At Space Coast Credit Union (SCCU), our members are at the heart of everything we do. Since 1951, we ve been committed to delivering financial services founded on integrity and a people-first philosophy.
As a Microsoft Systems Engineer you will design, build, implement, and maintain Space Coast Credit Union s enterprise Microsoft platforms.
You'll play a vital role that serves as a hands on technical SME driving solution design, vendor evaluation, complex implementation, and Tier III troubleshooting while aligning with SCCU security, compliance, and business objectives.
- Member-Focused Mission: Be part of a not-for-profit organization that reinvests in its members.
- Hybrid and Flexible Schedule Options: This position is Hybrid with 2 days per week required in office.
- Career Growth: We prioritize internal promotions and offer on-the-job training.
Purpose:
The Microsoft Systems Engineer will design, build, implement, and maintain Space Coast Credit Union s enterprise Microsoft platforms. This includes:
Administering and optimizing On Premises Active Directory with an emphasis on replication topology, Sites & Services, multi forest trust models, and CIS benchmark hardening.
Engineering hybrid identity with Azure AD Connect / Entra Cloud Sync (Password Hash Sync, Pass through Authentication, and staging/swing migration), Hybrid Join, and Microsoft Entra ID SSO (SCIM, SAML 2.0, OAuth/OIDC, and Just In Time provisioning).
Owning full lifecycle deployment of Intune MDM/MAM, Windows Autopilot, GPO to Intune configuration/compliance profile conversion, and endpoint protection with Microsoft Defender for Endpoint.
Architecting, administering, and troubleshooting Proofpoint PPS/TAP secure mail gateways (DMARC / DKIM / SPF, malware & impersonation defense, smart host connectors, DLP, encryption).
Supporting Microsoft 365 (Exchange Online, SharePoint Online, OneDrive, Teams) and Azure IaaS/PaaS resources for resilient collaboration and messaging.
Principal Duties and Responsibilities:
Active Directory Engineering Administer multi site, multi forest AD DS; design replication, schema/forest upgrades, delegated OU structures, and PKI/CA integration.
Hybrid Identity & Entra ID Plan, deploy, and maintain Azure AD Connect / Cloud Sync, Hybrid Join, Conditional Access, PIM, and SSO integrations (SCIM, SAML, OAuth/OIDC).
Intune / Autopilot / Endpoint Security Build and maintain Intune tenant, migrate legacy GPOs to Intune, create Autopilot deployment rings, publish compliance & configuration profiles, implement Defender for Endpoint and Proactive Remediations.
Proofpoint Administration Install, configure, and tune PPS/TAP clusters; manage policies, mail flow connectors, quarantine, and threat intel; troubleshoot end to end message delivery.
Microsoft 365 Services Administer Exchange Online (hybrid mail flow, EOP), SharePoint Online, OneDrive, and Teams retention/eDiscovery.
Automation & Scripting Develop PowerShell / Graph scripts for deployment, reporting, and proofpoint/intune automation; maintain CI/CD pipelines where applicable.
Technical Support Provide Tier III response and on call escalation for identity, device management, mail security, and collaboration platforms.
Project Participation Lead or contribute to IT projects, create charters, timelines, and deliverables, and coordinate with cross functional teams.
Documentation Produce and maintain high level/low level designs, runbooks, SOPs, and change control artifacts.
Security & Compliance Enforce SCCU security baselines and FFIEC/NCUA requirements; participate in audits and risk assessments.
Vendor Liaison Act as primary contact with Microsoft, Proofpoint, and other vendors for support cases, roadmap alignment, and licensing.
Continuous Improvement Track emerging Microsoft and Proofpoint capabilities; recommend and pilot new features to enhance resilience, security, and user experience.
JOB KNOWLEDGE, SKILLS & ABILITIES
Proven hands on expertise designing and implementing:
o Azure AD Connect / Cloud Sync topologies, Hybrid Join, federation models.
o Intune MDM/MAM, Windows Autopilot, and GPO to Intune migration.
o Proofpoint PPS & TAP secure mail gateways, including DMARC/DKIM/SPF tuning.
o Entra ID SSO, SCIM provisioning, SAML 2.0, OAuth/OIDC, and Conditional Access.
Strong PowerShell / Graph automation skills; ability to create JSON/Win32 and Proactive Remediation scripts.
Excellent analytical and root cause troubleshooting skills for multi discipline issues (identity, mail flow, endpoint, security).
Effective project management, task prioritization, and stakeholder communication abilities.
Clear, concise verbal and written communication and documentation skills.
Preferred certifications:
o Microsoft 365 Enterprise Administrator Expert (MS 102)
o Entra ID Administrator Associate (SC 300) or Intune Administrator Associate (MD 102)
o Proofpoint Certified Specialist (PPS/TAP); CISSP, CISM, or similar.
Minimum Qualifications:
Education & Experience:
Level II: 5 - 8 years hands on engineering of hybrid AD DS/Azure AD, Intune/Autopilot, Proofpoint (or equivalent), and Microsoft 365 platforms.
A 4-year college degree in Information Systems, Computer Engineering, or a related academic area, or equivalent experience, is required
This position is a Contract-to-Hire (6 months).
SCCU Benefits
- Health & Wellness: Medical, dental, and vision insurance, plus an Employee Assistance Program.
- Financial Perks: 401(k) match (5%), HSA match, and SCCU-paid insurance (short/long-term disability, life insurance).
- Education Support: Tuition reimbursement after one year of service.
- Generous Time Off: 20+ days of PTO, birthday PTO, and 11 federal holidays.
- Exclusive Discounts: Lower rates on loans, credit cards, and no fee SCCU accounts!
Hours:
Monday/Friday 8:00-5:00
Every third Sunday for patching availability
Able to work after hours as needed
Participate in an on-call rotation
About SCCU
Since 1951, Space Coast Credit Union (SCCU) has proudly served our community, growing to over 685,000 members and managing $9 billion in assets. With 67 branches spanning Florida s east coast, we are the third-largest credit union in the state. In 2025, we expanded into Orange County to better serve the growing East Orlando market.
As a not-for-profit financial institution, SCCU is dedicated to putting our members first. Unlike traditional banks, we return profits to our members through better rates, lower fees, and enhanced services. While we offer the same financial products like checking, savings, and loans our focus remains on empowering our members and supporting their financial well-being. With local decision-making and a commitment to exceptional service, we strive to make a meaningful difference in the lives of those we serve.
At SCCU, we also prioritize our team members by fostering a supportive and collaborative environment that encourages career growth and development. As we continue to grow, we are seeking talented, member-focused professionals to join our team and help deliver innovative financial solutions and outstanding service.
I UNDERSTAND this application a legal document for purposes of your employment. Upon acceptance of an offer with SCCU, I UNDERSTAND that I will be required to complete background, employment verifications, and drug screening. I UNDERSTAND further that any misstatements or omissions in this application and pre-employment process can be considered falsification and will result in a decision not to hire me, or to discharge me if discovered after I am hired. I UNDERSTAND that the information requested regarding date of birth, race and sex is for the sole purpose of gathering the above information accurately, and will not be used to discriminate against me in violation of any law. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hired.
SCCU is a drug-free workplace. I understand that as a condition of my employment, I will be required to submit to any testing for the presence of drugs, and to submit to any procedure to assess my qualifications for employment. If hired, I ALSO AGREE that if I am hired, my employment is for no definite time and may be terminated at any time without prior notice.
Never miss an opportunity! Create an alert based on the job you applied for.