Systems Engineer (MW Delivery)

Tech One Global Lanka Pvt Ltd. is seeking a Systems Engineer – Modern Work (Delivery) to join our Modern Work practice as a hands-on implementation specialist. This is a delivery-first-focused role responsible for configuring, deploying, and operationalizing Microsoft 365 solutions across a diverse customer portfolio. Working from solution designs, you will execute implementations spanning Microsoft 365 Core Services while maintaining a solid grounding in on-premises directory services, environments that commonly form the source or hybrid layer in customer deployments. You will work under the guidance of senior architects and project managers, growing your technical depth and delivery capability across the full Modern Work stack.

• Microsoft 365 Solution Delivery: Execute end-to-end technical delivery of Microsoft 365 projects across assigned workloads translating pre-sales solution designs and scope documents into working, production-grade configurations. Take ownership of assigned implementation tasks, track progress against project plans, and proactively communicate status and blockers to relevant stakeholders to keep delivery on schedule.
• Exchange Online & Email Migration: Configure Exchange Online tenants including accepted domains, connectors, mail flow rules, anti-spam and anti-phishing policies, and transport rules. Execute email migrations from on-premises Exchange, Gmail, Google Workspace, and third-party platforms using migration tooling, managing migration batches, cutover planning, MX record transitions, and post-migration validation. Troubleshoot mail flow issues, delivery failures, and coexistence configuration during hybrid or staged migration scenarios.
• SharePoint Online, OneDrive & Teams: Deploy and configure SharePoint Online site structures, OneDrive policies, sharing settings, and content migration from on-premises SharePoint and file server platforms. Configure Microsoft Teams including team and channel governance policies, meeting policies, calling policies, and Teams Phone or Direct Routing setup where in scope. Support customers through platform go-live, ensuring configurations are validated and users are transitioned with minimal disruption.
• Identity, Access & Endpoint Management: Configure Microsoft Entra ID settings including user and group management, Conditional Access policies, MFA rollout, SSPR, SSO/federation with third-party applications, and Entra Connect for hybrid identity synchronization. Deploy and configure Microsoft Intune, including device enrolment profiles, compliance policies, configuration profiles, app deployment, and Windows Autopilot. Manage endpoint onboarding across Windows, macOS, iOS, and Android platforms, ensuring devices meet organizational compliance requirements from day one.
• Compliance, Governance & Information Protection: Implement Microsoft Purview solutions in line with customer requirements, including sensitivity label deployment, DLP policy configuration across M365 workloads and endpoints, retention policy and label setup, and basic eDiscovery and audit log configuration. Support customers in establishing a baseline compliance and governance posture aligned to their regulatory obligations and internal data handling requirements.
• Baseline Cybersecurity Configuration: Apply Microsoft security baseline configurations as part of every M365 deployment, including Defender for Office 365 policy setup (anti-phishing, safe links, safe attachments), Microsoft Secure Score improvement actions, Entra ID security defaults or Conditional Access baseline policies, and basic Intune device compliance enforcement. Ensure delivered environments meet a defined security baseline before project handover and escalate requirements beyond baseline scope to the Security practice.
• Microsoft 365 Copilot Deployment & Readiness: Support the deployment and initial configuration of Microsoft 365 Copilot, including license assignment, prerequisites validation (semantic index, data governance checks), and basic user enablement. Assist customers with Copilot onboarding activities, initial prompt guidance, and readiness checks, working alongside the Solutions Architect to ensure the M365 environment is governance-ready before Copilot activation.
• On-Premises Platform Support & Integration: Apply working knowledge of on-premises Windows Server, Active Directory Domain Services, DNS, DHCP, Group Policy, Exchange Server, and Endpoint Manager infrastructure to support hybrid deployment scenarios, identity integration, and migration source environment preparation. Diagnose and resolve on-premises to cloud integration issues arising during delivery
• Documentation, Handover & Support Transition: Produce accurate as-built documentation, configuration runbooks, and end-user guidance. Deliver structured knowledge transfer to customer technical teams at project close, ensuring they can manage and operate deployed solutions independently. Ensure clean handover to the support practice.
• Operational Coverage & Service Continuity: As part of a delivery function, this role contributes to ensuring customer coverage across business and may extend to non-business hours where applicable, working collaboratively with the team to maintain fair and consistent coverage while meeting delivery success.