Microsoft 365 Implementation & Migration Engineer

Project DescriptionWe are looking for a Microsoft 365 Implementation & Migration Engineer to support a large-scale Microsoft 365 transformation for one of the leading cinema operators in Germany, with operations across several European markets.The project focuses on transitioning from legacy IT infrastructure to a modern, secure, cloud-based digital workplace. The transformation is structured into two phases.The first phase involves establishing a secure Microsoft 365 environment, implementing identity and access management, deploying endpoint management solutions, and migrating core collaboration and communication services to the cloud. This includes Microsoft Entra ID, Microsoft Intune, Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and Microsoft 365 Apps.The second phase focuses on enabling advanced Microsoft 365 capabilities, including Microsoft 365 Copilot, workflow automation with Power Automate, and data analytics with Power BI.The role will involve hands-on technical implementation, migration, configuration, security hardening, and troubleshooting. You will contribute to delivering a consistent and secure digital workplace for headquarters and distributed cinema locations across multiple countries.
TechnologiesMicrosoft 365 | Microsoft Entra ID | Microsoft Intune | Exchange Online | Microsoft Teams | SharePoint Online | OneDrive | Microsoft 365 Apps | Microsoft 365 Copilot | Microsoft Defender for Office 365 | PowerShell | Microsoft Graph | Windows Autopilot | Power Automate | Power BI

Zakres obowiązków

• Configure Microsoft Entra ID, including users, groups, licenses, RBAC, MFA, Conditional Access, hybrid identity, and least-privilege access.
• Plan and execute migrations to Exchange Online, Teams, SharePoint Online, and OneDrive, managing mail flow, permissions, and collaboration settings using SPMT, Migration Manager, or equivalent tools.
• Deploy and manage Microsoft 365 Apps, including Intune or Office Deployment Tool configuration, updates, and activation.
• Manage Intune, Windows Autopilot, BYOD, MAM, device compliance, endpoint security, and encryption policies.
• Configure Microsoft Defender for Office 365, anti-phishing protection, Safe Links, Safe Attachments, SPF, DKIM, and DMARC.
• Support Microsoft 365 Copilot deployment, validate prerequisites and licensing, and address excessive permissions, oversharing, and data governance.
• Troubleshoot identity, authentication, synchronization, mail flow, Microsoft 365 services, and device enrollment issues using Entra ID logs, Exchange message trace, PowerShell, and Microsoft Graph.
• Collaborate with stakeholders to ensure smooth implementations and migrations across distributed business locations.

Wymagania

Must-Have Skills & Experience

• Hands-on experience administering and implementing Microsoft 365 environments.
• Strong knowledge of Microsoft Entra ID, including user and group management, dynamic groups, licensing, administrative roles, and least-privilege RBAC.
• Practical experience configuring MFA and Conditional Access, including policy design, report-only testing, exclusions, and emergency access (break-glass) accounts.
• Experience with hybrid identity solutions, including Microsoft Entra Connect or Cloud Sync configuration and synchronization troubleshooting.
• Good knowledge of Microsoft Intune, including device enrollment, Windows Autopilot, BYOD/MAM, configuration profiles, and compliance policies.
• Experience deploying Microsoft 365 Apps using Intune or the Office Deployment Tool, including update channel management and activation.
• Hands-on experience with Exchange Online migration and administration, including mailboxes, distribution lists, permissions, and mail flow.
• Knowledge of email authentication and security mechanisms, including MX records, SPF, DKIM, and DMARC.
• Experience administering Microsoft Teams, SharePoint Online, and OneDrive, including policies, site structures, sharing settings, permissions, and file migrations.
• Practical knowledge of Microsoft 365 migration tools, such as SPMT and Migration Manager.
• Experience implementing baseline Microsoft 365 security controls, including Microsoft Defender for Office 365 policies and Intune endpoint security configurations.
• Understanding of Microsoft 365 Copilot prerequisites, licensing, security requirements, and permission readiness.
• Good PowerShell skills and experience working with Exchange Online, Microsoft Graph, and Microsoft Teams PowerShell modules.
• Ability to troubleshoot technical issues using sign-in logs, message trace, Intune device status, and other diagnostic tools.
• English proficiency at B2 level or higher.

Nice-to-Have Skills

• Experience with advanced identity and access management features, including Privileged Identity Management (PIM), Access Reviews, and Microsoft Entra ID Protection.
• Knowledge of Microsoft Purview, including sensitivity labels, Data Loss Prevention (DLP), and retention policies.
• Experience with Copilot governance and adoption, including DSPM for AI, SharePoint Advanced Management, user training, and usage reporting.
• Knowledge of Microsoft Defender for Endpoint, Microsoft Defender XDR, and Microsoft Secure Score.
• Experience with advanced Windows Autopilot scenarios and Microsoft Configuration Manager (SCCM) co-management.
• Experience with Microsoft Graph API, Power Automate, or other automation solutions.
• Familiarity with third-party migration tools such as ShareGate or BitTitan.
• Microsoft certifications such as MS-102, MD-102, or SC-300. Additional certifications, including SC-200, SC-401, or MS-700, will be an advantage.

Tech stack

• RBAC
• MFA
• Testing
• Cloud
• Intune
• Windows
• Exchange Online
• Security
• SharePoint
• Office 365
• PowerShell
• PIM
• Data Loss Prevention
• DLP
• AI
• SCCM
• API
• Power Automate