Level 2 IT Support Engineer - Azure Intune & Microsoft 365

ATS Client; Johannesburg; On-site; ZAR 385,912 - 462,247; Full time

Job summary

ATS Client in Johannesburg seeks a Level 2 IT Support Engineer with hands-on Azure, Intune, and M365 experience. You will act as escalation from Level 1, manage MEM and Azure AD, and support Exchange Online including security features, while collaborating with Level 3 architects.

Responsibilities include device enrollment across Windows/macOS/iOS/Android, policy deployment, and monitoring. The role runs 4pm–1am SAST, Monday–Friday, with a permanent contract and a salary of R38,000 CTC per month

Qualifications

• 2–4 years IT support with hands-on Intune and M365.
• Experience managing Intune/Endpoint Manager.
• Proficient in Exchange Online administration via Admin Center and PowerShell.
• Solid knowledge of Azure AD / Entra ID and security features.

Responsibilities

• Administer Intune / MEM and enroll devices.
• Manage Azure AD, conditional access, MFA, and SSO.
• Administer Exchange Online mail flow and mailboxes.
• Troubleshoot complex endpoint and identity issues.
• Provide root cause analysis and document KBs.

Skills

Azure

Intune

M365

Exchange Online

PowerShell

Entra ID

MFA

Autopilot

Endpoint Manager

Hybrid join

Job description

About the Job

Role - L2 Engineer - Azure, Intune & M365

Industry type - MSP (US based)

Working hours - 4pm - 1am SAST, Mon - Fri

Role type - permanent position

Salary - R38,000 CTC per month (inc benefits)

Role Overview

We are looking for a skilled Level 2 IT Support Engineer with hands‑on expertise in Microsoft Azure, Microsoft Intune (Endpoint Manager), and Microsoft 365 including Exchange Online. You will be responsible for managing, supporting, and optimizing the organization’s modern device management and cloud collaboration environment. You will serve as an escalation point from Level 1 support and work closely with Level 3/architects on complex issues.

Key Responsibilities

Microsoft Intune / Endpoint Management

• Administer and manage Microsoft Intune / Microsoft Endpoint Manager (MEM).
• Enroll, configure, and manage Windows, macOS, iOS, and Android devices via Intune.
• Create and deploy device compliance policies, configuration profiles, and conditional access policies.
• Manage Autopilot deployments for zero‑touch Windows provisioning.
• Deploy and manage applications via Intune app deployment (Win32, MSI, LOB apps).
• Monitor device health, compliance status, and remediate non‑compliant endpoints.
• Manage BitLocker encryption policies and recovery keys via Intune.
• Implement and manage Windows Update for Business / Update Rings.

Microsoft Azure / Entra ID

• Manage Azure Active Directory (Entra ID) – users, groups, roles, and licenses.
• Configure and maintain Azure AD Conditional Access policies.
• Manage Azure AD Join / Hybrid Azure AD Join environments.
• Administer Multi‑Factor Authentication (MFA) and Self‑Service Password Reset (SSPR).
• Monitor Azure AD sign‑in logs and audit logs for security anomalies.
• Manage Azure AD Enterprise Applications and SSO integrations.

Microsoft 365 & Exchange Online

• Administer Exchange Online – mailboxes, distribution groups, shared mailboxes, resource mailboxes.
• Manage mail flow rules, connectors, and transport rules.
• Configure and troubleshoot anti‑spam, anti‑phishing, and Safe Links/Attachments (Defender for O365).
• Handle email migrations, PST imports, and mailbox moves.
• Manage Microsoft 365 licenses – assignment, reclamation, and optimization.
• Administer Teams, SharePoint Online, and OneDrive at a support level.
• Configure retention policies, eDiscovery, and compliance features in Microsoft Purview.
• Troubleshoot Outlook connectivity issues (Autodiscover, modern auth, OAuth).
• Manage distribution lists, dynamic groups, and Microsoft 365 Groups.

Security & Compliance

• Implement Zero Trust principles across device and identity management.
• Configure Microsoft Defender for Endpoint policies via Intune.
• Manage Data Loss Prevention (DLP) policies in M365.
• Review and respond to Microsoft Secure Score recommendations.
• Support Information Protection/sensitivity labels deployment.

Support & Operations

• Act as escalation point from Level 1 for Intune and M365‑related issues.
• Troubleshoot and resolve complex endpoint and identity issues within SLA.
• Document solutions, runbooks, and KB articles for known issues.
• Participate in change management and change advisory board (CAB) processes.
• Provide root cause analysis (RCA) for recurring or critical incidents.
• Mentor and guide Level 1 technicians.

Required Skills & Qualifications

Technical Skills

• 2–4 years of experience in IT support with at least 1–2 years hands‑on with Intune and M365.
• Strong knowledge of Microsoft Intune / Endpoint Manager.
• Proficient in Exchange Online administration via Admin Center and PowerShell.
• Solid understanding of Azure Active Directory / Entra ID.
• Experience with Conditional Access, MFA, and identity security.
• Familiarity with Windows Autopilot and device enrollment methods.
• Working knowledge of PowerShell scripting for M365 and Azure AD automation.
• Understanding of DNS, SMTP, MX records, SPF, DKIM, DMARC.
• Experience with Microsoft 365 Admin Center, Exchange Admin Center, and Intune Admin Center.