Senior Microsoft Engineer – Azure, M365, Security

🔥 3 minutes ago

🇱🇰 Sri Lanka – Remote

⏰ Full Time

🟠 Senior

☁️ Cloud Engineer

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Dijital Team

WebsiteLinkedInAll Job Openings

11 - 50 employees

🤝 B2B

💼 Consulting

☁️ SaaS

B2B • Consulting • SaaS

Dijital Team is a smarter offshoring solution for IT teams. We enable you to build a high performing IT team that will decrease your costs and increase your efficiency - accelerating the growth of your business. We take care of the team so you can take care of the rest.

📋 Description

• Serve as the primary escalation point for complex incidents across Microsoft Intune, Microsoft 365, Entra ID, Microsoft Defender, and Azure • Diagnose and resolve advanced endpoint management, identity, authentication, security, cloud infrastructure, and Microsoft service issues • Lead root-cause analysis and problem management and implement permanent solutions • Coordinate with Microsoft Support and third-party vendors when necessary • Provide technical guidance and troubleshooting support to Level 1 and Level 2 engineers • Establish, maintain, and improve Microsoft security and configuration baselines across customer environments • Standardise configurations across Intune, Microsoft 365, Entra ID, Microsoft Defender, and Azure • Implement and optimise Conditional Access, MFA, endpoint protection, device compliance, and privileged access controls • Monitor configuration drift, security vulnerabilities, and deviations from approved standards • Identify and implement security improvements using Microsoft Secure Score, Defender recommendations, and security frameworks • Monitor Microsoft product updates, roadmap changes, feature releases, deprecations, and security advisories • Recommend infrastructure modernisation, endpoint management improvements, security enhancements, and licensing optimisation • Prepare technical recommendations covering issues, improvements, benefits, risks, and implementation considerations • Support proactive customer engagement and technology roadmap planning • Administer multiple commercial customer environments using multi-tenant management tools • Manage delegated administrative access through GDAP and maintain permissions and governance controls • Use Microsoft 365 Lighthouse and Azure Lighthouse across customer tenants • Conduct tenant security reviews, compliance assessments, and configuration improvements • Develop and maintain PowerShell scripts and Microsoft Graph API integrations • Build reusable automation for configuration, reporting, monitoring, and remediation • Document automation solutions • Mentor Level 1 and Level 2 engineers • Develop technical runbooks, standard operating procedures, troubleshooting guides, and knowledge base articles • Conduct peer reviews of technical changes, scripts, and configurations • Lead knowledge-sharing initiatives and contribute to professional development • Assess technical changes and validate implementation plans, testing, dependencies, and rollback procedures • Support post-change reviews and apply lessons learned

🎯 Requirements

• At least 7 years of experience in systems engineering, cloud engineering, or managed IT services, including significant experience in senior technical support or Level 3 engineering • Proven experience working within a Managed Service Provider (MSP), supporting multiple commercial customer environments • Strong understanding of managed services operations, incident management, problem management, and change management • Demonstrated ability to own complex technical issues, conduct root-cause analysis, and deliver sustainable solutions • Advanced hands-on experience with Microsoft Intune and Microsoft Endpoint Manager • Strong knowledge of Windows Autopilot, device enrolment, configuration profiles, compliance policies, application deployment, and Windows 10/11 administration • Experience with endpoint security, device lifecycle management, update management, and Microsoft Defender for Endpoint integration • Advanced administration and troubleshooting experience across Microsoft 365, including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams • Knowledge of Microsoft 365 licensing, including Business Premium, E3, and E5 • Understanding of Microsoft Purview, including Data Loss Prevention (DLP) policies and sensitivity labels • Deep expertise in identity and access management, authentication, identity protection, and access governance • Advanced experience implementing and troubleshooting Conditional Access, multifactor authentication (MFA), and Single Sign-On (SSO) • Knowledge of hybrid identity, Entra Connect, directory synchronisation, authentication protocols, role-based access control, and least-privilege security models • Familiarity with Granular Delegated Admin Privileges (GDAP) and delegated administration across multiple customer tenants • Strong hands-on experience with Microsoft Defender for Endpoint and the broader Microsoft Defender security ecosystem • Experience implementing endpoint protection, attack surface reduction, vulnerability management, and security policies • Knowledge of Microsoft Defender for Office 365, Microsoft Defender XDR, Zero Trust principles, and Microsoft security best practices • Ability to review Microsoft Secure Score and implement recommendations to strengthen security posture • Strong experience administering and troubleshooting Azure environments, including virtual machines, networking, storage, backup, monitoring, and resource management • Knowledge of Azure role-based access control, Azure Policy, security configuration, governance, and cost management • Familiarity with Azure Lighthouse and multi-tenant Azure administration • Advanced PowerShell scripting skills • Strong experience with Microsoft Graph API • Ability to develop, troubleshoot, and maintain secure, reusable, and well-documented scripts and automated processes • Familiarity with the Australian Signals Directorate (ASD) Essential Eight framework • Experience implementing Microsoft security controls to support Essential Eight maturity improvements • Exposure to Microsoft Sentinel, Log Analytics, advanced security monitoring, and broader Microsoft Purview compliance capabilities • Familiarity with multi-tenant management platforms, including Microsoft 365 Lighthouse, Azure Lighthouse, and PSA/RMM tools such as ConnectWise, HaloPSA, Autotask, NinjaOne, or Datto RMM • Experience contributing to customer technology roadmaps, security improvement plans, and Microsoft licensing reviews • Understanding of ITIL-aligned service management practices • Preferred certifications: MD-102, MS-102, and AZ-104 • Additional SC-300 and AZ-500 certifications are advantageous • Equivalent practical experience and technical knowledge are valued

🏖️ Benefits

• Get paid in Australian Dollars • Medical insurance from day one for you + spouse (or parents if unmarried) • Generous OPD coverage from doctor visits to all your medical needs • Home office setup allowance • Internet allowance • Gym & wellness allowance • Regular team events and engagement activities • Diji Assist mental health and counseling support • Reimbursement for industry certifications • Flexible work – home or office • Rewards and recognition • Christmas and financial year-end parties