Key Responsibilities
• Architect and lead end-to-end migrations from On-Premises Exchange, Google Workspace, and M365 tenant-to-tenant environments to Microsoft 365.
• Architect Intune device enrollment and co-management workstreams alongside mailbox and collaboration migrations.
• Lead pre-migration discovery, scoping, cutover planning, and post-migration validation across all workstreams.
• Configure and manage Azure AD / Entra ID identity sync, hybrid mail flow, and DNS during migration cutover.
• Produce and maintain migration runbooks, cutover checklists, and rollback procedures.
• Troubleshoot migration failures across mail flow, DNS, OAuth, and legacy authentication.
• Mentor mid-level engineers and coordinate with security, networking, and end-user support teams.
Required Qualifications
• 6+ years hands-on experience in Microsoft 365 / Exchange migrations.
• Proven experience architecting at least two migration paths: On-Prem Exchange, Google Workspace, or M365 tenant-to-tenant.
• Strong proficiency in PowerShell scripting for M365 administration and automation.
• Working knowledge of DNS, MX routing, SPF/DKIM/DMARC, and OAuth / Modern Authentication.
• Experience with Microsoft Intune, Autopilot, and Conditional Access.
Required Certifications
• Microsoft MS-102 (M365 Enterprise Administrator Expert) — required or willingness to obtain.
• Microsoft MS-203 (Messaging Administrator Associate) — required or willingness to obtain.
• Mimecast certification or demonstrated platform experience — required or willingness to obtain.
• Barracuda Email Security certification or demonstrated experience — required or willingness to obtain.
• YubiKey / hardware MFA deployment experience — willingness to obtain vendor certification required.
Candidates who do not hold the above certifications will be offered access to unpaid self-paced certification resources as part of onboarding to support role readiness.