Vacancy expired!
As a
M365 Engineer, you will be supporting our Acceleration delivery Center contributing to pre-sales activities, portfolio activities, and hands-on project delivery for AIS' service offerings. The purpose of the role is to be a customer-facing architect and engineer delivering M365 cloud projects and consulting work. The successful applicant will work closely with the customer and AIS delivery team ensuring a highly satisfying customer experience. This role includes ownership of technical, commercial, and service elements related to M365 cloud project engagements. What You'll Be Doing- Work in a team with other smart AIS employees using cutting edge technologies to solve challenging business problems
- Utilize AIS' methods, assets, and tools from end to end in the design and implementation of solutions that leverage M365 cloud services.
- Work with a M365 delivery team ensuring that we are delivering what is expected by:
- Creating and Designing the architecture which meets the functional and non-functional requirements.
- Ensuring that the architecture complies with the overall Client's IT policies and strategies, obtaining authorized waivers where the deviation is required.
- Ensuring that the architecture is consistent with and supports the productivity and financial performance objectives of the project.
- Implementation of the architecture in the Client's environment with the delivery team
- Provide escalation support and remediation for Engineering team roles on projects
- Must have at least 2-5+ years' Architecture experience (from an established Consulting Company, or Enterprise) Designing, Implementing, Configuring, Testing, Migrating & Securing Exchange (on-premises/online) & Exchange Hybrid solutions:
- From Exchange (5.5 - 2019) to Exchange Online
- Must have Architectural Proficiency with Exchange Hybrid Designs & how the following solutions could break Hybrid Co-Existence as well as how they need to be Designed to work with Hybrid Co-Existence
- InterOrg (Exchange to Exchange) and GSuite/O365 Tenant to Tenant Migrations
- Network Break & Inspect Devices (Cloud Access Security Brokers, Data Loss Prevention, Proxy devices, Secure Web Gateways, WAN Accelerators & Optimizers)
- Firewalls and Load Balancers
- Must have Architectural Proficiency with M365 Hybrid Designs & how they must be designed in the following scenarios:
- To maintain Exchange Hybrid Co-Existence in a multi-Active Directory Forest/Exchange Org Topology
- To maintain Data Sovereignty compliance (GDPR) when Multi-Geo must be used
- To implement Microsoft Zero Trust for the main domain areas (Identities, Endpoint, Policy Optimization, Zero Trust Policy, Threat Protection, Network, Data, Apps, Infrastructure)
- Understand SharePoint Hybrid and SharePoint on-line models
- Migrations from SharePoint on-premises, Gsuite, other CMS tools to SharePoint on-line and OneDrive for Business
- Must have Architectural understanding on how Third Party Archive & Journaling Email Data (Enterprise Vault, Mimecast) on legal hold is migrated appropriately (to maintain Data Immutability)
- Must have Architectural Proficiency with integrating Microsoft and non-Microsoft Mobile Device/Mobile Application Management & Unified Endpoint Management solutions with Exchange/Office 365 (Intune, Airwatch, Workspace One etc) as well as other third party email aware apps (Unified Communications/Messaging, Fax, Printer/Scanners)
- Must have Architectural Proficiency (Design, Build, Migrate) with Office 365 Email Protection Mechanisms:
- SPF, DKIM and DMARC (along with ARC)
- Data Loss Prevention, RMS/IRM, Azure Information Protection (Classification-Labelling & Sensitive Information Types), Office 365 Message Encryption & Transport Rules
- Legal/Litigation Holds, Retention, Deletion and Data Immutability
- Office 365 Advanced Threat Protection
- Microsoft and non-Microsoft Email Hygiene/Gateway Products (ProofPoint, Exchange Online Protection, Mimecast etc)
- Must have an architectural understanding of Microsoft 365 protections
- CAS
- DLP
- ATP
- AIP
- IDM/Single Sign-On experience
- Microsoft ADFS, Azure AD Connect and Azure AD Premium (Seamless Sign On & Pass-Through Authentication), Azure AD Identity Protection (Risk-based Conditional Access), Conditional Access, Azure Multi-Factor Authentication (and how to Design Azure Conditional Access Custom Controls with on-premises MFA solutions), Azure Privileged Identity/Access Management (Just In Time, Just Enough Administration, Admin/User Access Reviews)
- Okta or Ping SSO
- Migrations from Lotus Notes & GroupWise
- Device experience
- Intune Mobile Device & Mobile App Management
- Other Mobile Device Mgmt/Mobile Application Mgmt solutions (Airwatch/Workspace One, Blackberry UEM, JAMF, MaaS360 etc)
- System Center Configuration Manager/MS EndPoint Configuration Manager and integration with Intune for co-management of devices (laptops, desktops, mobile)
- Intune
- Third-party experience
- Avepoint
- ShareGate
- BitTitan
- Smart people with a passion for technology
- Strong technical capabilities with a consultancy mindset
- Close involvement with local technical communities
- A willingness to think outside of the box to provide innovative solutions to clients
- Ability to solve challenging technical business problems
- Self-directed professionals
- Client Success
- Continued Learning and Technical Excellence
- Strong Client Relationships
- Citizenship and Community