Microsoft 365 Implementation & Migration Engineer

About the project

We are looking for a Microsoft 365 Implementation & Migration Engineer to support a large-scale Microsoft 365 transformation for one of the leading cinema operators in Germany, with operations across several European markets.

The project focuses on transitioning from legacy IT infrastructure to a modern, secure, cloud-based digital workplace. The transformation is structured into two phases.

The first phase involves establishing a secure Microsoft 365 environment, implementing identity and access management, deploying endpoint management solutions, and migrating core collaboration and communication services to the cloud. This includes Microsoft Entra ID, Microsoft Intune, Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and Microsoft 365 Apps.

The second phase focuses on enabling advanced Microsoft 365 capabilities, including Microsoft 365 Copilot, workflow automation with Power Automate, and data analytics with Power BI.

The role will involve hands-on technical implementation, migration, configuration, security hardening, and troubleshooting. You will contribute to delivering a consistent and secure digital workplace for headquarters and distributed cinema locations across multiple countries.

This is how we organize our work

This is how we work

• at the client's site

Your responsibilities

• Configure and administer Microsoft Entra ID, including users, groups, dynamic groups, licenses, administrative roles, and role-based access control (RBAC).
• Implement and maintain Multi-Factor Authentication (MFA) and Conditional Access policies.
• Support hybrid identity configurations using Microsoft Entra Connect or Cloud Sync.
• Apply least-privilege principles and maintain secure identity and access management practices.
• Plan and execute migrations to Exchange Online, including mailboxes, distribution lists, permissions, and mail flow configuration.
• Configure Microsoft Teams, including channels, policies, and collaboration settings.
• Support SharePoint Online and OneDrive migrations, including information architecture, site structure, permissions, and file migration.
• Use Microsoft SharePoint Migration Tool (SPMT), Migration Manager, or equivalent migration solutions.
• Deploy and configure Microsoft 365 Apps on end-user devices using Intune or the Office Deployment Tool.
• Manage Microsoft 365 Apps update channels, activation, and deployment settings.
• Deploy and manage Microsoft Intune for device enrollment, configuration, compliance, and endpoint security.
• Configure Windows Autopilot, BYOD enrollment, and Mobile Application Management (MAM), where applicable.
• Implement endpoint security policies covering antivirus, firewall, BitLocker encryption, and Attack Surface Reduction (ASR) rules.
• Configure Microsoft Defender for Office 365 protection policies, including anti-phishing, Safe Links, and Safe Attachments.
• Support secure access management, permission models, and baseline Microsoft 365 security configurations.
• Configure and validate email authentication mechanisms, including SPF, DKIM, and DMARC.
• Support the rollout and configuration of Microsoft 365 Copilot.
• Validate licensing, technical prerequisites, and environment readiness before deployment.
• Review and remediate excessive permissions, oversharing, and inappropriate data access across Microsoft 365 services.
• Support the implementation of security and governance measures required for responsible Copilot adoption.
• Diagnose and resolve issues related to identity, authentication, access management, Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and Intune.
• Troubleshoot hybrid identity synchronization and device enrollment or compliance issues.
• Investigate authentication problems using Entra ID sign-in logs and diagnose mail flow issues using Exchange message trace.
• Use PowerShell and Microsoft Graph tools to support administration, automation, and troubleshooting.
• Collaborate with project stakeholders to ensure a smooth implementation and migration process across distributed business locations.

Our requirements

• Hands-on experience administering and implementing Microsoft 365 environments.
• Strong knowledge of Microsoft Entra ID, including user and group management, dynamic groups, licensing, administrative roles, and least-privilege RBAC.
• Practical experience configuring MFA and Conditional Access, including policy design, report-only testing, exclusions, and emergency access (break-glass) accounts.
• Experience with hybrid identity solutions, including Microsoft Entra Connect or Cloud Sync configuration and synchronization troubleshooting.
• Good knowledge of Microsoft Intune, including device enrollment, Windows Autopilot, BYOD/MAM, configuration profiles, and compliance policies.
• Experience deploying Microsoft 365 Apps using Intune or the Office Deployment Tool, including update channel management and activation.
• Hands-on experience with Exchange Online migration and administration, including mailboxes, distribution lists, permissions, and mail flow.
• Knowledge of email authentication and security mechanisms, including MX records, SPF, DKIM, and DMARC.
• Experience administering Microsoft Teams, SharePoint Online, and OneDrive, including policies, site structures, sharing settings, permissions, and file migrations.
• Practical knowledge of Microsoft 365 migration tools, such as SPMT and Migration Manager.
• Experience implementing baseline Microsoft 365 security controls, including Microsoft Defender for Office 365 policies and Intune endpoint security configurations.
• Understanding of Microsoft 365 Copilot prerequisites, licensing, security requirements, and permission readiness.
• Good PowerShell skills and experience working with Exchange Online, Microsoft Graph, and Microsoft Teams PowerShell modules.
• Ability to troubleshoot technical issues using sign-in logs, message trace, Intune device status, and other diagnostic tools.
• English proficiency at B2 level or higher.

Optional

• Experience with advanced identity and access management features, including Privileged Identity Management (PIM), Access Reviews, and Microsoft Entra ID Protection.
• Knowledge of Microsoft Purview, including sensitivity labels, Data Loss Prevention (DLP), and retention policies.
• Experience with Copilot governance and adoption, including DSPM for AI, SharePoint Advanced Management, user training, and usage reporting.
• Knowledge of Microsoft Defender for Endpoint, Microsoft Defender XDR, and Microsoft Secure Score.
• Experience with advanced Windows Autopilot scenarios and Microsoft Configuration Manager (SCCM) co-management.
• Experience with Microsoft Graph API, Power Automate, or other automation solutions.
• Familiarity with third-party migration tools such as ShareGate or BitTitan.
• Microsoft certifications such as MS-102, MD-102, or SC-300. Additional certifications, including SC-200, SC-401, or MS-700, will be an advantage

SQUARE ONE RESOURCES sp. z o.o.

#OneSquareOne - one team, many talents

Square One Poland specializes in IT outsourcing and supporting companies in building and scaling technology teams. We help international organizations access proven IT specialists, carefully matched to project requirements and company culture.

We act as a strategic partner, enabling effective team scaling — from individual experts to complete project teams — based on transparent cooperation and long-term, win–win relationships. For IT professionals, we offer inspiring projects delivered with modern technologies, clear communication, and real opportunities for professional growth.

Operating internationally, we combine years of experience with creativity, agility, and flexibility. Despite our market maturity, we retain a start-up DNA that allows us to respond quickly to changing business needs.

Our organizational culture is confirmed by the Great Place to Work® 2026 certification.

This is how we work