Lead Modern Workplace Engineer (E603353)

Referment; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

Referment is seeking a hands-on lead engineer to own the architecture and lifecycle of Microsoft 365 services within its modern workplace platform. The role covers SharePoint Online, Exchange Online and OneDrive, with focus on robust access controls using Entra ID, Conditional Access, and Purview.

You will automate deployment and remediation with PowerShell and Microsoft Graph, guide cross-functional teams, and drive production-ready solutions across endpoints and compliance, including

Qualifications

• Eight+ years hands-on end-user computing engineering experience.
• Deep Microsoft 365 expertise across collaboration services and identity.
• Strong PowerShell automation and Microsoft Graph experience.
• Experience delivering solution design and production-ready deployments.

Responsibilities

• Own architecture and lifecycle of SharePoint Online, Exchange Online and OneDrive.
• Design access and data controls with Entra ID, Conditional Access and Purview.
• Automate policy deployment, configuration and remediation using PowerShell and Graph.
• Lead multi-team projects and translate changes into production standards.
• Guide service-desk and operations teams on incidents and endpoint management.

Skills

Microsoft 365

PowerShell

Microsoft Graph

End-user computing

Cross-functional collaboration

Tools

Intune

Workspace ONE

Windows/macOS management

Job description

Referment is working with a global investment and technology firm to find a hands-on lead engineer for its modern workplace platform. The team owns the services, devices and controls behind end-user computing, with Microsoft 365 at the centre of the environment.

You will remain deeply technical while owning core services and leading complex projects from design through production. The remit spans collaboration platforms, identity and compliance controls, automation, endpoint capabilities and escalation-level engineering.

The Role

• Own the architecture and lifecycle of SharePoint Online, Exchange Online and OneDrive services.
• Design access and data controls with Microsoft Entra ID, Conditional Access and Microsoft Purview.
• Automate policy deployment, configuration and remediation using PowerShell and Microsoft Graph.
• Lead multi-team projects and translate changes in the Microsoft ecosystem into production standards.
• Guide service-desk and operations teams on complex incidents while shaping capabilities across endpoint management, mobility and AI enablement.

What We're Looking For

• At least eight years of hands-on end-user computing engineering experience.
• Deep Microsoft 365 expertise across collaboration services, identity and enterprise governance.
• Strong PowerShell automation and practical experience with Microsoft Graph.
• A record of owning solution design and delivery, not solely reactive support.
• Experience as a senior escalation point, with clear communication and strong cross-functional judgement.
• Intune, Workspace ONE, Windows or macOS management, endpoint security or Copilot enablement would be useful additions.

This could suit a senior Microsoft 365 or EUC engineer who wants lead-level technical ownership without moving away from hands-on engineering.