Senior Systems Engineer (MSP)

Landshark Recruiting; Washington (District of Columbia, MD); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

100% covered health insurance

Unlimited PTO + paid holidays

401k+ 4% company match

Fully remote; DMV onsite optional

Job summary

Landshark Recruiting is partnering with an established MSP that supports 100+ businesses across the DC metro area and beyond. The firm has built a growing Microsoft 365 security and AI-readiness practice to secure tenants for safe Copilot adoption.

This role is a senior, hands-on engineer and the top technical escalation point above the help desk and field teams. You’ll train with the engineers who built the security practice, then take over escalations within about six months.

Qualifications

• 6+ years of Microsoft 365 and network engineering in MSP or multi-tenant environments.
• Hands‑on experience deploying Conditional Access, Intune and Purview in client tenants
• Strong networking skills: firewalls, VLANs, VPN and Wi‑Fi (SonicWall or Cisco is a plus)
• A security‑first mindset: Zero Trust, Defender for Endpoint and Office 365, MDR tooling, and a track record of improving Secure Score
• Regular, practical use of PowerShell and Microsoft Graph
• Strong documentation skills, including runbooks others can actually follow
• Patience for coaching junior engineers

Responsibilities

• Own the architecture across the client base. M365, identity, endpoints, network, backup and security for a portfolio of client environments.
• Take the escalations. Resolve them, document them, hand them back, and teach the front line so the next one doesn’t come to you.
• Deliver security and AI-readiness deployments. Tenant assessments, Purview, Conditional Access, Intune, Defender and Copilot readiness, typically about two weeks per client.
• Scope and deliver projects. Migrations, Intune rollouts, firewall replacements and M365 cleanups. Quote the hours, then hit them.
• Join account managers in client meetings. Handle the technical side and explain it in the client’s language, not ours.

Skills

Microsoft 365

Network engineering

PowerShell

Documentation

Client communication

Project leadership

Tools

Intune

Purview

Defender for Endpoint

PowerShell

Job description

Landshark Recruiting is partnering with an established Managed Services Provider that supports 100+ businesses across the DC metro area. Alongside its managed services, the company has built a growing Microsoft 365 security and AI-readiness practice. That work helps clients secure their tenants so they can safely adopt tools like Copilot. The practice is scaling quickly, and this hire is a key part of that growth.

The Role

You’ll be a senior, hands‑on engineer and the top technical escalation point above the help desk and field teams. You’ll own the technical standard, a single baseline for M365, network and security applied consistently across the client base. You’ll also lead projects from scoping through delivery. You’ll start by training alongside the engineers who built the security practice, and within about six months you’ll take over their escalations.

What You’ll Do

• Own the architecture across the client base. M365, identity, endpoints, network, backup and security for a portfolio of client environments. You’ll know the state of a tenant before you open it.
• Take the escalations. Resolve them, document them, hand them back, and teach the front line so the next one doesn’t come to you.
• Deliver security and AI-readiness deployments. Tenant assessments, Purview, Conditional Access, Intune, Defender and Copilot readiness, typically about two weeks per client.
• Scope and deliver projects. Migrations, Intune rollouts, firewall replacements and M365 cleanups. Quote the hours, then hit them.
• Join account managers in client meetings. Handle the technical side and explain it in the client’s language, not ours.

Experience/Requirements

• 6+ years of Microsoft 365 and network engineering at an MSP or in a multi‑tenant environment
• Hands‑on experience deploying Conditional Access, Intune and Purview in client tenants
• Solid networking skills: firewalls, VLANs, VPN and Wi‑Fi (SonicWall or Cisco is a plus)
• A security‑first mindset: Zero Trust, Defender for Endpoint and Office 365, MDR tooling, and a track record of improving Secure Score
• Regular, practical use of PowerShell and Microsoft Graph
• Strong documentation skills, including runbooks others can actually follow
• Patience for coaching junior engineers

Nice to Have

• SC-300, SC-400, MS-102 or MD-102 certification
• Exposure to CMMC or NIST 800-171
• Experience with ConnectWise, NinjaOne, Kaseya or ITGlue
• Experience with AI tools such as Copilot or Claude, and automation tools such as n8n or Power Automate

The Details/ Benefits:

• 100% covered employee health Insurance
• Unlimited PTO + paid holidays
• 401k+ 4% company match
• Fully remote with no office requirement. Candidates local to the DMV are preferred for occasional on‑site client visits in Northern Virginia and DC.