Modern Workplace Engineer
Aven Hospitality
A complete application in a minute — tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Aven Hospitality is seeking a Senior Modern Workplace Engineer for its Frisco, TX IT Hub Support team. You will own and advance the Microsoft 365 modern workplace ecosystem, including SharePoint Online, Teams, OneDrive, Power Platform, Intune, Entra ID, and Windows 365 Cloud PCs.
You will diagnose complex platform issues, design scalable configurations, implement governance and security controls, and automate repetitive tasks using PowerShell and Graph.
Qualifications
- The candidate is a hands-on technical lead who can diagnose complex platform issues and design scalable configurations.
- that can implement governance and security controls.
- able to automate repeatable processes using PowerShell and Microsoft Graph.
Responsibilities
- Engineer and administer SharePoint Online sites, hub sites, libraries, metadata, permissions, external sharing, storage, sensitivity controls, and lifecycle management.
- Support Microsoft Teams and OneDrive workloads by aligning site architecture, ownership models, file sharing, retention, and governance standards.
- Implement site provisioning standards, access reviews, information architecture, content governance, and secure collaboration practices.
- Troubleshoot advanced access, sync, search, sharing, site performance, versioning, and permission inheritance issues.
- Administer Power Apps, Power Automate, Dataverse environments, connectors, gateways, solution lifecycle, environment settings, and platform capacity.
- Design and enforce Power Platform governance, including DLP policies, environment strategy, connector classification, maker onboarding, and administrative monitoring.
- Partner with business users to review low-code solutions for security, supportability, data access, compliance, and operational readiness.
- Analyze flow failures, app performance, connector errors, service health, licensing impacts, and adoption trends to improve platform reliability.
- Engineer and administer Microsoft Intune for Windows, macOS, iOS, and Android device management across corporate and supported user-owned device scenarios.
- Configure compliance policies, configuration profiles, device restrictions, endpoint security baselines, app protection policies, app deployment, update rings, and enrollment workflows.
- Support Windows Autopilot, Apple device enrollment, device lifecycle management, patching, remote actions, remediation scripts, and endpoint analytics.
- Maintain secure endpoint configurations aligned with CIS-style hardening, organizational standards, audit requirements, and conditional access dependencies.
- Administer Microsoft Entra ID users, groups, dynamic membership rules, enterprise applications, app registrations, service principals, administrative roles, and role-based access.
- Support identity governance, conditional access, multifactor authentication, self-service password reset, access reviews, privileged access controls, and lifecycle workflows.
- Troubleshoot authentication, single sign-on, token claims, group-based access, provisioning, sign-in logs, and application access issues.
- Apply least-privilege, separation-of-duties, break-glass, and secure administrative practices across identity and access operations.
- Administer Windows 365 Cloud PC provisioning, assignment, access, connectivity, user settings, resize actions, reprovisioning, and restore scenarios.
- Support Cloud PC image strategy, provisioning policies, network connectivity, license allocation, device redirection, and security baseline alignment.
- Monitor Cloud PC health, performance, connection quality, policy application, and user experience signals to coordinate remediation.
- Understand VDI architecture concepts, remote access workflows, profile behavior, endpoint dependencies, and end-user support for virtual desktop environments.
- Develop, maintain, and troubleshoot PowerShell scripts for Microsoft 365 administration, including bulk user, group, device, license, application, and policy operations.
- Use Microsoft Graph PowerShell SDK and Graph API concepts to query tenant data, automate Intune and Entra ID tasks, manage devices at scale, and support repeatable administrative workflows.
- Create automation runbooks, scheduled scripts, and operational reports using PowerShell, JSON, CSV, REST API concepts, and secure authentication methods.
- Use KQL and log analysis techniques to investigate sign-in activity, device compliance, endpoint health, audit events, security signals, and service trends.
- Maintain script documentation, version control discipline, error handling, logging, least-privilege permissions, and change control practices for administrative automation.
Skills
Tools
Job description
Aven Hospitality is an innovative technology provider powered by SynXis®, the leading global hospitality commerce and distribution platform. We empower hoteliers around the world to exceed expectations, solve daily challenges, and stay ahead of the competition.
With our comprehensive portfolio of solutions, hoteliers can manage distribution, retailing, payments, operations, and more. Providing hoteliers the tools to maximize revenue, improve operational efficiency, and deliver personalized guest experiences that drive satisfaction.
Our tools are built to seamlessly integrate with each hotelier’s unique strategy, elevating guest satisfaction and creating meaningful connections.
We are pioneering AI in hospitality technology to unlock new opportunities, drive efficiency, and personalize the guest experience. By prioritizing stability, scalability, and data-driven insights, we equip hoteliers to adapt and thrive in an ever-changing landscape, ready for whatever comes next..
Modern WorkplaceEngineer
Location:Frisco, TX | Work Model: Onsite | Team: IT Hub Support
The Modern WorkplaceEngineer is responsible forengineering,administering,securing, and continuouslyimproving the organization’s Microsoft 365 modern workplaceecosystem.This roleowns operational support and technical execution acrosscollaborationservices, endpoint management, identityand access controls, business process automation, and virtual desktop services, includingSharePoint Online,Microsoft Teams, OneDrive,Power Platform, Microsoft Intune, Microsoft Entra ID, and Windows 365 Cloud PCs.
The ideal candidate is a hands-ontechnicalleadwho candiagnose complexplatform issues,design scalable configurations,implement governanceand securitycontrols,automate repeatable processesusing PowerShell and Microsoft Graph,and partner with business, security, infrastructure,andservice deskteams to deliver reliable,compliant, andmeasurableworkplace services.
Engineer and administer SharePoint Online sites, hub sites, libraries, metadata, permissions, external sharing, storage, sensitivity controls, and lifecycle management.
Support Microsoft Teams and OneDrive collaboration workloads by aligning site architecture, ownership models, file sharing, retention, and governance standards.
Implement site provisioning standards, access reviews, information architecture, content governance, and secure collaboration practices.
Troubleshoot advanced access, sync, search, sharing, site performance, versioning, and permission inheritance issues.
Administer Power Apps, Power Automate, Dataverse environments, connectors, gateways, solution lifecycle, environment settings, and platform capacity.
Design and enforce Power Platform governance, including DLP policies, environment strategy, connector classification, maker onboarding, and administrative monitoring.
Partner with business users to review low-code solutions for security, supportability, data access, compliance, and operational readiness.
Analyze flow failures, app performance, connector errors, service health, licensing impacts, and adoption trends to improve platform reliability.
Engineer and administer Microsoft Intune for Windows, macOS, iOS, and Android device management across corporate and supported user-owned device scenarios.
Configure compliance policies, configuration profiles, device restrictions, endpoint security baselines, app protection policies, app deployment, update rings, and enrollment workflows.
Support Windows Autopilot, Apple device enrollment, device lifecycle management, patching, remote actions, remediation scripts, and endpoint analytics.
Maintain secure endpoint configurations aligned with CIS-style hardening, organizational standards, audit requirements, and conditional access dependencies.
Administer Microsoft Entra ID users, groups, dynamic membership rules, enterprise applications, app registrations, service principals, administrative roles, and role-based access.
Support identity governance, conditional access, multifactor authentication, self-service password reset, access reviews, privileged access controls, and lifecycle workflows.
Troubleshoot authentication, single sign-on, token claims, group-based access, provisioning, sign-in logs, and application access issues.
Apply least-privilege, separation-of-duties, break-glass, and secure administrative practices across identity and access operations.
Administer Windows 365 Cloud PC provisioning, assignment, access, connectivity, user settings, resize actions, reprovisioning, and restore scenarios.
Support Cloud PC image strategy, provisioning policies, network connectivity, license allocation, device redirection, and security baseline alignment.
Monitor Cloud PC health, performance, connection quality, policy application, and user experience signals to coordinate remediation.
Understand VDI architecture concepts, remote access workflows, profile behavior, endpoint dependencies, and end-user support for virtual desktop environments.
Develop, maintain, and troubleshoot PowerShell scripts for Microsoft 365 administration, including bulk user, group, device, license, application, and policy operations.
Use Microsoft Graph PowerShell SDK and Graph API concepts to query tenant data, automate Intune and Entra ID tasks, manage devices at scale, and support repeatable administrative workflows.
Create automation runbooks, scheduled scripts, and operational reports using PowerShell, JSON, CSV, REST API concepts, and secure authentication methods.
Use KQL and log analysis techniques to investigate sign-in activity, device compliance, endpoint health, audit events, security signals, and service trends.
Maintain script documentation, version control discipline, error handling, logging, least-privilege permissions, and change control practices for administrative automation.
8+ years of hands-on Microsoft 365 engineering, endpoint management, identityadministration, or modern workplace platformexperience in a mid-size to enterprise environment.
Strong technical knowledge of SharePoint Online, Teams, OneDrive, Power Platform administration, Microsoft Intune, Microsoft Entra ID, and Windows 365.
Experience configuring endpoint compliance, configuration profiles, application deployment, update management, endpoint security controls, and device enrollment methods.
Working knowledge of identity and access management concepts, including conditional access, MFA, SSO, RBAC, app registrations, enterprise applications, and sign-in diagnostics.
Ability to troubleshoot complex collaboration, identity, endpoint, automation, and virtual desktop issues using admin portals, logs, reports, service health, and Microsoft support tools.
Knowledge of Microsoft 365 governance, security, compliance, data protection, role-based access, and operational control best practices.
Advanced PowerShell scripting experience for Microsoft 365, Intune, Entra ID, Exchange Online, SharePoint Online, Teams, and endpoint administration.
Working knowledge of Microsoft Graph PowerShell SDK, Graph API concepts, REST API fundamentals, JSON payloads, CSV data handling, authentication scopes, and least-privilege permissions.
Ability to write, review, debug, document, and maintain scripts with proper error handling, logging, parameterization, testing, and secure credential handling.
Familiarity with KQL, Log Analytics, audit logs, sign-in logs, Intune diagnostics, endpoint analytics, and operational reporting for troubleshooting and trend analysis.
Strong technical documentation, runbook creation, customer service, escalation management, and cross-functional collaboration skills.
Microsoft certifications such as MS-102, MD-102, SC-300, PL-900, PL-200, MS-700, or related Microsoft 365, security, endpoint, or Power Platform certifications.
Experience with Power Platform DLP policies, Managed Environments, Center of Excellence concepts, connector governance, and environment lifecycle controls.
Experience with Windows Autopilot, Apple Business Manager, endpoint analytics, proactive remediations, macOS PPPC profiles, and Intune-based macOS management.
Strong familiaritywith Microsoft Graph,GraphPowerShellSDK, PowerShell modules for Microsoft 365 services, KQL basics, reporting, automation, audit logs, service health monitoring, and operational dashboards.
Experience with Git or other version control tools, Azure Automation, scheduled runbooks, CI/CD concepts, secure app registrations, certificate-based authentication, and automation documentation.
Basic scripting or coding knowledge in Python, JavaScript, or similar languages is a plus for API integration, data transformation, reporting, and workflow automation.
Experience working within ITIL-aligned incident, request, change, problem, knowledge, asset, and configuration management processes.
Stable, secure, and well-documented administration of Microsoft 365 modern workplace platforms with reduced recurring incidents.
Improved end-user experience through faster issue resolution, proactive monitoring, root-cause analysis, and repeatable remediation.
Consistent governance across collaboration, automation, endpoint, identity, and virtual desktop services through standardized policies and controls.
Secure and compliant configuration of devices, identities, access policies, applications, data sharing, and business automation workloads.
High-quality documentation, operational runbooks, troubleshooting guides, and knowledge articles that improve support efficiency and service continuity.
- Very competitive compensation
- Generous Paid Time Off (25 PTO days)
- 8 Hours of Volunteer Time Off (VTO)
- We offer a comprehensive medical, dental and Wellness Program
- 12 weeks paid parental leave
- An infrastructure that allows flexible working arrangements
- Formal and informal reward, recognition and acknowledgement programs
- Lots of fun and engaging employee development events
Aven Hospitality is committed to working with and providing reasonable accommodation to applicants with disabilities. Applicants applying for a Aven Hospitality position with a disability who require a reasonable accommodation for any part of the application or hiring process may contact Aven Hospitality at Contact Us
Determinationson requests for reasonable accommodation will be made on a case-by-case basis.
Aven Hospitality is an equal employment opportunity/affirmative action employer and is committed to providing employment opportunities to minorities, females, veterans and disabled individuals. EEO IS THE LAW
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
