Systems Engineer
BAL
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
Berry Appleman & Leiden (BAL) is seeking a Systems Engineer to build and improve the Microsoft 365 tenant and adjacent platforms, focusing on Intune, Exchange Online, and automation. You will own solution design and implementation across identity, access, and security integrations, collaborating with Cyber and IT teams.
The role emphasizes automation, safe change delivery, and scalable provisioning, with a focus on reliability, security, and user experience.
Qualifications
- 4+ years in enterprise systems engineering focused on Microsoft 365 and Intune.
- Hands-on expertise with Exchange Online administration (mail flow, transport rules, connectors, shared mailboxes).
- Automation experience with PowerShell and Microsoft Graph; Azure Automation runbooks.
Responsibilities
- Design and implement Intune baselines and Autopilot configurations.
- Automate tenant tasks via PowerShell and Graph; develop Azure Automation runbooks.
- Build SharePoint/Teams information architecture and governance.
- Design and manage Exchange Online configurations and anti-spam posture.
Skills
Education
Tools
Job description
Who we are: BAL is a team of brilliant people who change lives through elite immigration work and collaborative innovation. We pursue the exceptional in all that we do, but never at the expense of our values. There’s no denying our work is demanding, both in volume and pace, but we’re up for the challenge. We love the balance of hard work and fun – so, you’ll see us in jeans as we shatter glass ceilings and conventional stereotypes. BAL employees feel valued, rewarded, and respected. We seek opportunities to be of service to others and our communities. We are committed to your growth and development, and want to set you up for success here at BAL and beyond.
Who you are: You are looking for work that has a purpose. You aren’t afraid to roll up your sleeves and get stuff done. You learn quickly. You move fast. You embrace challenge and detail as well as creative thinking. You believe you have something unique to contribute and you aren’t afraid to raise your hand. You understand that powering human achievement is ultimately about impacting a real person. You are looking for a place to grow and an environment where everyone has a spot and is genuinely welcome.
We’re better together: A bright, driven person like you and an industry-leading powerhouse like BAL? It’s a perfect combination! We truly want to see you succeed here and become an integral part of our mission to provide an experience that makes a positive difference in people’s lives. Come be a part of something special, where you can have an impact and be valued just for being you!
In addition to competitive pay, a discretionary annual bonus, and a supportive, team oriented culture, we offer an outstanding benefits package that includes medical, dental, vision, disability, and life insurance, sick time, unlimited vacation, and 401(k) with company match.
Berry Appleman & Leiden is not your typical law firm when it comes to technology. We've built an in-house Products team from the ground up that is dedicated to building the best technology in our industry. Our Products Team supports our flagship SaaS product, Cobalt, which won the SIIA CODiE award for "Best Legal Solution" in 2020, was a 2020 Tech Titans Finalist for Corporate Innovation and won the 2021 Law.com award for Most Innovative Operations Team. We've also built our industry's first mobile application, a new B2C mobile app and we're looking for new trails to blaze this year!
The Software Engineer plays a vital role in contributing to software design, development, and the overall product lifecycle. This position involves collaborating with a diverse team of professionals to create, support, and deploy production applications.
The Systems Engineer builds and improves the Microsoft 365 tenant and adjacent platforms to enhance reliability, security, and user experience. The role owns solution design and implementation for Intune, SharePoint, Teams, Entra ID integrations, Exchange Online, OneLogin SSO, and targeted Azure and AWS WorkSpaces capabilities. The engineer emphasizes automation (PowerShell/Graph, Azure Automation) and safe change delivery.
- Designs and implements solutions across multiple Microsoft 365 workloads with measurable reliability and security gains.
- Influences standards through engineering, documentation, and peer reviews.
- Partners with Cyber and Network to deliver end-to-end outcomes (identity, device posture, secure access).
- Engineer Intune baselines (compliance, configuration, update rings), Autopilot, app packaging/lifecycle.
- Automate tenant tasks via PowerShell and Microsoft Graph; develop Azure Automation runbooks and schedules.
- Build SharePoint/Teams information architecture and governance (site templates, lifecycle, external access controls).
- Design and manage Exchange Online configurations: transport rules, connectors, accepted domains, anti-spam/phish posture (with Security).
- Integrate applications with OneLogin and/or Entra ID using SAML/OIDC and SCIM; implement role- and group-based access.
- Implement Conditional Access and device-based controls in partnership with Cyber.
- Execute Microsoft 365 Admin Center licensing provisioning at scale; optimize assignments and reclaim unused licenses.
- Author RFCs/CRs; perform impact analysis, pilots, staged rollouts, and backout plans.
- Create monitoring/health dashboards (Intune compliance, device posture, sign-in risk, Exchange mail flow).
- Contribute to audit evidence and control alignment (ISO/NIST/CIS) in collaboration with Cyber.
- 4+ years in enterprise systems engineering focused on Microsoft 365 and Intune.
- Hands‑on expertise with Exchange Online administration (mail flow, transport rules, connectors, shared mailboxes).
- Demonstrated automation with PowerShell and Microsoft Graph; experience creating Azure Automation runbooks.
- Experience with OneLogin or Entra ID app integrations (SAML/OIDC/SCIM) and Conditional Access.
- Proven experience with Microsoft 365 Admin Center licensing provisioning and lifecycle management.
- SharePoint/Teams governance and lifecycle design.
- AWS WorkSpaces image engineering and policy integration.
- Exposure to DLP/Insider Risk and SIEM integrations (with Security).
- Certifications: MS-102, MD-102, SC-300, AWS Associate (nice-to-have).
- Intune/Autopilot, Windows/macOS/iOS/Android management.
- Exchange Online (mail flow, transport, connectors, anti‑spam posture).
- Azure Automation, Azure Monitor, Log Analytics, PowerShell/Graph.
- OneLogin and Entra ID (SAML/OIDC, SCIM, Conditional Access).
- SharePoint/Teams administration and governance.
- Systems thinking; clear problem decomposition and documentation.
- Proactive risk management and crisp communication across teams.
- Bias for automation and measurable outcomes.
- ≥ 95% Intune compliance; ≤ 2% configuration drift across assigned scopes.
- Change success rate ≥ 98% with zero P1s caused by change.
- 30–40% automation coverage for repetitive tenant tasks; monthly health dashboards adopted by the team.
- Measured improvement to Exchange mail flow resiliency and phishing control efficacy (in partnership with Security).
- Microsoft 365 Admin Center, Exchange Admin Center, Intune/Autopilot, SharePoint/Teams Admin.
- Azure Automation, Azure Monitor, Log Analytics, PowerShell, Graph API, Git.
- Entra ID, OneLogin, AWS WorkSpaces, ServiceNow/Jira
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
