Microsoft Systems Engineer

Summary

iPower Technologies is seeking a Microsoft Systems Engineer to support live Microsoft 365 production environments. The role focuses on Intune endpoint management, Entra ID identity administration, tenant integrations, PowerShell and Power Automate workflows, security operations, troubleshooting, and AI-driven automation.

Responsibilities

• Administer and manage Microsoft Intune across Windows, macOS, iOS, and Android
• Configure compliance policies, configuration profiles, and application deployment
• Manage Entra ID including Conditional Access, MFA, RBAC, and identity lifecycle
• Integrate Intune with Conditional Access and Defender for policy enforcement
• Manage Microsoft 365 tenant integrations and cross-tenant access (B2B)
• Configure app registrations and secure API access
• Support tenant-to-tenant migrations and coexistence scenarios
• Build workflows using Power Automate for onboarding, offboarding, and lifecycle management
• Use PowerShell to support and extend automation scenarios
• Leverage AI and Copilot-based tools to improve operational efficiency and standardization
• Support Conditional Access and device compliance
• Troubleshoot access, device, and policy conflicts in live environments
• Document standards, procedures, and automation workflows

Skills

• 4–7+ years of experience in Microsoft systems administration, endpoint engineering, or Microsoft 365 infrastructure support
• Strong hands-on production experience with Microsoft Intune, including device enrollment, compliance policies, configuration profiles, application deployment, update rings, Autopilot, and endpoint security baselines across Windows, macOS, iOS, and Android
• Strong experience with Microsoft Entra ID, including Conditional Access, MFA, RBAC, enterprise applications, app registrations, service principals, SSO, access reviews, and identity lifecycle management
• Proficiency with PowerShell automation and troubleshooting, including scripting for provisioning, reporting, remediation, and administrative task automation
• Experience building and maintaining workflows using Power Automate for onboarding, offboarding, approval, notification, and operational process automation
• Working knowledge of Microsoft Defender, endpoint compliance, tenant security posture, and troubleshooting policy conflicts in live environments
• Ability to document standards, runbooks, implementation steps, rollback plans, and operational procedures with a production-support mindset
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
• Microsoft 365 Certified : Microsoft 365 Administrator (MS-102)
• This role requires recent, hands-on experience administering and troubleshooting live Microsoft 365 production tenants. Candidates should be comfortable making controlled changes in production, validating impact, following change management processes, and supporting business-critical systems with minimal disruption
• Qualified candidates should demonstrate direct ownership of endpoint enrollment, policy deployment, Conditional Access rollouts, application packaging and deployment, Autopilot provisioning, access troubleshooting, incident response, and post-change validation in production environments
• MSP, consulting, or multi-tenant experience, including migration, coexistence, cross-tenant access, and high-volume operational support, is highly desirable
• Additional Microsoft certifications in Microsoft 365 administration, identity and access, security, or Azure are preferred
• Experience supporting multiple tenants, documenting runbooks, and participating in on-call or escalation support is strongly preferred

Qualifications

Must Haves

• 4–7+ years of experience in Microsoft systems administration, endpoint engineering, or Microsoft 365 infrastructure support
• Strong hands-on production experience with Microsoft Intune, including device enrollment, compliance policies, configuration profiles, application deployment, update rings, Autopilot, and endpoint security baselines across Windows, macOS, iOS, and Android
• Strong experience with Microsoft Entra ID, including Conditional Access, MFA, RBAC, enterprise applications, app registrations, service principals, SSO, access reviews, and identity lifecycle management
• Proficiency with PowerShell automation and troubleshooting, including scripting for provisioning, reporting, remediation, and administrative task automation
• Experience building and maintaining workflows using Power Automate for onboarding, offboarding, approval, notification, and operational process automation
• Working knowledge of Microsoft Defender, endpoint compliance, tenant security posture, and troubleshooting policy conflicts in live environments
• Ability to document standards, runbooks, implementation steps, rollback plans, and operational procedures with a production-support mindset
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
• Microsoft 365 Certified : Microsoft 365 Administrator (MS-102)
• This role requires recent, hands-on experience administering and troubleshooting live Microsoft 365 production tenants. Candidates should be comfortable making controlled changes in production, validating impact, following change management processes, and supporting business-critical systems with minimal disruption
• Qualified candidates should demonstrate direct ownership of endpoint enrollment, policy deployment, Conditional Access rollouts, application packaging and deployment, Autopilot provisioning, access troubleshooting, incident response, and post-change validation in production environments

Nice to Haves

• MSP, consulting, or multi-tenant experience, including migration, coexistence, cross-tenant access, and high-volume operational support, is highly desirable
• Additional Microsoft certifications in Microsoft 365 administration, identity and access, security, or Azure are preferred
• Experience supporting multiple tenants, documenting runbooks, and participating in on-call or escalation support is strongly preferred

Benefits

• Dental insurance
• Health insurance
• Vision Insurance
• Life Insurance
• PTO
• 401(k)
• Remote/Hybrid (Boca Raton, FL)