Senior Cloud & Systems Engineer, Professional Services

A year from now, you’ll have delivered several client engagements end to end - scoping the technical work with the project manager, executing against the SOW, and closing out with a clean handoff. You’ll typically carry multiple active projects at once, each with its own timeline and client stakeholders. Success looks like engagements that land on time, within scope, and with documentation solid enough that support can run with it after you’re off the project.

• Deliver Azure infrastructure engagements - networking, identity, compute, and storage - against a defined project scope and timeline

• Execute Microsoft 365 tenant migrations and consolidations as scoped projects, including cutover planning and go-live weekends

• Scope and deliver endpoint management projects for client fleets: device enrollment, configuration policy, and enterprise application deployment to Windows desktops

• Deploy Azure Virtual Desktop environments as part of client projects moving off on-premises infrastructure

• Lead the technical workstream on tenant-to-tenant migration projects tied to client mergers, acquisitions, and divestitures

• Partner with project managers on scoping calls, effort estimates, and status updates - you own the technical plan, they own the timeline and client relationship

• Carry multiple concurrent projects, track your own utilization against SOW hours, and flag scope creep before it becomes a write-off

• Produce handoff documentation and runbooks thorough enough that managed services can support the environment after your project closes

• Attend pre-sales calls to help determine the scope of the project

• 5+ years of hands-on experience architecting and delivering Microsoft cloud environments (Azure and Microsoft 365) in production

• Prior experience in a project-based delivery model - consulting, MSP professional services, or systems integration - not just steady-state administration

• Experience designing and deploying Azure infrastructure - you can explain a network and identity design decision, not just follow one

• Experience with endpoint and application management for Windows environments (Intune or equivalent)

• Working knowledge of Microsoft 365 and Azure security controls - conditional access, identity protection, tenant hardening

• Comfortable running client-facing scoping and status conversations, and estimating your own effort against a fixed SOW

• PowerShell scripting for automation and administration

Additional Information

We’d rather see real production experience than a certification stack - but holding one or more of these is a strong signal and will move your application to the top of the pile:

• AZ-305: Designing Microsoft Azure Infrastructure Solutions
• AZ-500: Microsoft Azure Security Technologies
• AZ-140: Configuring and Operating Microsoft Azure Virtual Desktop
• MS-102: Microsoft 365 Administrator
• MD-102: Microsoft 365 Certified: Endpoint Administrator
• MCSE: Enterprise Devices and Apps, or the legacy 70-695: Deploying Windows Desktops and Enterprise Apps
• Exposure to GCC High or CMMC compliance environments
• Experience tracking billable time and utilization in a PSA tool (e.g., ConnectWise, NetSuite OpenAir) or similar project-delivery system
• Must be a U.S. person as defined above; verification required during hiring
• Must reside and work within the United States
• Must successfully pass a cognitive assessment as part of the hiring process
• Must successfully complete a typing test to validate typing speed and accuracy
• Professional references required

Agile IT is a Microsoft-focused consulting and managed services firm specializing in cloud modernization and complex enterprise migrations. Our Professional Services group is the project delivery arm: fixed-scope engagements for clients navigating mergers, acquisitions, and digital transformation, with deep expertise in Microsoft 365 consolidations, tenant migrations, and government compliance work including GCC High and CMMC. Engineers here work project to project, not ticket queue to ticket queue, alongside project managers and architects on application modernization, identity, device management, and security posture engagements.