Senior Microsoft Engineer (Level 3) | Azure | M365 | Security
About the role
The Senior Microsoft Engineer (Level 3) will act as a technical authority within a high-performing operations team, supporting complex Microsoft cloud environments for multiple commercial customers. This hands-on senior engineering role focuses on resolving complex technical escalations, strengthening security standards, driving technology modernisation, and improving operational efficiency across Microsoft 365, Intune, Entra ID, Defender, and Azure. The position involves proactive optimisation of customer environments, mentoring engineers, establishing technical standards, and driving continuous improvement. The employer is an established technology services provider delivering managed IT and Microsoft cloud solutions, with a strong emphasis on security, operational excellence, and proactive technology management. The company offers a range of benefits including medical insurance, home office and internet allowances, wellness support, and flexible work arrangements.
Must have
- At least 7 years of experience in systems engineering, cloud engineering, or managed IT services, including significant experience in senior technical support or Level 3 engineering
- Proven experience working within a Managed Service Provider (MSP), supporting multiple commercial customer environments
- Strong understanding of managed services operations, incident management, problem management, and change management
- Demonstrated ability to own complex technical issues, conduct root-cause analysis, and deliver sustainable solutions
- Advanced hands-on experience with Microsoft Intune and Microsoft Endpoint Manager
- Strong knowledge of Windows Autopilot, device enrolment, configuration profiles, compliance policies, application deployment, and Windows 10/11 administration
- Experience with endpoint security, device lifecycle management, update management, and Microsoft Defender for Endpoint integration
- Advanced administration and troubleshooting experience across Microsoft 365, including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams
- Knowledge of Microsoft 365 licensing, including Business Premium, E3, and E5, and their associated security and compliance capabilities
- Understanding of Microsoft Purview, including Data Loss Prevention (DLP) policies and sensitivity labels
- Deep expertise in identity and access management, authentication, identity protection, and access governance
- Advanced experience implementing and troubleshooting Conditional Access, multifactor authentication (MFA), and Single Sign-On (SSO)
- Knowledge of hybrid identity, Entra Connect, directory synchronisation, authentication protocols, role-based access control, and least-privilege security models
- Familiarity with Granular Delegated Admin Privileges (GDAP) and delegated administration across multiple customer tenants
- Strong hands-on experience with Microsoft Defender for Endpoint and the broader Microsoft Defender security ecosystem
- Experience implementing endpoint protection, attack surface reduction, vulnerability management, and security policies
- Knowledge of Microsoft Defender for Office 365, Microsoft Defender XDR, Zero Trust principles, and Microsoft security best practices
- Ability to review Microsoft Secure Score and implement recommendations to strengthen security posture
- Strong experience administering and troubleshooting Azure environments, including virtual machines, networking, storage, backup, monitoring, and resource management
- Knowledge of Azure role-based access control, Azure Policy, security configuration, governance, and cost management
- Familiarity with Azure Lighthouse and multi-tenant Azure administration
- Advanced PowerShell scripting skills for automating Microsoft 365, Intune, Entra ID, and Azure administration
- Strong experience with Microsoft Graph API for automation, reporting, and configuration management
- Ability to develop, troubleshoot, and maintain secure, reusable, and well-documented scripts and automated processes
- Familiarity with the Australian Signals Directorate (ASD) Essential Eight framework and its application to commercial environments
- Experience implementing Microsoft security controls to support Essential Eight maturity improvements
- Exposure to Microsoft Sentinel, Log Analytics, advanced security monitoring, and broader Microsoft Purview compliance capabilities
- Familiarity with multi-tenant management platforms, including Microsoft 365 Lighthouse, Azure Lighthouse, and PSA/RMM tools such as ConnectWise, HaloPSA, Autotask, NinjaOne, or Datto RMM
- Experience contributing to customer technology roadmaps, security improvement plans, and Microsoft licensing reviews
- Understanding of ITIL-aligned service management practices
Nice to have
- Microsoft Certified: Endpoint Administrator Associate (MD-102)
- Microsoft 365 Certified: Administrator Expert (MS-102)
- Microsoft Certified: Azure Administrator Associate (AZ-104)
- Additional certifications in identity and access management, such as SC-300, and Azure security, such as AZ-500, are advantageous. Equivalent practical experience and technical knowledge are also valued.
Technologies
- Authentication
- Azure
- Cybersecurity
- DLP
- Microsoft Entra ID
- IAM
- Intune
- ITIL
- Microsoft 365
- OneDrive
- PowerShell
- Microsoft Purview
- Microsoft Sentinel
- SharePoint
- SSO
- Windows
- XDR
- Zero Trust
Highlights
Salary is paid in Australian Dollars. Medical insurance is provided from day one for you and your spouse (or parents if unmarried). Home office setup and internet allowances are included. Flexible work options are available (home or office). The company reimburses industry certifications and provides mental health support. Application involves storage of contact details and possible future contact for other roles; AI tools may be used in the hiring process but final decisions are made by humans.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka