Microsoft 365 Identity & File Migration Engineer

Required Qualifications: Experience

• 8+ years of experience supporting enterprise Active Directory environments.
• 5+ years of hands-on experience designing and implementing Group Policy Objects (GPOs).
• 5+ years of experience with Microsoft Intune and endpoint management solutions.
• 5+ years of experience implementing Single Sign-On (SSO) technologies.
• 5+ years of experience with Microsoft Entra ID and Entra Connect synchronization.
• 3+ years of experience leading file server migrations to Microsoft 365.
• Experience supporting large-scale enterprise cloud transformation initiatives.

Active Directory Architecture & Administration

• Design, implement, and maintain enterprise Active Directory environments.
• Administer complex multi-domain and multi-forest Active Directory infrastructures.
• Develop and maintain Active Directory standards, governance, and operational procedures.
• Perform Active Directory assessments, health checks, remediation, and modernization activities.
• Support domain consolidation, migrations, and hybrid identity initiatives.
• Troubleshoot complex authentication, DNS, LDAP, Kerberos, and replication issues.

Group Policy (GPO) Design & Implementation

• Design, deploy, and manage enterprise Group Policies supporting users, workstations, and servers.
• Develop GPOs for:
• Security hardening
• User experience management
• Application deployment
• Device configuration
• Compliance requirements
• Lead GPO migration and transformation initiatives.
• Manage loopback processing, WMI filtering, inheritance, permissions delegation, and GPO troubleshooting.
• Create governance standards and documentation for Group Policy administration.

Microsoft Intune & Endpoint Management

• Design and implement Microsoft Intune solutions for endpoint management.
• Configure and manage:
• Windows Autopilot
• Device Enrollment
• Compliance Policies
• Configuration Profiles
• Endpoint Security Policies
• Application Deployment
• Conditional Access Integration
• Migrate traditional GPO controls to modern Intune and cloud-based management solutions.
• Support co-management between Configuration Manager (SCCM/MECM) and Intune.
• Implement Mobile Device Management (MDM) and Mobile Application Management (MAM) strategies.
• Manage endpoint lifecycle and device security posture.

Identity & Access Management (IAM)

• Design and support enterprise identity and access management solutions.
• Implement role-based access controls (RBAC) and identity governance frameworks.
• Support identity lifecycle management processes including provisioning and deprovisioning.
• Implement and maintain Multi-Factor Authentication (MFA), Conditional Access, and Zero Trust security principles.
• Collaborate with cybersecurity teams to strengthen enterprise identity controls.

Single Sign-On (SSO) & Authentication

• Design and deploy Single Sign-On solutions across cloud and on-premises applications.
• Integrate applications with Microsoft Entra ID and other identity providers.
• Implement and troubleshoot:
• SAML 2.0
• OAuth 2.0
• OpenID Connect (OIDC)
• WS-Federation
• Kerberos Authentication
• LDAP Authentication
• Lead application onboarding to SSO platforms.
• Resolve identity federation and authentication issues.

Microsoft Entra ID & Hybrid Identity

• Design and support Microsoft Entra ID environments.
• Configure and manage Microsoft Entra Connect synchronization.
• Implement:
• Password Hash Synchronization
• Pass-Through Authentication
• Seamless SSO
• Hybrid Identity
• Conditional Access Policies
• Monitor and troubleshoot Entra synchronization and identity-related issues.
• Support Microsoft 365 identity modernization initiatives.

File Server Migration to OneDrive & SharePoint Online

• Lead migrations from legacy file servers and network shares to:
• OneDrive for Business
• SharePoint Online
• Microsoft Teams
• Conduct discovery, assessment, and content analysis activities.
• Design migration strategies including:
• Wave planning
• User readiness
• Cutover planning
• Post-migration validation
• Analyze and remediate NTFS permissions and access control models.
• Implement migration tools including:
• Microsoft SPMT
• ShareGate
• Quest
• AvePoint
• Validate migrated data, permissions, metadata, and user access.
• Develop migration runbooks, governance models, and operational support documentation.

Automation & Scripting

• Develop PowerShell automation for:
• Active Directory administration
• Intune administration
• Entra ID synchronization monitoring
• User lifecycle management
• Reporting and compliance monitoring
• Automate operational processes and migration activities.

Technical Skills: Identity & Access Management

• Active Directory Domain Services (AD DS)
• Microsoft Entra ID (Azure AD)
• Entra Connect Synchronization
• Active Directory Federation Services (ADFS)
• MFA Implementation
• Conditional Access
• Identity Governance
• Privileged Identity Management (PIM)

Endpoint Management

• Microsoft Intune
• Windows Autopilot
• Endpoint Security
• Device Compliance
• Mobile Device Management (MDM)
• Mobile Application Management (MAM)
• SCCM / MECM Co-Management

Collaboration & Content Migration

• OneDrive for Business
• SharePoint Online
• Microsoft Teams
• File Server Migration
• NTFS Permission Remediation
• ShareGate
• Quest
• AvePoint
• Microsoft SharePoint Migration Tool (SPMT)

Authentication & Security

• SAML
• OAuth
• OpenID Connect
• Kerberos
• LDAP
• Azure Conditional Access
• Zero Trust Architecture

Scripting & Automation

• PowerShell
• Microsoft Graph
• Automation and Reporting