumented work is lost work.
• Available for scheduled after-hours and weekendcutover windows.
• Prior MSP or multi-client experience.

Security andcompliance: Microsoft Purview (DLP, retention, sensitivity labels,eDiscovery), Defender for Office 365, Defender for Cloud Apps, Secure Scoreremediation, CIS benchmarks, HIPAA or CMMC-adjacent client work

Privileged identity: Privileged Identity Management, access reviews, entitlement management

Automation: Power Automate, Power Apps, AzureAutomation, Logic Apps, Graph API scripting beyond cmdlets

CERTIFICATION:

· At least one current Microsoft role-basedcertification, or demonstrable equivalent experience. Examples: