Senior System Engineer ( L2 Level )

About Beyond Key:

We are a Microsoft Solution Partner and a Great Place to Work-certified company. "Happy Team Members, Happy Clients" is a principle we hold dear. We are an international IT consulting and software services firm committed to providing. Cutting-edge services and products that satisfy our clients' global needs. Our company was established in 2005, and since then we've expanded our team by including more than 350+ Talented skilled software professionals. Our clients come from the United States, Canada, Europe, Australia, the Middle East, and India, and we create and design IT solutions for them. If you need any more details, you can get them at https://www.beyondkey.com/about and https://www.beyondcloudtek.com/.

Overview:

We are seeking a skilled System Engineer with 4-6 years of experience to manage and support client environments. The role requires strong expertise in Microsoft Entra Connect, Azure Entra ID, hybrid environments, and M365 administration, with a focus on security, migrations, and endpoint management.

Must Have:

Active Directory & Identity

• Configure and manage Microsoft Entra Connect for on-premises identity synchronization with Azure AD and SSO.
• Manage and support hybrid Exchange environments (on-premises Exchange integrated with M365).
• Basic knowledge of antispam and mail flow settings (e.g., AV, spam filtering).
• Advanced configuration of Autodiscover, SPF, DKIM, and public DNS management.
• Administer and manage M365 services (Exchange Online, SharePoint, Teams, OneDrive, etc.).
• Implement and manage M365 compliance requirements and security configurations.
• Maintain mail security configurations for spam filtering, AV, and other protections.
• Implement and manage security policies for Azure environments (access management, encryption).
• Collaborate with IT teams and stakeholders to troubleshoot and provide support.
• M365 user and group migration from on-premises to cloud-based services.
• Design, deploy, and manage Intune policies and profiles for Windows 10, iOS, Android, macOS.
• Configure and troubleshoot device enrollment, compliance, conditional access, app protection, and app deployment.
• Integrate Intune with Azure AD, Exchange Online, SharePoint, Teams, OneDrive.
• Implement and manage Microsoft Defender for Endpoint to protect devices from threats.
• Experience with Microsoft Intune (enrollment, policy, compliance, integration).
• Proficient in Microsoft Defender for Endpoint and Defender for Identity (incident response).
• Strong understanding of Autodiscover, SPF, DKIM, DNS, and conditional access policies.
• Strong communication and troubleshooting skills to support client projects.
• Basic knowledge of Azure Information Protection for data security.

Should Have:

• Advanced troubleshooting of Active Directory, M365 environments, and associated issues.
• Conduct advanced mailbox searches using eDiscovery.
• Configure and manage conditional access policies, SSO, and other M365 security options.
• Perform regular backups and develop/test disaster recovery plans.
• Manage and monitor Azure subscriptions (resource provisioning, access controls, governance).
• Provision and manage Azure resources (VMs, storage, databases, networks).
• Stay updated on new M365 and Azure features to optimize infrastructure.
• Train and support end users on M365 applications and features.
• Write and maintain technical documentation for processes and configurations.
• Plan and execute on-premises to cloud Sacloud migrations (e.g., Exchange to Exchange Online).
• M365 tenant-to-tenant migrations and infrastructure migration to Azure.
• Hybrid setup and troubleshooting during migration phases.
• Provide post-migration support (stability, performance, security).
• Monitor and remediate device health using Microsoft Endpoint Analytics/Health.
• Create and maintain documentation, reports, dashboards for Intune and Defender.
• Configure and manage Microsoft Defender for Identity (identity protection).
• 4-6 years of experience managing Active Directory, M365, and Azure environments.
• Expertise in on-prem to cloud migrations (Exchange, tenant-to-tenant, etc.).

Good to Have:

• L2-level management and maintenance of on-premises Active Directory.
• PowerShell scripting for bulk migration, admin tasks, reporting in M365.
• Design and implement backup and DR solutions for Azure.
• Automate Azure tasks using PowerShell and Azure CLI.
• Monitor service health and performance of M365 and Azure (proactive measures).
• Conduct research on new products/solutions to improve efficiency.
• Design, implement, and troubleshoot Windows Autopilot.
• Implement and manage Microsoft 365 Defender (incident detection/mitigation).
• Respond to security incidents via M365 Defender portal/Security Center.
• Stay updated on Microsoft Defender trends and developments.
• Bachelor’s degree in Computer Science, IT, or related field.
• PowerShell scripting expertise for M365, Intune, Azure automation.
• Proficient in M365 compliance and security configuration (regulatory compliance).
• Experience managing hybrid Exchange and mail flow security (AV, spam, routing).
• Familiar with Windows Server Administration (2012, 2016, 2019).
• Basic Linux skills and knowledge of basic Linux commands.
• Deep understanding of networking concepts (TCP/IP, VLANs, firewalls, routing, etc.).
• Experience with Windows and Linux servers.
• Working knowledge of virtualization (VMware, Hyper-V, or similar).

Preferred Certifications (Good to Have)

• Microsoft Certified: Enterprise Administrator Expert.
• Microsoft Certified: Security Administrator Associate.
• Microsoft Azure Administrator or similar