L2 IT Support Engineer / Microsoft 365 Administrator - Urgent!

ABOUT GOODMAN TECH

Goodman Tech Solutions Inc. is a Toronto-based technology services firm operating alongside Goodman Tech BPO OPC in the Philippines. We place Philippine-based engineers into long-term dedicated roles with managed service providers and technology companies across Canada, the United States and Europe.

You are not a freelancer here and you are not a shared body on a helpdesk queue. You are a full employee of Goodman Tech BPO OPC, assigned to one client, working one set of hours, with a Philippine employment contract, statutory benefits and a Philippine payroll. Our clients pay for a dedicated engineer because that is what they get.

THE ROLE

This is a dedicated full-time engineering seat supporting one Canadian client, covering Microsoft 365 administration, Windows support, networking, endpoint security and backup on a fixed night shift.

It suits an engineer who is self-directed and comfortable owning a problem end to end, from first contact through to root cause and documentation, without waiting to be told how. Goodman Tech provides technical backup, escalation support and account management behind you.

KEY RESPONSIBILITIES

• End-user and escalated technical support across Windows desktops, laptops and mobile devices

• Microsoft 365 tenant administration: Exchange Online, Entra ID, Teams, SharePoint and OneDrive, including user lifecycle, licensing, mailbox and permissions work

• Network troubleshooting and configuration across switching, routing, wireless, VPN and firewall

• RMM administration: agent deployment, monitoring policies, alert tuning, patch management and scripted remediation

• Endpoint security and backup: EDR agent health, alert triage, backup job monitoring, restore testing and remediation

• Writing and maintaining PowerShell for provisioning, reporting, bulk changes and repetitive administrative work

• Building and maintaining technical documentation: network diagrams, runbooks, asset records and standard procedures

• Direct written and verbal communication with business users, including non-technical staff

REQUIREMENTS

Must have

• Three or more years of hands-on IT support experience, with time at a managed service provider strongly preferred

• Solid working command of Microsoft 365 administration, specifically Exchange Online, Entra ID, Teams and OneDrive

• Strong Windows 10 and 11 support and troubleshooting

• Practical networking: TCP/IP, DNS, DHCP, VLANs, VPNs, wireless and firewall concepts, applied in the field rather than only studied

• Experience with at least one RMM platform, with day-to-day administration and not just agent installs

• Working experience with EDR and with backup platforms, including monitoring and remediation

• PowerShell scripting you have actually written and used in production

• Excellent written and spoken English

• A stable home working environment: reliable primary internet, a working backup connection, power backup, and a quiet space suitable for customer calls

Significant advantage

• Hands-on experience with UniFi or Ubiquiti equipment

• Hands-on experience with MikroTik routers and switches

• Hands-on experience with NinjaOne

• Prior experience supporting North American clients on a night shift

Desirable

• Microsoft Azure fundamentals and administration

• Intune device management and application deployment

• Microsoft Defender and Conditional Access policy configuration

• Relevant certifications: MS-102, AZ-104, Network+, or vendor certifications on the platforms above

TWO REQUIREMENTS WE SCREEN SEPARATELY, AND STRICTLY

1. English. You will speak directly with North American business users, many of them non-technical, and write documentation they will read. Goodman Tech assesses your English in writing and on a live call, and the client carries out a further independent assessment. Both stages have to pass. This is not a formality and it is the most common reason strong technical candidates do not make it through.

2. Practical fluency with AI tools. We expect you to use tools such as Claude, ChatGPT and Microsoft Copilot as a normal part of your working day, for research, scripting, drafting documentation and building automation. Equally, we expect you to have the technical depth to check what those tools give you before it touches a production environment. We will ask you to walk us through a real example of both: something AI helped you build, and something AI got wrong that you caught.

THE NON-NEGOTIABLES

• One job, and only this job. You are dedicated to this account for the whole of your shift, and you hold no other employment for the duration of the engagement. No second job in your off hours, no freelance or contract work on the side, no other clients. This is a condition of employment, it is written into your contract, and it is the sole thing our clients care about most. An engineer running two jobs is exhausted on both.

• On-site onboarding. Your onboarding period is served on site at our BGC office. This is mandatory and is not treated as flexible or negotiable. Please do not apply if you cannot commit to it.

• Confidentiality. You will sign an NDA and a non-solicitation agreement, and you will follow the client's credential handling and access policies without exception.

• Attendance and reliability. Night shift work on a North American account only functions if the seat is covered. Consistent attendance is the baseline expectation.

COMPENSATION AND BENEFITS

• PHP 55,000 to PHP 70,000 per month, based on demonstrated skill and interview performance. We would rather pay properly for the right engineer than fill the seat cheaply

• Semi-monthly pay, on the 7th and the 22nd of each month

• 13th month pay

• Full statutory coverage: SSS, PhilHealth and Pag-IBIG

• HMO coverage

• Paid leave accruing monthly from your first month, covering both sick and vacation leave

• A long-term dedicated seat rather than short project work. Our clients engage these roles on a continuing basis

EQUIPMENT, SECURITY AND CREDENTIAL HANDLING

Goodman Tech issues a secured company laptop with remote monitoring and management and security operations centre coverage in place. You do not use a personal machine for client work, and you do not move client data onto personal storage, personal email or personal messaging.

Credential handling is governed strictly and is a condition of the role:

• Access to client systems is provisioned formally to you as a named individual, never through a shared or generic account

• All client credentials live in the client's approved password management system. They are never stored in a browser, a spreadsheet, a notes app or a personal vault

• Credentials are never shared, exported, screenshotted or transmitted outside the approved method, including to colleagues

• Multi-factor authentication is used wherever it is available

• All access is revoked and audited at the end of the engagement

You will sign an NDA and a non-solicitation agreement before onboarding, and you will follow the client's own security and access policies without exception.