Lead Engineer Modern Workplace

Gijima Holdings; Midrand; On-site; ZAR 700 000 - 900 000; Full time

Job summary

A leading technology solutions provider in Midrand seeks a seasoned professional to design and implement Modern Workplace solutions using Microsoft 365 and Azure technologies. In this role, you will lead architecture reviews, mentor junior engineers, and engage directly with clients to ensure adherence to security and compliance standards. The ideal candidate will have over 5 years of experience in enterprise environments along with a strong understanding of Zero Trust principles and Agile methodologies.

Qualifications

• 5+ years hands-on experience with Microsoft 365 in enterprise environments.
• Proven experience designing Zero Trust architectures.
• Ability to produce enterprise-grade architecture diagrams.

Responsibilities

• Design end-to-end Modern Workplace solutions using Microsoft technology.
• Conduct technical workshops with customer stakeholders.
• Lead architecture reviews and ensure adherence to standards.
• Mentor junior engineers and provide technical guidance.

Skills

Microsoft 365 expertise

Azure AD/Entra ID

Identity & Access Management

Endpoint Management

Collaboration & Productivity tools

Security & Compliance

IaC solutions

Zero Trust Architecture

Agile/Scrum experience

DevOps practices

Job description

Key Responsibilities

• Design end-to-end Modern Workplace solutions across Microsoft 365, Azure AD/Entra ID, Intune/Endpoint Manager, Teams, SharePoint, and Power Platform
• Define technical standards, patterns, and best practices for the Modern Workplace service line
• Lead architecture reviews and provide technical governance across multiple CloudOps pods
• Act as escalation point for complex technical challenges (identity, security, compliance, automation)
• Ensure solutions align with Zero Trust principles, CAF/WAF frameworks, and customer security/compliance requirements
• Delivery Excellence
• Lead discovery and design phases for Modern Workplace engagements (typically 48-week sprints)
• Produce high-quality technical documentation: architecture diagrams, design decisions, runbooks, knowledge transfer materials
• Conduct technical workshops with customer stakeholders (IT leadership, security teams, end users)
• Perform quality assurance on deliverables from Modern Workplace Engineers
• Ensure IaC (Infrastructure-as-Code) standards are followed using PowerShell, Graph API, Bicep/Terraform
• Pod Leadership & Mentoring
• Provide technical direction to Modern Workplace Engineers within CloudOps pods
• Mentor junior and mid-level engineers through code reviews, pair programming, and knowledge sharing sessions
• Contribute to internal capability building: lunch-and-learns, technical blogs, reusable code libraries
• Collaborate with Scrum Masters to ensure sprint planning reflects technical complexity and risk

Customer Engagement

• Build trusted advisor relationships with customer technical leads and IT leadership
• Translate business requirements into technical solutions with clear ROI and risk mitigation
• Present technical recommendations to senior stakeholders (CIOs, CTOs, security officers)
• Identify opportunities for service expansion and continuous improvement
• Service Line Development
• Contribute to Modern Workplace service catalogue evolution (new services, updated unit estimates)
• Stay current with Microsoft roadmap and emerging technologies (Copilot, Viva, Purview, etc.)
• Participate in pre-sales activities: scoping, estimation, technical proposals
• Support recruitment and onboarding of new Modern Workplace Engineers

Essential Skills & Experience

Technical Expertise (Must-Have)

• 5+ years hands-on experience with Microsoft 365 and Azure AD/Entra ID in enterprise environments

Extensive expertise in at least 3 of the following:

1. Identity & Access Management Azure AD/Entra ID, Conditional Access, PIM, MFA, RBAC, B2B/B2C
2. Endpoint Management: Intune, Autopilot, Configuration Profiles, Compliance Policies, Windows 365
3. Collaboration & Productivity: Teams (governance, calling, meetings), SharePoint Online, OneDrive, Exchange Online
4. Security & Compliance: Microsoft Defender suite, Purview (DLP, Information Protection, eDiscovery), Compliance Manager
5. Automation & IaC: PowerShell, Microsoft Graph API, Azure Automation, Bicep/Terraform for M365 resources

• Proven experience designing and implementing Zero Trust architectures
• Strong understanding of hybrid identity (Azure AD Connect, Pass-through Auth, Federation)
• Experience with Microsoft 365 governance frameworks (naming conventions, lifecycle management, guest access policies)

Architecture & Design

• Ability to produce enterprise-grade architecture diagrams (Visio, Draw.io, Lucidchart)
• Experience with CAF/WAF alignment for Modern Workplace workloads
• Understanding of network architecture as it relates to M365 (ExpressRoute, SD-WAN, split tunneling)
• Knowledge of licensing models (E3/E5, F3, add-ons) and cost optimization strategies

Leadership & Communication

• Proven track record of leading technical teams (formal or informal leadership)
• Excellent stakeholder management skills comfortable presenting to C-level executives
• Strong written communication: technical documentation, design decisions, knowledge transfer materials
• Ability to mentor and upskill engineers through coaching and feedback

Delivery & Agile

• Experience working in Agile/Scrum environments (sprints, retrospectives, backlog grooming)
• Comfortable with outcome-based delivery (not just task completion)
• Ability to estimate effort and complexity for Modern Workplace services (unit-based estimation)
• Experience with DevOps practices (CI/CD, version control with Git, automated testing)

Desirable Skills

• Microsoft certifications: MS-100/101 (M365 Administrator), SC-300 (Identity and Access Administrator), MD-102 (Endpoint Administrator), AZ-305 (Azure Solutions Architect)
• Experience with Microsoft Copilot deployment and governance
• Knowledge of Power Platform (Power Apps, Power Automate, Power BI) and governance
• Familiarity with Microsoft Viva suite (Connections, Insights, Learning, Topics)
• Experience with ITSM tools (ServiceNow, Jira Service Management) and M365 integration
• Understanding of data residency, sovereignty, and GDPR compliance in M365
• Experience with Microsoft Defender for Cloud Apps (CASB) and DLP policies
• Background in change management and user adoption for M365 rollouts