Responsibilities

• Build and migrate core infrastructure services: internet breakout, DNS/DHCP, Wi‑Fi, firewalls, VPN/SASE, network segmentation, and site connectivity
• Establish the Microsoft 365 tenant and migrate workloads (Exchange Online mailboxes/archives, Teams, SharePoint/OneDrive) with security baselines
• Implement endpoint management (Intune/Autopilot), device re‑provisioning, domain/tenant join, policy deployment, and application packaging
• Set up printing and telephony solutions (e.g., Teams Phone) and integrate with service desk/ITSM, asset management, and monitoring tools
• Plan and execute end‑user migration waves; provide cutover and early life support
• Deliver EUC migration plans, device readiness dashboards, Day‑1 checklists, and support playbooks

Requirements

• 8+ years in infrastructure and end‑user computing engineering, with recent hands‑on experience in Microsoft 365 and Windows endpoint management
• Proven expertise in Microsoft 365 tenant build and tenant‑to‑tenant migrations (Exchange Online, SharePoint/OneDrive, Teams), identity, and security baselines
• Strong Intune/Autopilot skills, including GPO to MDM transitions, compliance policies, and application deployment
• Solid network engineering experience: firewalls, VPN/SASE, VLANs, DNS/DHCP, Wi‑Fi; vendor exposure (Fortinet, Cisco, Palo Alto) is a plus
• Scripting and automation proficiency (PowerShell) with familiarity in Azure AD/Entra ID
• Preferred certifications: MS‑102, MD‑102, AZ‑104; CCNA/CCNP or equivalent vendor certifications
• Strong documentation and end‑user support capabilities
• Fluent in English and Cantonese
• Onsite presence in Hong Kong, with flexibility for after‑hours and weekend migration/cutover support