Microsoft 365 Identity & File Migration Engineer
Required Qualifications: Experience
- 8+ years of experience supporting enterprise Active Directory environments.
- 5+ years of hands-on experience designing and implementing Group Policy Objects (GPOs).
- 5+ years of experience with Microsoft Intune and endpoint management solutions.
- 5+ years of experience implementing Single Sign-On (SSO) technologies.
- 5+ years of experience with Microsoft Entra ID and Entra Connect synchronization.
- 3+ years of experience leading file server migrations to Microsoft 365.
- Experience supporting large-scale enterprise cloud transformation initiatives.
Active Directory Architecture & Administration
- Design, implement, and maintain enterprise Active Directory environments.
- Administer complex multi-domain and multi-forest Active Directory infrastructures.
- Develop and maintain Active Directory standards, governance, and operational procedures.
- Perform Active Directory assessments, health checks, remediation, and modernization activities.
- Support domain consolidation, migrations, and hybrid identity initiatives.
- Troubleshoot complex authentication, DNS, LDAP, Kerberos, and replication issues.
Group Policy (GPO) Design & Implementation
- Design, deploy, and manage enterprise Group Policies supporting users, workstations, and servers.
- Develop GPOs for:
- Security hardening
- User experience management
- Application deployment
- Device configuration
- Compliance requirements
- Lead GPO migration and transformation initiatives.
- Manage loopback processing, WMI filtering, inheritance, permissions delegation, and GPO troubleshooting.
- Create governance standards and documentation for Group Policy administration.
Microsoft Intune & Endpoint Management
- Design and implement Microsoft Intune solutions for endpoint management.
- Configure and manage:
- Windows Autopilot
- Device Enrollment
- Compliance Policies
- Configuration Profiles
- Endpoint Security Policies
- Application Deployment
- Conditional Access Integration
- Migrate traditional GPO controls to modern Intune and cloud-based management solutions.
- Support co-management between Configuration Manager (SCCM/MECM) and Intune.
- Implement Mobile Device Management (MDM) and Mobile Application Management (MAM) strategies.
- Manage endpoint lifecycle and device security posture.
Identity & Access Management (IAM)
- Design and support enterprise identity and access management solutions.
- Implement role-based access controls (RBAC) and identity governance frameworks.
- Support identity lifecycle management processes including provisioning and deprovisioning.
- Implement and maintain Multi-Factor Authentication (MFA), Conditional Access, and Zero Trust security principles.
- Collaborate with cybersecurity teams to strengthen enterprise identity controls.
Single Sign-On (SSO) & Authentication
- Design and deploy Single Sign-On solutions across cloud and on-premises applications.
- Integrate applications with Microsoft Entra ID and other identity providers.
- Implement and troubleshoot:
- SAML 2.0
- OAuth 2.0
- OpenID Connect (OIDC)
- WS-Federation
- Kerberos Authentication
- LDAP Authentication
- Lead application onboarding to SSO platforms.
- Resolve identity federation and authentication issues.
Microsoft Entra ID & Hybrid Identity
- Design and support Microsoft Entra ID environments.
- Configure and manage Microsoft Entra Connect synchronization.
- Implement:
- Password Hash Synchronization
- Pass-Through Authentication
- Seamless SSO
- Hybrid Identity
- Conditional Access Policies
- Monitor and troubleshoot Entra synchronization and identity-related issues.
- Support Microsoft 365 identity modernization initiatives.
File Server Migration to OneDrive & SharePoint Online
- Lead migrations from legacy file servers and network shares to:
- OneDrive for Business
- SharePoint Online
- Microsoft Teams
- Conduct discovery, assessment, and content analysis activities.
- Design migration strategies including:
- Wave planning
- User readiness
- Cutover planning
- Post-migration validation
- Analyze and remediate NTFS permissions and access control models.
- Implement migration tools including:
- Microsoft SPMT
- ShareGate
- Quest
- AvePoint
- Validate migrated data, permissions, metadata, and user access.
- Develop migration runbooks, governance models, and operational support documentation.
Automation & Scripting
- Develop PowerShell automation for:
- Active Directory administration
- Intune administration
- Entra ID synchronization monitoring
- User lifecycle management
- Reporting and compliance monitoring
- Automate operational processes and migration activities.
Technical Skills: Identity & Access Management
- Active Directory Domain Services (AD DS)
- Microsoft Entra ID (Azure AD)
- Entra Connect Synchronization
- Active Directory Federation Services (ADFS)
- MFA Implementation
- Conditional Access
- Identity Governance
- Privileged Identity Management (PIM)
Endpoint Management
- Microsoft Intune
- Windows Autopilot
- Endpoint Security
- Device Compliance
- Mobile Device Management (MDM)
- Mobile Application Management (MAM)
- SCCM / MECM Co-Management
Collaboration & Content Migration
- OneDrive for Business
- SharePoint Online
- Microsoft Teams
- File Server Migration
- NTFS Permission Remediation
- ShareGate
- Quest
- AvePoint
- Microsoft SharePoint Migration Tool (SPMT)
Authentication & Security
- SAML
- OAuth
- OpenID Connect
- Kerberos
- LDAP
- Azure Conditional Access
- Zero Trust Architecture
Scripting & Automation
- PowerShell
- Microsoft Graph
- Automation and Reporting