Lead Infrastructure Engineer (Exchange, Entra, Intune & Microsoft 365)

About the role

We are looking for a Lead Infrastructure Engineer to join our Infrastructure Engineering team. This is an exciting opportunity to help design, operate, and evolve enterprise-scale Microsoft 365 and end-user computing platforms, including Exchange Online, Entra ID, Active Directory, Intune, SCCM/MECM, endpoint management, and collaboration services.

We would love to speak with you if you have deep hands-on experience engineering complex Microsoft environments and serving as a senior escalation point for identity, messaging, endpoint, and workplace technology platforms. About You - experience, education, skills, and accomplishments 10+ years of experience supporting, engineering, and operating enterprise Microsoft infrastructure environments.

Extensive hands-on experience with Microsoft 365, Exchange Online, Hybrid Exchange, Entra ID, Active Directory, Intune, SCCM/MECM, Microsoft Teams, SharePoint Online, and OneDrive for Business. Experience designing, troubleshooting, and supporting complex Microsoft 365 hybrid environments.

Strong understanding of directory services, identity architecture, authentication protocols, federation, SSO, MFA, Conditional Access, and Zero Trust principles. Proven experience managing large-scale endpoint estates, including Windows 10/11, Autopilot, application deployment, patch management, compliance, and device lifecycle management.

Expert-level PowerShell scripting and automation skills, with experience using Microsoft Graph or modern infrastructure management techniques. Experience resolving enterprise-wide outages, conducting root cause analysis, and improving operational stability for critical services. Strong understanding of Microsoft licensing, service architecture, security controls, compliance requirements, and operational best practices.

It would be great if you also have... Experience with Microsoft Purview, Information Protection, DLP, eDiscovery, and Records Management. Experience with Microsoft Defender for Endpoint, Defender for Identity, and Defender for Office 365. Experience leading Microsoft 365 tenant-to-tenant migrations, M&A activities, divestitures, or large-scale carve-outs.

Familiarity with JAMF, Apple device management, and cross-platform endpoint management. Experience with Azure infrastructure, automation frameworks, Infrastructure as Code, and Microsoft Graph API development. Relevant Microsoft certifications, such as Microsoft 365 Enterprise Administrator Expert, Identity and Access Administrator, Messaging Administrator, Endpoint Administrator, or Azure Administrator.

What will you be doing in this role? Serve as the senior technical authority and Tier 3 escalation point for complex Microsoft infrastructure, identity, messaging, and endpoint management issues. Own the architecture, engineering, and lifecycle management of Microsoft 365 services, including Exchange Online, Entra ID, Teams, SharePoint Online, OneDrive, and Purview.

Lead the design and operation of hybrid identity environments integrating Active Directory, Entra ID, federation services, and directory synchronization platforms. Manage enterprise messaging platforms, including Exchange Online, hybrid Exchange deployments, mail routing, transport, compliance, retention, migration, and messaging security.

Architect and support enterprise endpoint management capabilities across Intune, SCCM/MECM, Autopilot, device compliance, patch management, and application deployment. Drive automation and operational efficiency through PowerShell, Microsoft Graph, and modern infrastructure management techniques.

Partner with Security teams to implement and maintain identity governance, conditional access, privileged access management, DLP, retention, and compliance controls. Support Microsoft 365 tenant optimization, roadmap planning, service modernization, cloud transformation initiatives, and large-scale platform migrations.

About the Team The Infrastructure Engineering team supports the platforms and services that enable secure, scalable, and modern ways of working across the enterprise. This role will partner closely with Security, IT Operations, Workplace Technology, and business stakeholders to deliver reliable Microsoft 365, identity, messaging, collaboration, and endpoint services.

Hours of Work This is a full-time position, primarily working core business hours in your time zone, with flexibility to adjust to various global time zones as needed. Work location and hybrid expectations should be confirmed based on the approved requisition details. Compensation - US The expected base salary for this position is $115,000 - $144,000 USD per year. This role is eligible for (incentive or bonus) earnings.

Individual pay is based upon experience, education, skill and ability, expertise, and relevant factors. We comply with applicable laws and regulations governing non-discrimination in all locations.