Microsoft 365 Identity & File Migration Engineer

Required Qualifications

Experience

• 8+ years of experience supporting enterprise Active Directory environments.
• 5+ years of hands-on experience designing and implementing Group Policy Objects (GPOs).
• 5+ years of experience with Microsoft Intune and endpoint management solutions.
• 5+ years of experience implementing Single Sign-On (SSO) technologies.
• 5+ years of experience with Microsoft Entra ID and Entra Connect synchronization.
• 3+ years of experience leading file server migrations to Microsoft 365.
• Experience supporting large-scale enterprise cloud transformation initiatives.

Primary Responsibilities

Active Directory Architecture & Administration

• Design, implement, and maintain enterprise Active Directory environments.
• Administer complex multi-domain and multi-forest Active Directory infrastructures.
• Develop and maintain Active Directory standards, governance, and operational procedures.
• Perform Active Directory assessments, health checks, remediation, and modernization activities.
• Support domain consolidation, migrations, and hybrid identity initiatives.
• Troubleshoot complex authentication, DNS, LDAP, Kerberos, and replication issues.

Group Policy (GPO) Design & Implementation

• Design, deploy, and manage enterprise Group Policies supporting users, workstations, and servers.
• Develop GPOs for:
  • Security hardening
  • User experience management
  • Application deployment
  • Device configuration
  • Compliance requirements
• Lead GPO migration and transformation initiatives.
• Manage loopback processing, WMI filtering, inheritance, permissions delegation, and GPO troubleshooting.
• Create governance standards and documentation for Group Policy administration.

Microsoft Intune & Endpoint Management

• Design and implement Microsoft Intune solutions for endpoint management.
• Configure and manage:
  • Windows Autopilot
  • Device Enrollment
  • Compliance Policies
  • Configuration Profiles
  • Endpoint Security Policies
  • Application Deployment
  • Conditional Access Integration
• Migrate traditional GPO controls to modern Intune and cloud-based management solutions.
• Support co-management between Configuration Manager (SCCM/MECM) and Intune.
• Implement Mobile Device Management (MDM) and Mobile Application Management (MAM) strategies.
• Manage endpoint lifecycle and device security posture.

Identity & Access Management (IAM)

• Design and support enterprise identity and access management solutions.
• Implement role-based access controls (RBAC) and identity governance frameworks.
• Support identity lifecycle management processes including provisioning and deprovisioning.
• Implement and maintain Multi-Factor Authentication (MFA), Conditional Access, and Zero Trust security principles.
• Collaborate with cybersecurity teams to strengthen enterprise identity controls.

Single Sign-On (SSO) & Authentication

• Design and deploy Single Sign-On solutions across cloud and on-premises applications.
• Integrate applications with Microsoft Entra ID and other identity providers.
• Implement and troubleshoot:
  • SAML 2.0
  • OAuth 2.0
  • OpenID Connect (OIDC)
  • WS-Federation
  • Kerberos Authentication
  • LDAP Authentication
• Lead application onboarding to SSO platforms.
• Resolve identity federation and authentication issues.

Microsoft Entra ID & Hybrid Identity

• Design and support Microsoft Entra ID environments.
• Configure and manage Microsoft Entra Connect synchronization.
• Implement:
  • Password Hash Synchronization
  • Pass-Through Authentication
  • Seamless SSO
  • Hybrid Identity
  • Conditional Access Policies
• Monitor and troubleshoot Entra synchronization and identity-related issues.
• Support Microsoft 365 identity modernization initiatives.

File Server Migration to OneDrive & SharePoint Online

• Lead migrations from legacy file servers and network shares to:
  • OneDrive for Business
  • SharePoint Online
  • Microsoft Teams
• Conduct discovery, assessment, and content analysis activities.
• Design migration strategies including:
  • Wave planning
  • User readiness
  • Cutover planning
  • Post-migration validation
• Analyze and remediate NTFS permissions and access control models.
• Implement migration tools including:
  • Microsoft SPMT
  • ShareGate
  • Quest
  • AvePoint
• Validate migrated data, permissions, metadata, and user access.
• Develop migration runbooks, governance models, and operational support documentation.

Automation & Scripting

• Develop PowerShell automation for:
  • Active Directory administration
  • Intune administration
  • Entra ID synchronization monitoring
  • User lifecycle management
  • Reporting and compliance monitoring
• Automate operational processes and migration activities.

Technical Skills

Identity & Access Management

• Active Directory Domain Services (AD DS)
• Microsoft Entra ID (Azure AD)
• Entra Connect Synchronization
• Active Directory Federation Services (ADFS)
• MFA Implementation
• Conditional Access
• Identity Governance
• Privileged Identity Management (PIM)

Endpoint Management

• Microsoft Intune
• Windows Autopilot
• Endpoint Security
• Device Compliance
• Mobile Device Management (MDM)
• Mobile Application Management (MAM)
• SCCM / MECM Co-Management

Collaboration & Content Migration

• OneDrive for Business
• SharePoint Online
• Microsoft Teams
• File Server Migration
• NTFS Permission Remediation
• ShareGate
• Quest
• AvePoint
• Microsoft SharePoint Migration Tool (SPMT)

Authentication & Security

• SAML
• OAuth
• OpenID Connect
• Kerberos
• LDAP
• Azure Conditional Access
• Zero Trust Architecture

Scripting & Automation

• PowerShell
• Microsoft Graph
• Automation and Reporting