Tier 3 Project Engineer (Azure/Microsoft 365 - Remote)
Remote•South Africa•Full-time
ZAR 55,000 - ZAR 60,000 annually
ZAR 55,000 - ZAR 60,000 annually
About the Job
Tier 3 Project Engineer (Azure/Microsoft 365) — Remote
Permanent, fully remote role. Flexible working hours. Monday - Friday.
Permanent, fully remote role. Flexible working hours. Monday - Friday.
Position Summary:
The Tier 3 Project Engineer is a senior technical role responsible for designing, implementing, and delivering projects centered on Microsoft Azure and the Microsoft 365 ecosystem (Office 365, Entra ID, Intune). You will own projects end-to-end (discovery through deployment and handoff), troubleshoot complex technical issues, and collaborate closely with internal teams and client stakeholders in a fast-paced MSP environment.
This is a 100% remote position (no onsite travel required).
Key Responsibilities:
- Lead delivery of Tier 3 projects including Azure and Microsoft 365 implementations, migrations, and modernization initiatives.
- Design and implement Azure solutions aligned with best practices (subscriptions/RBAC, core services, security, and Azure networking).
- Execute Microsoft 365 projects across Exchange Online, SharePoint/OneDrive, Teams, and tenant/security configuration.
- Design and implement identity solutions using Microsoft Entra ID (Azure AD): Conditional Access, MFA, SSO, role-based access, and hybrid identity scenarios where applicable.
- Implement endpoint management with Microsoft Intune: enrollment, compliance/configuration profiles, application deployment, Windows update rings, and Autopilot (where applicable).
- Serve as escalation for complex Azure/M365/identity/endpoint issues; perform root-cause analysis and document preventive actions.
- Troubleshoot networking issues impacting cloud services (DNS, DHCP, routing, VPNs, firewall/NAT, latency, certificates).
- Produce high-quality client-ready documentation: implementation plans, change/rollback plans, diagrams, configurations, and handoff notes.
- Mentor Tier 1–2 engineers and contribute to internal standards, runbooks, and knowledge base.
Required Qualifications (Must-Have):
- 5+ years of hands-on IT engineering experience (MSP experience strongly preferred).
- Very strong, current experience with:
- Microsoft Azure
- Microsoft 365 / Office 365
- Microsoft Entra ID (Azure AD) (MFA, Conditional Access, SSO, RBAC)
- Microsoft Intune (device management, compliance, policies, app deployment)
- Strong networking fundamentals and troubleshooting ability (TCP/IP, DNS, DHCP, VLANs, routing basics, VPNs, firewalls/NAT, certificates/PKI).
- Proven ability to lead and deliver projects end-to-end with strong documentation and change control discipline.
- Excellent communication skills in a remote-first environment.
Microsoft 365 Certification Requirement:
Candidates must have one of the following (active or earned within the last 24 months preferred):
- Microsoft 365 Certified: Administrator Expert (preferred), or
- MS-102 (Microsoft 365 Administrator) plus at least one relevant associate-level Microsoft credential such as:
- Endpoint Administrator Associate (Intune-focused), and/or
- Identity and Access Administrator Associate (Entra ID-focused)
If not currently held, certification must be obtained within an agreed timeframe after hire (e.g., 90–180 days).
Preferred Qualifications (Nice-to-Have):
- Microsoft security experience (e.g., Defender for Endpoint/Office 365), Purview, and Azure security features.
- Azure Virtual Desktop (AVD) experience.
- PowerShell automation (Microsoft Graph familiarity a plus).
- Additional certifications (nice-to-have):
- Azure Administrator / Azure Solutions Architect
- Network+ / CCNA or equivalent networking background
- Security+, SC-xxx, or similar
Position Summary:
The Tier 3 Project Engineer is a senior technical role responsible for designing, implementing, and delivering projects centered on Microsoft Azure and the Microsoft 365 ecosystem (Office 365, Entra ID, Intune). You will own projects end-to-end (discovery through deployment and handoff), troubleshoot complex technical issues, and collaborate closely with internal teams and client stakeholders in a fast-paced MSP environment.
This is a 100% remote position (no onsite travel required).
Key Responsibilities:
- Lead delivery of Tier 3 projects including Azure and Microsoft 365 implementations, migrations, and modernization initiatives.
- Design and implement Azure solutions aligned with best practices (subscriptions/RBAC, core services, security, and Azure networking).
- Execute Microsoft 365 projects across Exchange Online, SharePoint/OneDrive, Teams, and tenant/security configuration.
- Design and implement identity solutions using Microsoft Entra ID (Azure AD): Conditional Access, MFA, SSO, role-based access, and hybrid identity scenarios where applicable.
- Implement endpoint management with Microsoft Intune: enrollment, compliance/configuration profiles, application deployment, Windows update rings, and Autopilot (where applicable).
- Serve as escalation for complex Azure/M365/identity/endpoint issues; perform root-cause analysis and document preventive actions.
- Troubleshoot networking issues impacting cloud services (DNS, DHCP, routing, VPNs, firewall/NAT, latency, certificates).
- Produce high-quality client-ready documentation: implementation plans, change/rollback plans, diagrams, configurations, and handoff notes.
- Mentor Tier 1–2 engineers and contribute to internal standards, runbooks, and knowledge base.
Required Qualifications (Must-Have):
- 5+ years of hands-on IT engineering experience (MSP experience strongly preferred).
- Very strong, current experience with:
- Microsoft Azure
- Microsoft 365 / Office 365
- Microsoft Entra ID (Azure AD) (MFA, Conditional Access, SSO, RBAC)
- Microsoft Intune (device management, compliance, policies, app deployment)
- Strong networking fundamentals and troubleshooting ability (TCP/IP, DNS, DHCP, VLANs, routing basics, VPNs, firewalls/NAT, certificates/PKI).
- Proven ability to lead and deliver projects end-to-end with strong documentation and change control discipline.
- Excellent communication skills in a remote-first environment.
Microsoft 365 Certification Requirement:
Candidates must have one of the following (active or earned within the last 24 months preferred):
- Microsoft 365 Certified: Administrator Expert (preferred), or
- MS-102 (Microsoft 365 Administrator) plus at least one relevant associate-level Microsoft credential such as:
- Endpoint Administrator Associate (Intune-focused), and/or
- Identity and Access Administrator Associate (Entra ID-focused)
If not currently held, certification must be obtained within an agreed timeframe after hire (e.g., 90–180 days).