Migration Specialist Engineer

Accountabilities:: Lead end-to-end migration projects involving mailboxes, Microsoft 365 tenants, files, and Active Directory domains, covering discovery, pilot testing, planning, cutover, and post-migration support. Manage multiple client projects simultaneously, typically handling two to five engagements at different stages of delivery. Execute migration activities using appropriate tools and methodologies, ensuring data integrity, minimal downtime, and successful transition between platforms. Define and agree on migration downtime windows, rollback criteria, and contingency plans with clients before executing production cutovers. Reconcile migrated data against expected results, investigate discrepancies, and ensure all required information and services have been successfully transferred. Administer and configure Microsoft 365 environments, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, licensing, mail flow, and security settings. Manage Microsoft Entra ID environments, including users, groups, administrative roles, synchronization, hybrid identity, Conditional Access, multifactor authentication, and single sign-on configurations. Deploy and maintain Azure infrastructure, including virtual machines, virtual networks, Network Security Groups, public IPs, site-to-site VPNs, Azure Files, Azure Backup, and Azure Virtual Desktop. Configure and manage client endpoints through Microsoft Intune, including Windows Autopilot enrollment, compliance policies, configuration profiles, application deployment, BitLocker, Microsoft Defender, and update management. Support Windows Server and Active Directory environments, including DNS, DHCP, Group Policy, file services, print services, and Hyper-V infrastructure. Use PowerShell and Microsoft Graph to automate administrative tasks, perform bulk operations, and improve migration and infrastructure management processes. Implement security and compliance configurations, including Microsoft Purview policies, data loss prevention, retention, sensitivity labels, and Microsoft Defender solutions. Produce accurate as-built technical documentation using platforms such as IT Glue and ensure complete knowledge transfer to service desk and operational teams. Maintain up-to-date project status, time tracking, and delivery information within Professional Services Automation (PSA) systems. Participate in client meetings, clearly explaining technical changes, migration timelines, potential service interruptions, and expected outcomes to both technical and non-technical stakeholders. Coordinate scheduled after-hours and weekend migration activities when required to minimize business disruption. Identify technical risks, escalate architectural decisions when necessary, and work with senior engineers to ensure solutions are implemented correctly and securely. Requirements: 5–10 years of overall IT experience, including at least 2 years of hands-on administration experience with Microsoft 365 and Microsoft Entra ID across multiple organizations or tenants. Demonstrable experience personally executing at least five migration projects involving mailboxes, Microsoft 365 tenant-to-tenant transfers, file migrations, or Active Directory domain migrations. Strong practical expertise in Microsoft 365 administration, particularly Exchange Online, including mail flow, connectors, transport rules, shared mailboxes, delegation, message tracing, and retention. Good understanding of email DNS configuration, including MX, SPF, DKIM, DMARC, Autodiscover, and DNS Time-to-Live (TTL) considerations during migrations. Experience administering SharePoint Online and OneDrive, including site and library creation, permissions, sharing policies, and synchronization troubleshooting. Knowledge of Microsoft Teams provisioning, guest access, and its integration with SharePoint Online. Strong understanding of Microsoft Entra ID, including users, groups, dynamic groups, administrative roles, and organizational units. Hands-on experience with Entra Connect Sync or Cloud Sync, including installation, filtering, synchronization troubleshooting, and hybrid identity configurations. Knowledge of hybrid-joined and Entra-joined device environments, Conditional Access, MFA deployment, Self-Service Password Reset (SSPR), enterprise applications, and SAML/OIDC authentication. Practical Azure administration experience covering virtual machines, virtual networks, Network Security Groups, VPN connectivity, Azure Files, Azure Virtual Desktop, backup solutions, subscriptions, resource groups, and Role-Based Access Control (RBAC). Strong Microsoft Intune expertise, including Windows Autopilot, co-management, BYOD, Apple and Android enrollment, compliance policies, configuration profiles, and application deployment. Experience packaging and deploying Win32 applications using .intunewin, Microsoft Store applications, and line-of-business applications. Knowledge of BitLocker policies, Microsoft Defender for Endpoint onboarding, Windows Update for Business, and device update rings. Demonstrable migration experience in at least two of the following areas: On-premises Exchange to Exchange Online, including cutover, staged, or hybrid migrations. Microsoft 365 tenant-to-tenant migrations following acquisitions, divestitures, or organizational rebranding. Google Workspace or IMAP migrations to Microsoft 365. File server or NAS migrations to SharePoint Online, OneDrive, or Microsoft Teams. Active Directory domain migrations or consolidations, including ADMT, SID history, forest trusts, UPN changes, and workstation re-domaining. Migration from other Mobile Device Management (MDM) platforms to Microsoft Intune. Strong knowledge of Windows Server and Active Directory Domain Services, including DNS, DHCP, Group Policy, file and print services, and Hyper-V. Proficiency in PowerShell, including the ability to read, modify, and develop scripts for bulk operations involving Exchange Online, Microsoft Graph, and Entra ID. Experience with security and compliance technologies such as Microsoft Purview, Data Loss Prevention (DLP), retention policies, sensitivity labels, eDiscovery, Defender for Office 365, Defender for Cloud Apps, and Secure Score remediation. Familiarity with privileged identity management, access reviews, entitlement management, and security frameworks such as CIS benchmarks. Exposure to HIPAA- or CMMC-related client environments is an advantage. Experience with automation technologies such as Power Automate, Power Apps, Azure Automation, Logic Apps, and Microsoft Graph API scripting is preferred. At least one current Microsoft role-based certification or demonstrably equivalent practical experience. Relevant certifications include: MS-102 – Microsoft 365 Administrator Expert. SC-300 – Identity and Access Administrator. MD-102 – Endpoint Administrator. AZ-104 – Azure Administrator Associate. AZ-800 / AZ-801 – Windows Server Hybrid Administrator. MS-700 – Teams Administrator. SC-200 – Security Operations Analyst. Previous experience working in a Managed Service Provider (MSP) environment or supporting multiple clients and tenants is highly desirable. Comfortable working in a fully remote team, managing projects independently, and communicating effectively with clients and technical stakeholders. Excellent documentation skills, attention to detail, and a strong sense of ownership over technical deliverables. Flexibility to participate in scheduled evening, after-hours, and weekend migration cutovers when required. Additional advantageous experience: Microsoft 365 backup and business continuity solutions, including Veeam, Datto, Dropsuite, Afi, Acronis, or Keepit. Virtualization platforms such as VMware ESXi and Nutanix Acropolis. Experience with AWS, Google Workspace administration, Egnyte, Citrix ShareFile, Cloudflare, or QuickBooks Online. Apple ecosystem management, including macOS and iOS deployment, Apple Business Manager, Jamf, Mosyle, and Intune for Mac. Network and security technologies such as SonicWall and Fortinet firewalls, Cisco Meraki, Ubiquiti wireless, and Cisco or Dell switching. NAS and storage platforms such as QNAP, Synology, and Dell. MSP and IT management tools such as ConnectWise Manage and Automate, Autotask, Kaseya, NinjaOne, Datto RMM, IT Glue, and Hudu. Multi-tenant Microsoft 365 administration tools such as Nerdio, Inforcer, and CIPP, as well as password management solutions such as Keeper. Migration tools such as BitTitan. Benefits: Competitive annual salary ranging from ₹2,000,000 to ₹2,300,000. Comprehensive health insurance coverage. Employee wellness programs with a particular focus on mental health. Employee reward and recognition initiatives. Company incentive programs. Attractive leave policies, including: Holiday leave. Maternity and paternity leave. Birthday leave. Bereavement leave. Paid personal time off. Fully remote working opportunities. Professional development, continuous learning, and career growth opportunities. Work-life balance initiatives and employee wellbeing support. Immigration assistance programs supporting eligible employees interested in relocating to Canada. Opportunity to work on diverse Microsoft 365, Azure, identity management, and enterprise migration projects for international clients.