IT Infrastructure Engineer (L3)

Job Description

Why Noventiq?

Do you want to contribute directly to successful business outcomes by driving digital transformation for its customers’ businesses, connecting 75k organizations forward in a secure way? Are you motivated to evolve the best practices globally within all sectors with hundreds of best-in-class IT vendors, alongside its services and solutions?

Noventiq is a leading global solutions and services provider:

Founded in 1993

Headquarters in London, UK

Revenue of $ 2.1 billion

Headcount of 6400 employees

Partnering with Microsoft, IBM, Oracle, Google, AWS and up to 500 other vendors

Operating in roughly 60 countries

16 strategic acquisitions

What's in it for you?

Here you will collaborate with multi-national teams, ameliorate to a bazillion innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow, capable of taking on more significant responsibilities and leadership roles.

This can be invaluable in understanding and serving clients from different regions, making the company truly expand its presence in new markets, bringing a profound positive repercussion to the business.

Now we are looking for a Senior IT Infrastructure Engineer(L3), you will be a part of our Global IT Team.

Role Overview:

The IT Infrastructure Engineer(L3) provides advanced administration, engineering, and L3 support across Microsoft 365, with strong focus on Microsoft Intune, Microsoft Entra ID (Azure AD), Microsoft Defender, and endpoint and identity security. The role resolves complex technical issues, strengthens security controls, supports automation, and delivers secure tenant-to-tenant migrations with minimal user disruption.

Your Impact on the Mission:

Intune and Endpoint Management:

Administer Microsoft Intune across Windows, macOS, iOS/iPadOS, and Android, covering device enrolment, Autopilot, compliance, application deployment, security policies, updates, and device lifecycle management.

Configure endpoint security controls, including BitLocker, Microsoft Defender Antivirus, firewall, attack surface reduction, EDR onboarding, and local administrator access.

Troubleshoot complex endpoint issues and use Intune reporting, PowerShell, and Microsoft Graph to monitor device health and automate administrative tasks.

Identity and Access Management

Administer Microsoft Entra ID/Azure AD, including users, groups, roles, device identities, authentication methods, enterprise applications, and service principals.

Implement and troubleshoot Conditional Access, MFA, passwordless authentication, Windows Hello for Business, self-service password reset, and other Zero Trust controls.

Manage identity governance, privileged access, access reviews, lifecycle processes, and hybrid identity synchronization through Microsoft Entra Connect or Cloud Sync.

Microsoft 365 Security and Defender

Administer Microsoft Defender XDR across endpoints, identities, email, collaboration services, and cloud applications.

Investigate security incidents and alerts using advanced hunting, device timelines, automated investigation, and remediation capabilities.

Manage Defender for Endpoint, Office 365, Identity, and Cloud Apps controls, while working with security teams to improve Secure Score, contain threats, complete root-cause analysis, and strengthen security controls.

Microsoft 365 Operations and Migrations

Provide L3 support for Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and related Microsoft 365 services.

Plan and execute tenant-to-tenant migrations using Quest On Demand Migration, BitTitan MigrationWiz, or similar tools, covering assessment, identity mapping, pilot, coexistence, cutover, validation, and rollback.

Ensure migrations address Intune devices, Entra ID identities, Conditional Access, enterprise applications, Defender, certificates, security policies, and end-user transition requirements.

What You’ll Bring to The Table – About You:

7+ years of experience administering and supporting enterprise Microsoft 365 environments, including senior or L3 engineering responsibilities.

Strong hands-on experience with Microsoft Intune, Microsoft Entra ID / Azure AD, Conditional Access, Microsoft Defender XDR, and Microsoft Defender for Endpoint.

Experience with Windows Autopilot, endpoint configuration and compliance, application management, security baselines, patching, and mobile application management.

Solid understanding of identity security, privileged access, hybrid identity, authentication, authorization, device identity, and Zero Trust principles.

Practical experience investigating and remediating security incidents in the Microsoft Defender portal.

Advanced troubleshooting skills across Microsoft 365, Windows endpoints, networking, authentication, certificates, and cloud integrations.

Experience using PowerShell and Microsoft Graph for automation, reporting, and bulk administration.

Experience with Microsoft 365 tenant-to-tenant migrations and Quest On Demand Migration or an equivalent migration platform.

Strong documentation, communication, analytical, and stakeholder-management skills.