Lead Modern Workplace Engineer (1C202FE)

Referment; New York (NY); On-site; USD 160,000 - 210,000; Full time

Job summary

Referment is seeking a hands-on lead engineer to own the architecture and lifecycle of Microsoft 365 services within a modern workplace platform. The role centers on end-user computing, collaboration platforms, and governance across Exchange Online, SharePoint Online, and OneDrive.

You will drive design of access controls with Entra ID, manage automation via PowerShell and Graph, and guide incident response while influencing endpoint management and AI enablement across the team.

Qualifications

• Eight years of hands-on end-user computing engineering experience.
• Deep Microsoft 365 expertise across collaboration services, identity and enterprise governance.
• Strong PowerShell automation and experience with Microsoft Graph.
• Proven experience owning solution design and delivery, not just reactive support.
• Experience as a senior escalation point with clear communication and cross-functional judgment.
• Experience with Intune, Workspace ONE, Windows or macOS management and endpoint security is a plus.

Responsibilities

• Own the architecture and lifecycle of SharePoint Online, Exchange Online and OneDrive services.
• Design access and data controls with Microsoft Entra ID, Conditional Access and Microsoft Purview.
• Automate policy deployment, configuration and remediation using PowerShell and Microsoft Graph.
• Lead multi-team projects and translate changes in the Microsoft ecosystem into production standards.
• Guide service-desk and operations teams on complex incidents while shaping capabilities across endpoint management, mobility and AI enablement.

Skills

Microsoft 365

PowerShell

Microsoft Graph

End-user computing

Escalation management

Tools

Intune

Workspace ONE

Job description

Referment is working with a global investment and technology firm to find a hands‑on lead engineer for its modern workplace platform. The team owns the services, devices and controls behind end‑user computing, with Microsoft 365 at the centre of the environment.

You will remain deeply technical while owning core services and leading complex projects from design through production. The remit spans collaboration platforms, identity and compliance controls, automation, endpoint capabilities and escalation‑level engineering.

The Role

• Own the architecture and lifecycle of SharePoint Online, Exchange Online and OneDrive services.
• Design access and data controls with Microsoft Entra ID, Conditional Access and Microsoft Purview.
• Automate policy deployment, configuration and remediation using PowerShell and Microsoft Graph.
• Lead multi‑team projects and translate changes in the Microsoft ecosystem into production standards.
• Guide service‑desk and operations teams on complex incidents while shaping capabilities across endpoint management, mobility and AI enablement.

What We're Looking For

• At least eight years of hands‑on end‑user computing engineering experience.
• Deep Microsoft 365 expertise across collaboration services, identity and enterprise governance.
• Strong PowerShell automation and practical experience with Microsoft Graph.
• A record of owning solution design and delivery, not solely reactive support.
• Experience as a senior escalation point, with clear communication and strong cross‑functional judgement.
• Intune, Workspace ONE, Windows or macOS management, endpoint security or Copilot enablement would be useful additions.

This could suit a senior Microsoft 365 or EUC engineer who wants lead‑level technical ownership without moving away from hands‑on engineering.