Join Sri Lanka’s Great Place to Work Awarded organization, Tech One Lanka!
We are an organization that celebrates the diversity of our teams, where everyone can be themselves and are empowered to do their best work. Our purpose is to build an empowered community with empathy and a growth mindset to build innovative solutions to achieve remarkable results. We foster a safe space for everyone to learn, grow, and have fun. This is why our people can’t believe that their work here is actually a job. That’s because innovation is at the heart of everything we do. Every day our people get to imagine new possibilities, take magnificent risks, fail spectacularly, and succeed in spaces no one has dared to venture into before
What’s in it for you:
Here at Tech One, you’ll have the opportunity to make an impact by contributing to our global projects and working with diverse talented individuals across our offices. We promote an always-learning culture and provide our people with vast opportunities for growth. Got any suggestions to make Tech One an even better place to work at? We have a team who listens; share your thoughts and contribute to the changes. Got the skills and right qualities to be part of our awesome team? Competitive remuneration awaits you!
The role in a nutshell:
Tech One Global Lanka Pvt Ltd. is seeking a Systems Engineer – Modern Work (Delivery) to join our Modern Work practice as a hands-on implementation specialist. This is a delivery-first-focused role responsible for configuring, deploying, and operationalizing Microsoft 365 solutions across a diverse customer portfolio. Working from solution designs, you will execute implementations spanning Microsoft 365 Core Services while maintaining a solid grounding in on-premises directory services, environments that commonly form the source or hybrid layer in customer deployments. You will work under the guidance of senior architects and project managers, growing your technical depth and delivery capability across the full Modern Work stack.
What you will do in this role:
- Microsoft 365 Solution Delivery: Execute end-to-end technical delivery of Microsoft 365 projects across assigned workloads translating pre-sales solution designs and scope documents into working, production-grade configurations. Take ownership of assigned implementation tasks, track progress against project plans, and proactively communicate status and blockers to relevant stakeholders to keep delivery on schedule.
- Exchange Online & Email Migration: Configure Exchange Online tenants including accepted domains, connectors, mail flow rules, anti-spam and anti-phishing policies, and transport rules. Execute email migrations from on-premises Exchange, Gmail, Google Workspace, and third-party platforms using migration tooling, managing migration batches, cutover planning, MX record transitions, and post-migration validation. Troubleshoot mail flow issues, delivery failures, and coexistence configuration during hybrid or staged migration scenarios.
- SharePoint Online, OneDrive & Teams: Deploy and configure SharePoint Online site structures, OneDrive policies, sharing settings, and content migration from on-premises SharePoint and file server platforms. Configure Microsoft Teams including team and channel governance policies, meeting policies, calling policies, and Teams Phone or Direct Routing setup where in scope. Support customers through platform go-live, ensuring configurations are validated and users are transitioned with minimal disruption.
- Identity, Access & Endpoint Management: Configure Microsoft Entra ID settings including user and group management, Conditional Access policies, MFA rollout, SSPR, SSO/federation with third-party applications, and Entra Connect for hybrid identity synchronization. Deploy and configure Microsoft Intune, including device enrolment profiles, compliance policies, configuration profiles, app deployment, and Windows Autopilot. Manage endpoint onboarding across Windows, macOS, iOS, and Android platforms, ensuring devices meet organizational compliance requirements from day one.
- Compliance, Governance & Information Protection: Implement Microsoft Purview solutions in line with customer requirements, including sensitivity label deployment, DLP policy configuration across M365 workloads and endpoints, retention policy and label setup, and basic eDiscovery and audit log configuration. Support customers in establishing a baseline compliance and governance posture aligned to their regulatory obligations and internal data handling requirements.
- Baseline Cybersecurity Configuration: Apply Microsoft security baseline configurations as part of every M365 deployment, including Defender for Office 365 policy setup (anti-phishing, safe links, safe attachments), Microsoft Secure Score improvement actions, Entra ID security defaults or Conditional Access baseline policies, and basic Intune device compliance enforcement. Ensure delivered environments meet a defined security baseline before project handover and escalate requirements beyond baseline scope to the Security practice.
- Microsoft 365 Copilot Deployment & Readiness: Support the deployment and initial configuration of Microsoft 365 Copilot, including license assignment, prerequisites validation (semantic index, data governance checks), and basic user enablement. Assist customers with Copilot onboarding activities, initial prompt guidance, and readiness checks, working alongside the Solutions Architect to ensure the M365 environment is governance-ready before Copilot activation.
- On-Premises Platform Support & Integration: Apply working knowledge of on-premises Windows Server, Active Directory Domain Services, DNS, DHCP, Group Policy, Exchange Server, and Endpoint Manager infrastructure to support hybrid deployment scenarios, identity integration, and migration source environment preparation. Diagnose and resolve on-premises to cloud integration issues arising during delivery
- Documentation, Handover & Support Transition: Produce accurate as-built documentation, configuration runbooks, and end-user guidance. Deliver structured knowledge transfer to customer technical teams at project close, ensuring they can manage and operate deployed solutions independently. Ensure clean handover to the support practice.
- Operational Coverage & Service Continuity: As part of a delivery function, this role contributes to ensuring customer coverage across business and may extend to non-business hours where applicable, working collaboratively with the team to maintain fair and consistent coverage while meeting delivery success.
Required Qualifications
- Bachelor’s degree in Information Technology (IT), or related field
- 2–3 years of hands-on technical experience in a systems engineering, IT implementation, or technical support role within a Microsoft partner or enterprise IT environment
- Working knowledge and practical delivery experience across the following workloads:
- Exchange Online: tenant configuration, mail flow, anti-spam/phishing policies, and migration execution from on-premises or third-party platforms
- SharePoint Online & OneDrive: site configuration, sharing and access policies, and content migration
- Microsoft Teams: governance policy configuration, Teams Phone basics, and meeting policy setup
- Microsoft Entra ID: user and group management, Conditional Access, MFA, SSPR, SSO, and Entra Connect hybrid identity sync
- Microsoft Intune: device enrolment, compliance and configuration policies, app management, and Autopilot
- Microsoft Purview: sensitivity labels, DLP policies, retention configuration, and basic eDiscovery
- Baseline Security: Defender for Office 365 policy configuration, Secure Score remediation actions, and Entra ID security baseline
- Microsoft 365 Copilot: license assignment, prerequisites validation, and basic user enablement
- On-Premises: Active Directory, Windows Server, Exchange Server, Endpoint Manager etc. at a working level sufficient to support hybrid deployment and migration scenarios
- Ability to work from solution architecture documents and produce accurate as-built documentation
- Solid troubleshooting skills with ability to independently diagnose and resolve configuration issues, policy conflicts, and integration errors within assigned workloads
- Clear written and verbal communication skills with ability to engage customer technical teams professionally throughout the delivery and support lifecycle
Preferred Qualifications
- Microsoft certifications: MS-900 (baseline expectation); MS-102, MS-700, MD-102, or SC-300 in progress or recently completed
- Basic scripting proficiency in PowerShell for M365 configuration tasks, bulk operations, and deployment automation
- Exposure to Microsoft 365 licensing models, E3/E5 and add-on SKUs sufficient to understand what is in scope for a given customer deployment
Key Competencies
Delivery Focus :Takes ownership of assigned implementation tasks and drives them to completion with minimal supervision, escalating blockers early rather than letting them sit.
Technical Curiosity: Actively builds knowledge across the M365 stack beyond immediate task requirements recognizing that breadth is as important as depth at this stage of career
Attention to Detail :Produces configurations, documentation, and handover materials that are accurate, complete, and consistent with the design intent
Customer Professionalism: Engages customer technical contacts confidently and professionally throughout the delivery lifecycle
Team Collaboration: Works effectively within multiple teams, communicating clearly with Project Managers, Leads, fellow peers, and customer contacts to keep delivery moving
Continuous Learning : Proactively pursues Microsoft certifications and tracks M365 product updates relevant to active and upcoming delivery engagements
How to get in touch with us:
Address: Tech One Global Lanka (Pvt) Ltd, No:185/4, Havelock Road, Colombo 05
E-mail your CV to hr@techoneglobal.com along with the contact details of two non-related referees