Managed Services Engineer - Microsoft 365 & Identity at SHI… · Remote

Managed Services Engineer - Microsoft 365 & Identity Location: US - Remote About Us Since 1989, SHI International Corp. has helped organizations change the world through technology. We’ve grown every year since, and today we’re proud to be a $16 billion global provider of IT solutions and services. Over 17,000 organizations worldwide rely on SHI’s concierge approach to help them solve what’s next. But the heartbeat of SHI is our employees – all 7,000 of them. If you join our team, you’ll enjoy: Our commitment to diversity, as the largest minority- and woman-owned enterprise in the U.S. Continuous professional growth and leadership opportunities. Health, wellness, and financial benefits to offer peace of mind to you and your family. World-class facilities and the technology you need to thrive – in our offices or yours. Job Summary The Managed Services Engineer – Microsoft 365 & Identity is responsible for designing, deploying, supporting, and optimizing Microsoft 365 and identity-based solutions across SHI‑managed customer environments. This role partners closely with internal teams and customers to deliver secure, scalable, and high‑performing collaboration, messaging, and identity platforms. The ideal candidate brings strong Microsoft 365 and identity expertise, a customer‑first mindset, and a passion for continuous improvement and automation. This is a remote position requiring a dedicated, distraction‑free home office and participation in camera‑on meetings. Role Description Design, build, and support Microsoft 365, Exchange Online, Entra ID (Azure AD), and directory services Administer identity platforms including Entra ID, and Active Directory, and Okta Administer and optimize the customer’s Microsoft 365 Collaboration Suite, including Teams, Exchange Online, SharePoint, and OneDrive. Design, implement, and manage Conditional Access policies within Entra ID (Azure AD) to enforce security requirements and compliance. Continuously monitor and refine Conditional Access rules to adapt to evolving business needs and threat landscapes. Collaborate with security and compliance teams to ensure Conditional Access policies align with organizational policies and regulatory requirements. Design, implement, and manage MDM policies and mobile device management for secure access and compliance. Act as the primary escalation point to resolve advanced and complex issues related to Microsoft 365 and O365 services (including Teams, Exchange Online, SharePoint, OneDrive, and Intune). Collaborate with the customer to implement changes, resolve issues, and optimize their Microsoft 365 and MDM environment based on best practices. Monitor, troubleshoot, and resolve performance, security, and availability issues Optimize environments through standardization, automation, and best practices Lead and contribute to managed services and IT projects Engage directly with customers through meetings, incidents, change requests, and project delivery Develop and maintain Standard Operating Procedures (SOPs) Track time and document work accurately within SHI systems Participate in audits, compliance efforts, and service improvement initiatives Mentor and support junior engineers and service desk team members Participate in an on‑call rotation and provide after‑hours support as needed Core Technical Focus Areas Microsoft 365 management and administration (Exchange Online, Teams, SharePoint, OneDrive) Identity and access management (Entra ID / Azure AD, AD, Okta) Conditional Access policy design, implementation, and troubleshooting within Entra ID (Azure AD). Zero Trust security principles, including risk-based access controls and adaptive authentication. Security and compliance controls within Microsoft 365 Mobile device management (policy configuration, deployment, and support) Automation and scripting Monitoring, troubleshooting, and optimization Behaviors and Competencies Collaboration: Can proactively seek out diverse perspectives, facilitate open communication among team members, and drive toward consensus and action. Initiative: Can proactively seek out challenges, initiate projects, and contribute to innovative ideas. Communication: Can effectively communicate complex ideas and information to diverse audiences and can facilitate effective communication between others. Customer Service: Can proactively seek out customer feedback, empathize with customers, and tailor solutions to their unique needs. Technical Troubleshooting: Can proactively seek out potential technical problems, initiate preventive measures, and contribute to innovative solutions. Time Management: Can consistently use time effectively, balance multiple tasks, and meet deadlines. Organization: Can effectively coordinate multiple projects, delegate tasks where appropriate, and employ advanced organizational tools and methods. Willingness to Learn: Can regularly integrate new skills and knowledge into daily work and is open to feedback and making changes accordingly. Self-Development: Can actively seek feedback and use it constructively for personal growth. Microsoft 365 administration and troubleshooting Exchange Online configuration and support Entra ID (Azure AD) Hands-on experience configuring and supporting Conditional Access policies in Entra ID / Azure AD. Ability to assess and remediate user and device access risks using Conditional Access and related security tools. Familiarity with multi-factor authentication (MFA), sign-in risk policies, and session controls. Mobile Device Management (Tanium, Intune / Endpoint Manager or equivalent) DNS configuration and troubleshooting Automation and scripting (PowerShell, Python, or similar) Familiarity with SaaS security, backup, and recovery solutions Strong analytical and troubleshooting skills Clear written and verbal communication skills Ability to communicate technical concepts to technical and non‑technical audiences Strong customer focus with a sense of ownership and accountability Ability to manage competing priorities and meet deadlines Collaborative, team‑oriented mindset Commitment to continuous learning and improvement Ability to work effectively in a remote, camera‑on environment Bachelor’s degree in a related field or equivalent practical experience 3–5 years of experience in a managed services or Microsoft 365 engineering role Experience working in customer‑facing environments Experience using version control systems such as Git or Azure DevOps Up to 10% travel annually Participation in a rotating on‑call schedule Ability to work occasional evenings, weekends, or holidays as business needs require Must maintain utilization targets as defined by leadership Must successfully pass a CJIS Background Check upon Hire and annually thereafter Certifications Microsoft 365 Associate (or ability to obtain within 3 months) ITIL v3+ certification (or ability to obtain within 6 months) Preferred Qualifications Experience with IT Glue, Autotask, Datto RMM, or similar tools Familiarity with security platforms (CrowdStrike, Defender, SentinelOne, etc.) Experience with SaaS data protection and backup solutions (Druva, SkyKick, or similar) Experience working in regulated environments The estimated annual pay range for this position is $110,000 - $140,000 which includes a base salary and bonus. The compensation for this position is dependent on job-related knowledge, skills, experience, and market location and, therefore, will vary from individual to individual. Benefits may include, but are not limited to, medical, vision, dental, 401K, and flexible spending. Equal Employment Opportunity – M/F/Disability/Protected Veteran Status