Senior Modern Workplace Engineer (Microsoft 365 / MSP)

Overview

The Senior Modern Workplace Engineer is the founding engineer of Focus Services’ Managed Services practice. The role takes over day-to-day ownership of Microsoft 365, Entra ID, Intune and Windows 365 across all internal group tenants then builds and leads the managed services offering for external clients.

Key Responsibilities

Multi-Tenant Microsoft 365 & Entra ID

• Administer eight or more Microsoft 365 / Entra ID tenants across the group from one standardized security and configuration baseline.
• Manage user lifecycle, licensing, groups, roles, Exchange Online, SharePoint, Teams and OneDrive across all tenants.
• Configure single sign-on for corporate SaaS subscriptions (SAML/OIDC enterprise applications) and cross-tenant / B2B collaboration between brands.
• Own Conditional Access, MFA, Privileged Identity Management, identity protection and break-glass account governance.

Endpoint Management & Cloud PCs

• Manage all devices through Microsoft Intune: Autopilot, compliance policies, configuration profiles, app deployment, update rings and security baselines.
• Deploy and operate Windows 365 Cloud PCs, including Windows 365 Boot, with supporting Conditional Access policies.
• Implement and monitor Microsoft Defender for Endpoint / Business across the group.

Domains, DNS & Web

• Own the domain portfolio across all registrars (GoDaddy and others): registration, renewals, DNS and transfers.
• Maintain email authentication (SPF, DKIM, DMARC) for every brand domain.
• Oversee websites hosted, working with the Hosting & DNS Administrator.

Managed Services Practice Build

• Set up multi-tenant management: GDAP, Microsoft 365 Lighthouse and Partner Center / CSP.
• Select and implement PSA/RMM tooling and an IT documentation platform.
• Define the service catalogue, client onboarding checklist, standard client security baseline and SLA terms.
• Onboard the first external clients and provide technical presales support.

Network Oversight

• Set network standards (MikroTik RouterOS, VLANs, VPN, Wi-Fi) and direct the Network & Field Technician(s).
• Approve site network designs and changes; coordinate with contractors and ISPs.

Team, Documentation & Governance

• Supervise, train and evaluate the IT team; recruit future Service Desk staff.
• Maintain runbooks, SOPs, tenant records and an admin-access register for every tenant.
• Run change control and report monthly to the CEO on security posture, licensing cost and open risks.

Qualifications

Experience

• 10+ years in IT, with 5+ years hands-on Microsoft 365, Intune and Entra ID administration.
• Fluent in Powershell for tenant administration
• Required: 3+ years at a managed service provider (MSP) administering multiple client tenants.
• Hands-on Windows 365 or Azure Virtual Desktop deployment.
• Experience writing SOPs and documenting environments for handover.

Technical Skills

• Conditional Access, PIM, Intune policy design, Autopilot, Defender.
• PowerShell and Microsoft Graph scripting for bulk and cross-tenant work.
• DNS, domain management and email deliverability.
• Networking fundamentals; MikroTik RouterOS is an advantage.
• HIKvision CCTV and Access control knowledge is an advantage.

Certifications

• Required: MS-102 Microsoft 365 Administrator (or obtained within 6 months of hire).
• Preferred: MD-102 Endpoint Administrator, SC-300 Identity and Access Administrator, AZ-104 Azure Administrator.
• Advantage: MikroTik MTCNA, HIKvision CCTV & access control.

Soft Skills

• Strong written and spoken English; client-facing communication.
• Works independently across many priorities without close supervision.
• Builds structure: templates, checklists and standards that others can follow.

Conditions of Engagement

• Signed NDA and confidentiality undertaking before any access is granted.
• Background and reference checks.
• All administrative work through named admin accounts with MFA and PIM; no shared credentials; all secrets stored in the company vault.
• Admin access is provisioned in stages during probation.
• Company-paid certification exams.

What You Will Do

• Run 8+ Microsoft 365 / Entra tenants from one security baseline.
• Manage Intune, Autopilot, Defender and Windows 365 Cloud PCs (incl. Windows 365 Boot).
• Own SSO, Conditional Access, PIM and domain/DNS management.
• Build our MSP stack: GDAP, Lighthouse, CSP, PSA/RMM, service catalogue and SLAs.
• Lead a small team of field, hosting and service desk staff.

What You Bring

• 10+ years IT; 5+ years Microsoft 365 / Intune / Entra.
• 3+ years at an MSP managing multiple client tenants (required).
• MS-102 (required or within 6 months); MD-102, SC-300, AZ-104 preferred.
• PowerShell / Graph scripting; strong documentation habits.

What We Offer

• Founding role in a new MSP practice with a path to MSP Lead.
• Competitive pay benchmarked against remote MSP roles.
• Paid certifications.
• Your own founding team creation
• Cutting edge technology deployment and management opportunities

Pay: Php14,000.00 - Php40,000.00 per month

Benefits:

• Company Christmas gift
• Company events
• Opportunities for promotion
• Staff meals provided

Ability to commute/relocate:

• El Nido, Palawan: Reliably commute or planning to relocate before starting work (Preferred)

Location:

• El Nido, Palawan (Preferred)

Willingness to travel:

• 50% (Preferred)

Work Location: In person