Microsoft Systems Engineer

CTC Technologies, Inc.; Ann Arbor (MI); Hybrid; USD 85,000 - 110,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401K plan

Paid time off

Job summary

CTC Technologies, Inc. is seeking a Mid-Level Microsoft Systems Engineer to support Windows and Microsoft 365 environments for MSP clients and other accounts. You’ll work across multiple client networks, keeping AD, identity, PKI, and M365 healthy while handling tickets and projects against SLAs.

Role requires hands-on AD DS, DNS/DHCP, AD CS/PKI, and MSP experience; hybrid work with client sites and remote work is available.

Qualifications

• Hands-on AD DS administration across multiple client environments.
• DNS/DHCP/NTP administration and troubleshooting.
• AD CS PKI concepts including templates, renewal, and revocation.
• MS365 Entra ID/Azure AD, Exchange Online, SharePoint Online, and Teams.
• MSP/VAR or IT consulting environment experience preferred.

Responsibilities

• Administer Active Directory across multiple client environments and domain controllers.
• Manage core network services: DNS, DHCP, and NTP for client environments.
• Design, deploy, and maintain AD CS and PKI for clients.
• Administer Microsoft 365 tenants (Entra ID, licensing, device management).
• Support Exchange Online, SharePoint Online, and Teams for clients.
• Provide advanced end-user support for Word, Outlook, and Excel.
• Escalate Tier 2/3 tickets and perform root-cause analysis.
• Onboard clients and execute migrations and deployments.
• Document work in PSA/ticketing platform and manage SLAs.
• Maintain documentation for AD, PKI, and M365 configurations; support change management.

Skills

Active Directory

DNS

NTP

AD CS / PKI

PowerShell

Tools

PowerShell

Job description

CTC Technologies is a Value-Added Reseller (VAR) and Managed Service Provider (MSP), and we're looking for a Mid-Level Microsoft Systems Engineer to support the Windows and Microsoft 365 environments of our managed services (MSP) clients and other client accounts. Rather than owning a single environment, you'll work across a portfolio of client networks and tenants — keeping their Active Directory, identity, and PKI infrastructure healthy and secure, and their Microsoft 365 platforms running reliably. This is a hands‑on, client‑facing engineering role for someone who is equally comfortable troubleshooting a DNS issue for one client, issuing a certificate through AD CS for another, and helping a client's end users get the most out of Word, Outlook, Excel, and Teams — all while managing multiple tickets and projects against defined SLAs.

Key Responsibilities

• Administer and support Active Directory Domain Services across multiple client environments, including domain controllers, OU structure, Group Policy, and directory replication.
• Manage core network services — DNS, DHCP, and NTP — for client environments, ensuring reliable name resolution, IP address allocation, and time synchronization.
• Design, deploy, and maintain Active Directory Certificate Services (AD CS) and PKI for clients, including certificate templates, issuance, renewal, and revocation.
• Administer client Microsoft 365 tenants, including Entra ID (Azure AD) identity, conditional access, licensing, and device/app management.
• Support and maintain Exchange Online, SharePoint Online, and Microsoft Teams for clients, including configuration, permissions, and troubleshooting.
• Provide advanced end‑user support for Windows and Microsoft 365 desktop applications — including Word, Outlook, and Excel — across the client base.
• Serve as an escalation resource for Tier 2/3 tickets involving identity, directory services, network services, or M365 availability, performing root‑cause analysis and remediation.
• Participate in client onboarding and project work, including new AD and M365 tenant builds, migrations, and infrastructure deployments as part of VAR‑sold solutions.
• Document all work clearly and consistently in the company's PSA/ticketing platform and manage competing priorities across multiple clients against contracted SLAs.
• Maintain accurate client documentation for AD, PKI, and M365 configurations, and contribute to change management and security best practices.
• Collaborate with the sales and account management teams on identity governance, certificate lifecycle management, and technology recommendations for clients.

Required Skills & Qualifications

Core Infrastructure & Identity

• Hands-on experience administering Active Directory Domain Services (AD DS), ideally across multiple domains or client environments
• Solid working knowledge of DNS and DHCP administration and troubleshooting
• Experience with NTP / time synchronization in a Windows domain
• Experience with Active Directory Certificate Services (AD CS) and PKI concepts (certificate templates, chains, revocation, renewal)

Microsoft 365 & Productivity Applications

• Administration experience with Microsoft 365 (M365), including Entra ID (Azure AD), ideally across multiple tenants
• Experience administering or supporting Exchange Online
• Experience administering or supporting SharePoint Online
• Experience administering or supporting Microsoft Teams
• Strong working knowledge of Windows desktop applications and Office/M365 apps — Word, Outlook, and Excel
• Prior experience in an MSP, VAR, or IT consulting/services environment strongly preferred
• Comfortable supporting multiple clients and tenants simultaneously, and switching context between environments throughout the day
• Experience with PSA and RMM platforms (e.g., NinjaOne, or similar) a plus
• Strong client-facing communication skills, with the ability to explain technical issues clearly to non-technical stakeholders
• Ability to prioritize and manage multiple concurrent client tickets and projects against defined SLAs

General

• 3–5 years of experience in a systems or infrastructure engineering role supporting Windows and Microsoft environments
• Strong troubleshooting and root-cause analysis skills across network, identity, and application layers
• Clear written and verbal communication skills, with the ability to document technical work for both technical and non-technical audiences

Preferred Qualifications

• Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft 365 Certified: Administrator Expert, or Microsoft Certified: Windows Server Hybrid Administrator
• Experience with PowerShell scripting for automation of AD and M365 administrative tasks across multiple client environments
• Familiarity with Microsoft Partner Center, Granular Delegated Admin Privileges (GDAP), and/or Azure Lighthouse for managing client tenants
• Exposure to hybrid identity (Entra Connect / Azure AD Connect) and conditional access policies
• Experience with endpoint management tools such as Microsoft Intune

What We Offer

• Salary to commensurate with experience
• Health, dental, and vision insurance available and partially paid by employer
• 401K plan
• Paid time off and company holidays
• Hybrid work flexibility
• Exposure to a wide variety of clients, industries, and Microsoft technology stacks
• Opportunities for training, certification, and professional development

CTC Technologies is an equal opportunity employer.

Location

Hybrid — a blend of on-site work at our office and at client sites, with remote flexibility (specific schedule discussed during interview)

Employment Type

Full-Time

Level

Mid-Level

Department

Managed Services / Professional Services

Reports To

Service Delivery Manager

On-Call / After Hours

As-needed basis (occasional; no fixed rotation currently)

We Solve Complex IT and Networking Problems.