Microsoft Engineer – Microsoft 365 & Security

*Remote | Full-Time | Based in the Philippines *

About the Role

Wolfpack ITS is seeking an experienced Microsoft Engineer specializing in Microsoft 365 security, identity management, endpoint protection, and Windows device management. You’ll assess Microsoft 365 tenants and Windows endpoints, identify vulnerabilities, implement hardening controls, and manage security configurations across multiple client environments in an MSP model.

You’ll work independently with both IT professionals and non-technical end users, configuring and securing Microsoft Entra ID, Conditional Access, Intune, Defender, and Exchange Online. This is a hands-on implementation role, not a helpdesk position.

Key Responsibilities

• Configure and maintain identity and access controls (MFA, Conditional Access, least-privilege roles)
• Manage Windows endpoint compliance and security policies via Intune (BitLocker, ASR rules, Defender, Firewall)
• Investigate and remediate Microsoft Defender alerts and incidents
• Secure Exchange Online (anti-phishing, SPF/DKIM/DMARC)
• Write PowerShell scripts for automation and reporting
• Follow structured change management (pilot groups, testing, rollback planning)
• Prepare clear technical documentation and handover notes
• Provide occasional remote support for Microsoft 365 and Windows issues

Requirements

• Minimum 3 years of hands-on experience with Microsoft 365 and Windows endpoint environments
• Proven expertise configuring security controls and resolving security issues
• Strong spoken and written English communication
• Ability to maintain overlap with U.S. business hours

Technical Skills:

Microsoft 365 administration • Entra ID (Azure AD) • Conditional Access & MFA • Intune • BitLocker • Windows Firewall • ASR rules • Defender • Exchange Online • PowerShell scripting • Change management • Documentation • Least-privilege access

Nice to Have

• MSP experience supporting multiple client environments
• PreVeil deployment experience
• CMMC or NIST SP 800-171 implementation
• Windows Autopilot • Microsoft Graph • KQL • Microsoft Sentinel • Microsoft Purview
• Microsoft certifications (SC-300, MD-102, SC-200)