Microsoft 365 / Entra ID Cloud Engineer (MSP Environment) (14-00 - 23-00 EET)

Location: Lviv, Ukraine (or Remote / Hybrid as per company policy) 
Employment Type: Full-time 
Working hours: 14:00 – 23:00 Kyiv time 

About Us: 

Modus Soft works in partnership with a managed service provider (MSP) and IT consulting company that delivers software development, IT solutions, infrastructure support, and systems integration for enterprise clients, helping organizations design, implement, and maintain reliable and scalable technology environments. 

We are looking for an experienced Microsoft 365 / Entra ID Cloud Engineer to join our technical team. In this role, you will take ownership of tenant administration, endpoint management, and cloud security implementations across our diverse client portfolio.You will work as part of the US-based team alongside technicians and network engineers, taking initiative on projects and contributing ideas. The role involves working across multiple environments, including different Microsoft 365 tenants and enterprise configurations. Work includes both ticket-based support and project tasks, covering day-to-day issues and ongoing implementations. Responsibilities include IT support, infrastructure, and project delivery based on client needs and priorities. Working hours are aligned with the EST time zone due to close collaboration with US-based team members. 

Key Responsibilities: 

• Microsoft 365 Tenant Administration: Manage and configure multiple Microsoft 365 and Entra ID tenants in both Hybrid and Cloud-only environments. 
• Identity & Access Management: Administer Active Directory, Entra ID (Azure AD), Entra ID Connect, Conditional Access policies, and MFA methods. 
• Mail Flow & Exchange: Configure and maintain Exchange Online, retention policies, archiving, and mail flow settings. 
• End-to-End Intune Deployment: Plan, implement, and support Microsoft Intune from scratch, including device enrollment (Windows, macOS, iOS, Android), configuration profiles, and compliance policies. 
• Application & Patch Management: Deploy and manage applications (Win32, .intunewin, LOB, Microsoft Store, and Apple VPP apps) and enforce security measures like Windows LAPS and Platform SSO for macOS. 
• Modern Deployment: Set up and troubleshoot zero-touch deployment via Windows Autopilot and Apple Automated Device Enrollment. 
• Automation: Write and maintain PowerShell scripts to automate repetitive tasks in Exchange Online and Entra ID. 
• Endpoint Protection: Administer and maintain Sophos Endpoint security (Sophos Mobile, device encryption, and security policies). 
• Infrastructure Support:  Provide support for Windows, macOS, Windows Server environments, on-prem Active Directory, and Microsoft Entra ID (Azure AD), including domain controllers, identity management, and related enterprise infrastructure services. 

Requirements: 

• Experience: 3+ years of hands-on experience as a System Administrator, Cloud Engineer, or L1/L2 Support Engineer within an MSP (Managed Service Provider) environment. 
• Microsoft 365 Expertise: Deep understanding of the M365 ecosystem, Entra ID architecture, Exchange Online, and licensing models. 
• Advanced MDM Skills: Proven experience implementing Microsoft Intune from scratch across multiple operating systems. 
• Scripting: Experience with PowerShell for cloud infrastructure management and automation. 
• Security Mindset: Practical knowledge of Zero Trust principles, Identity Protection, and Endpoint Security tools. 
• Languages: Upper-Intermediate to Advanced English (both written and spoken) for clear communication with international clients and technical documentation. 
• Soft Skills: Strong root-cause analysis skills, capability to work under multi-tasking conditions, and a proactive attitude toward documentation and process optimization. 

Nice to Have: 

• Relevant Microsoft Certifications (e.g., MS-102: Microsoft 365 Administrator, MD-102: Endpoint Administrator). 
• Experience with MacOS troubleshooting and management 
• Understanding of networking principles 
• Experience with Forti EMS 
• Experience with anti-spam systems