Senior IT Support Engineer

The Senior IT Support Engineer will be a key member of the IT department and provide advanced-level support, troubleshooting, and administration of the Microsoft 365 environment.

The role requires the candidate to handle complex technical issues, design and implement solutions for optimal performance, and lead escalations from the lower tiers of support. The role involves deep expertise in Microsoft 365 services, including Exchange Online, SharePoint Online, Teams, Azure Active Directory, Intune, Defender, CASB, DLP along with a focus on security, compliance, and automation.

Candidate should have a minimum of 8 years of relevant experience.

Should be able to work both as part of a team and under their own initiative.

Should carry a positive attitude towards business problems.

Key Accountabilities:

1. Manage Microsoft 365 tenant.
2. Manage the day-to-day administration, monitoring, and support of Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Microsoft Intune, Defender, CASB, and Entra Identity.
3. Manage user & computer identities, roles, and permissions using Azure Active Directory & On-premises Active Directory.
4. Manage the day-to-day administration, monitoring, and support of Mimecast email security gateway.
5. Provide support and resolve end user email issues, access issues, and other issues related to Office 365 services.
6. Administer Microsoft Teams, ensuring proper configuration, collaboration tools, and compliance.
7. Maintain and configure Microsoft 365 Defender to mitigate security risks and respond to incidents. Monitor the defender logs on a daily basis.
8. Ongoing administration of security features across Microsoft 365, including Multi-Factor Authentication (MFA), Conditional Access, Identity Protection, and other advanced security features.
9. Administration, configuration, and ongoing maintenance of Microsoft Intune for managing devices (Windows, iOS, Android, and macOS) and applications.
10. Configuration and enforcement of mobile device management (MDM) and mobile application management (MAM) policies using Intune.
11. Manage device enrollment processes, including automated provisioning, configuration profiles, and compliance policies.
12. Manage Microsoft 365 security features (Data Loss Prevention (DLP), Data Classification, Information Rights Management (IRM), etc.).
13. Ensure compliance with company policies and applicable regulations using Microsoft 365 Compliance tools.
14. Maintain the secure score of the entire tenant within the acceptance range.
15. Automate daily and repetitive tasks with PowerShell scripts.
16. Maintain awareness of updates, patches, and new features; plan and execute monthly patches, upgrades, or changes to ensure optimal performance.
17. Continuously evaluate and improve the configuration and performance of the Microsoft 365 environment.
18. Collaborate with Managed Service Provider and internal teams to resolve IT infrastructure issues.
19. Ongoing administration of Trellix endpoint DLP.

• Strong troubleshooting and problem-solving skills.
• Knowledge of Microsoft 365 security and compliance features.
• Understanding of Microsoft 365 security & compliance features, including Conditional Access, Identity Protection, Threat Management, and Data Loss Prevention.
• Proficiency in PowerShell scripting for automation and management of Microsoft 365 services.
• Excellent communication and interpersonal skills.