{"id":3325540,"url":"https://alion.io/job/scalable-os-project-engineer-microsoft-365-entra-azure","title":"Project Engineer – Microsoft 365, Entra & Azure","company":{"id":2681560,"name":"Scalable OS","domain":"scalableos.com","url":"https://alion.io/company/scalable-os","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Makati, Philippines"],"countries":["PH"],"hiring_countries":["PH"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CMMC","optional":false},{"name":"DHCP","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Google Workspace","optional":false},{"name":"HIPAA","optional":false},{"name":"Hyper-V","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Teams","optional":false},{"name":"OneDrive","optional":false},{"name":"Power Apps","optional":false},{"name":"Power Automate","optional":false},{"name":"PowerShell","optional":false},{"name":"Service Desk","optional":false},{"name":"SharePoint","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-10-23T00:00:00Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-28T13:52:45Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"SUMMARY Intelligent Technical Solutions is hiring a Project Engineer to deliver Microsoft 365, identity, and migration projects for our clients. This is hands-on cloud engineering, not advisory work: you build and harden tenants, untangle hybrid identity, manage devices through Intune, and move mail, files, and users between platforms without losing data or a weekend. You will work across many client tenants at once, typically with two to five projects running in parallel at different stages. Each project is yours to execute - discovery, build, pilot, cutover, handover - with a senior engineer available for architecture calls. JOB RESPONSIBILITIES MigrationsRun mailbox, tenant, file, and domain migrations end to end using various migration tools - discovery, pilot group, cutover plan, cutover, post-cutover support.\nAgree rollback criteria and a downtime window with the client before the window opens, and hold to them.\nReconcile what actually moved against what was supposed to move, and chase the difference. Microsoft 365 and Entra ID\nBuild and harden tenants: Entra ID, Conditional Access, MFA, SSPR, Exchange Online mail flow, SharePoint and OneDrive structure, Teams provisioning.\nConfigure and troubleshoot hybrid identity - Entra Connect and Cloud Sync, OU and attribute filtering, sync errors, UPN and domain suffix changes, soft-match and hard-match object merges, immutableID collisions.\nDiagnose mail flow fast when it breaks: MX, SPF, DKIM, DMARC, Autodiscover, connectors, transport rules, message trace. Azure and endpoints\nDeploy and maintain Azure infrastructure: VMs, virtual networks, NSGs, site-to-site VPN, Azure Files, Azure Backup, and Azure Virtual Desktop where clients use it.\nManage client devices through Intune: Autopilot enrolment, compliance and configuration profiles, app packaging and deployment, BitLocker and Defender policy, update rings. Delivery and handover\nWrite the as-built documentation into IT Glue and brief the service desk, so nothing undocumented is left behind.\nKeep project time and status current in the PSA so account managers can see where things stand.\nJoin client calls to explain what is changing, what will briefly break, and when. Requirements 5-10 years in IT overall, with at least 2 years administering Microsoft 365 and Entra ID across more than one organization or tenant. At least five migrations you personally executed - mailbox, tenant-to-tenant, file, or Active Directory domain - with the tooling you used named. You own the technical execution and escalate architecture decisions. You are not expected to design a client's identity strategy from scratch; you are expected to implement one correctly and spot when it is wrong All four of the pillars below are required. Within each, you should be able to do most of what is listed without supervision. 1. Microsoft 365 administration\nExchange Online: mail flow, connectors, transport rules, shared and resource mailboxes, mailbox delegation, message trace, retention basics\nMail DNS: MX, SPF, DKIM, DMARC, Autodiscover, and what TTL does to a cutover\nSharePoint Online and OneDrive: site and library creation, permission inheritance, sharing policies, sync troubleshooting\nMicrosoft Teams: provisioning, guest access, and how Teams relates to the SharePoint site behind it\nMicrosoft 365 admin center, license assignment, and group-based licensing 2. Entra ID (formerly Azure AD)\nUsers, groups, dynamic groups, administrative roles and units\nEntra Connect Sync or Cloud Sync: installation, OU and attribute filtering, and resolving sync errors\nHybrid join versus Entra join, and when each applies\nConditional Access policy design, MFA rollout, SSPR, and why security defaults are not enough\nEnterprise applications and SAML or OIDC single sign-on 3. Azure\nVirtual machines, virtual networks, NSGs, public IPs, site-to-site VPN\nAzure Files with AD DS or Entra authentication; Azure Virtual Desktop basics\nAzure Backup and Recovery Services vaults\nSubscriptions, resource groups, RBAC, and enough cost management to not surprise a client 4. Intune\nEnrollment: Windows Autopilot, co-management, BYOD, Apple and Android enrollment\nCompliance policies, configuration profiles, and the Settings Catalog\nApp deployment: Win32 packaging (.intunewin), Store apps, and line-of-business apps\nBitLocker policy and Defender for Endpoint onboarding\nUpdate rings and Windows Update for Business 5. Migration delivery - demonstrable experience in at least two of:\nOn-premises Exchange to Exchange Online: cutover, staged, or hybrid using the Hybrid Configuration Wizard\nTenant-to-tenant migration following an acquisition, divestiture, or rebrand\nGoogle Workspace or IMAP to Microsoft 365\nFile server or NAS to SharePoint Online, OneDrive, or Teams\nActive Directory domain migration or consolidation: ADMT, SID history, forest trusts, UPN suffix change, workstation re-domain\nAnother MDM platform into Intune 6. Windows Server and AD DS\nActive Directory Domain Services, DNS, DHCP, Group Policy, file and print services\nHyper-V setup and configuration 7. PowerShell\nBulk operations against Exchange Online, Microsoft Graph, and Entra\nYou read and modify scripts rather than only running ones you found 8. Working style\nExperience working on a fully remote team.\nClient-facing: comfortable explaining a downtime window to a non-technical stakeholder.\nDocumentation discipline - across many tenants, undocumented work is lost work.\nAvailable for scheduled after-hours and weekend cutover windows.\nPrior MSP or multi-client experience. Security and compliance: Microsoft Purview (DLP, retention, sensitivity labels, eDiscovery), Defender for Office 365, Defender for Cloud Apps, Secure Score remediation, CIS benchmarks, HIPAA or CMMC-adjacent client work Privileged identity: Privileged Identity Management, access reviews, entitlement management Automation: Power Automate, Power Apps, Azure Automation, Logic Apps, Graph API scripting beyond cmdlets CERTIFICATION:\n• At least one current Microsoft role-based certification, or demonstrable equivalent experience. Examples: Code Certification MS-102 Microsoft 365 Administrator Expert SC-300 Identity and Access Administrator MD-102 Endpoint Administrator AZ-104 Azure Administrator Associate AZ-800 / AZ-801 Windows Server Hybrid Administrator MS-700 Teams Administrator SC-200 Security Operations Analyst","description_format":"text","description_chars":6370,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Philippines","iso":"PH","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Business Process Outsourcing (BPO)","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-10-27T09:50:08Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":47,"reasons":["conf:1","velocity","win:early","comp:junior"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/scalable-os-project-engineer-microsoft-365-entra-azure","json_url":"https://alion.io/job/scalable-os-project-engineer-microsoft-365-entra-azure.json","meta":{"generated_at":"2026-10-28T16:09:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21789,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2681560},"rest":"https://alion.io/mcp/rest/get_company?id=2681560"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fscalable-os-project-engineer-microsoft-365-entra-azure"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fscalable-os-project-engineer-microsoft-365-entra-azure"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fscalable-os-project-engineer-microsoft-365-entra-azure"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/scalable-os-project-engineer-microsoft-365-entra-azure\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fscalable-os-project-engineer-microsoft-365-entra-azure"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3325540}},{"tool":"search_jobs","arguments":{"company":"scalableos.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3325540},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}