Microsoft Systems Engineer

Tgipower Llc; Boca Raton (FL); Hybrid; USD 50,000 - 60,000; Full time

Job summary

Tgipower Llc is seeking a Microsoft Systems Engineer with hands-on experience managing modern Microsoft cloud environments. You will focus on endpoint management, identity, tenant integrations, and automation, including Intune, Entra ID, and AI-driven workflows in production tenants.

Responsibilities include implementing Conditional Access, integrating Defender, automating processes with Power Automate and PowerShell, and supporting multi-tenant configurations.

Qualifications

• 4–7+ years of experience in Microsoft systems administration, endpoint engineering, or Microsoft 365 infrastructure support.
• Hands-on production experience with Intune, enrollment, compliance policies, profiles, app deployments, updates, Autopilot, and endpoint security baselines across Windows, macOS, iOS, Android.

Responsibilities

• Administer and manage Microsoft Intune across multiple platforms.
• Configure Entra ID with Conditional Access, MFA, RBAC, and identity lifecycle.
• Integrate Intune with Conditional Access and Defender for policy enforcement.
• Manage Microsoft 365 tenant integrations and cross-tenant access (B2B).
• Build workflows using Power Automate for onboarding, offboarding, and lifecycle management.
• Use PowerShell to automate provisioning, reporting, remediation, and admin tasks.
• Troubleshoot access, device, and policy conflicts in live environments.
• Document standards, runbooks, and operational procedures with a production mindset.

Skills

Intune

Entra ID

PowerShell

Power Automate

Microsoft Defender

Conditional Access

Education

MD-102

MS-102

Tools

Azure AD

Job description

Job Title: Microsoft Systems EngineerReports to: Engineering ManagerSummary: We are seeking a Microsoft Systems Engineer with real-world, hands-on experience managing modern Microsoft cloud environments. This role focuses on endpoint management, identity, tenant integrations, and automation, with a strong emphasis on Microsoft Intune, Entra ID, cross-tenant integrations, Power Automate, and AI-driven automation. This is a production-focused role supporting live tenants.Key Responsibilities:Microsoft Endpoint & Identity ManagementAdminister and manage Microsoft Intune across Windows, macOS, iOS, and AndroidConfigure compliance policies, configuration profiles, and application deploymentManage Entra ID including Conditional Access, MFA, RBAC, and identity lifecycleIntegrate Intune with Conditional Access and Defender for policy enforcementTenant & System IntegrationsManage Microsoft 365 tenant integrations and cross-tenant access (B2B)Configure app registrations and secure API accessSupport tenant-to-tenant migrations and coexistence scenariosAutomation & AI-Driven OperationsBuild workflows using Power Automate for onboarding, offboarding, and lifecycle managementUse PowerShell to support and extend automation scenariosLeverage AI and Copilot-based tools to improve operational efficiency and standardizationSecurity & OperationsSupport Conditional Access and device complianceTroubleshoot access, device, and policy conflicts in live environmentsDocument standards, procedures, and automation workflowsRequired Qualifications:4–7+ years of experience in Microsoft systems administration, endpoint engineering, or Microsoft 365 infrastructure supportStrong hands-on production experience with Microsoft Intune, including device enrollment, compliance policies, configuration profiles, application deployment, update rings, Autopilot, and endpoint security baselines across Windows, macOS, iOS, and AndroidStrong experience with Microsoft Entra ID, including Conditional Access, MFA, RBAC, enterprise applications, app registrations, service principals, SSO, access reviews, and identity lifecycle managementProficiency with PowerShell automation and troubleshooting, including scripting for provisioning, reporting, remediation, and administrative task automationExperience building and maintaining workflows using Power Automate for onboarding, offboarding, approval, notification, and operational process automationWorking knowledge of Microsoft Defender, endpoint compliance, tenant security posture, and troubleshooting policy conflicts in live environmentsAbility to document standards, runbooks, implementation steps, rollback plans, and operational procedures with a production-support mindsetRequired Certifications:Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)Microsoft 365 Certified : Microsoft 365 Administrator (MS-102)Preferred Qualifications:MSP, consulting, or multi-tenant experience, including migration, coexistence, cross-tenant access, and high-volume operational support, is highly desirableAdditional Microsoft certifications in Microsoft 365 administration, identity and access, security, or Azure are preferredHands-On Production Requirements:This role requires recent, hands-on experience administering and troubleshooting live Microsoft 365 production tenants. Candidates should be comfortable making controlled changes in production, validating impact, following change management processes, and supporting business-critical systems with minimal disruption.Qualified candidates should demonstrate direct ownership of endpoint enrollment, policy deployment, Conditional Access rollouts, application packaging and deployment, Autopilot provisioning, access troubleshooting, incident response, and post-change validation in production environments. Experience supporting multiple tenants, documenting runbooks, and participating in on-call or escalation support is strongly preferred.Job Type: Full-timeSalary: $50,000.00 - $60,000.00 per yearBenefits: Dental insurance, Health insurance, Vision Insurance, Life Insurance, PTO, and 401(k)Schedule: Monday to FridayWork Location: Remote/Hybrid (Boca Raton, FL)EEO StatementWe are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law.