Company Overview
About Choice IT

We're a managed services firm supporting clients across a range of industries across the United States. The work is technical, varied, and the team is small enough that your decisions actually matter.

Job description:

The Role

This is a hands-on senior engineering role for someone who lives in the deep end of Microsoft 365 and Azure. You'll architect and execute complex multi-tenant migrations, design hybrid identity environments, and build the automation that keeps it all running. You'll own technical strategy across a portfolio of client environments, not just react to tickets.

You'll see more migration scenarios, identity edge cases, and architecture problems in a year here than most engineers encounter in five. If you've outgrown environments where change moves slowly and committee approvals outnumber deployments, the pace here will feel like a relief.

What You'll Actually Be Doing

• Leading tenant-to-tenant M365 migrations end to end: identity, Exchange Online, Teams, SharePoint, OneDrive.
• Architecting hybrid identity environments (Entra ID Connect, Conditional Access, federation, modern auth) that hold up under real complexity. SC-300-level expertise, or equivalent migration experience, matters here.
• Writing the PowerShell and automation that makes large-scale changes safe, repeatable, and auditable.
• Designing Azure infrastructure (networking, governance, security baselines) that survives an audit.
• Hardening client environments against modern threats using Defender, Conditional Access, and CIS/NIST-aligned baselines.
• Supporting client Power Platform and data work where it touches M365 and Azure: Dataverse, Power Automate, Power BI, and Microsoft Fabric. You don't have to architect these, but you need to be comfortable engaging when they come up.
• Acting as the L3 escalation point and the final technical word on Microsoft cloud issues.
• Building the runbooks, documentation, and reusable tooling that turn one-off projects into a repeatable practice.
• Setting the technical standard for the team and mentoring engineers coming up behind you.

Certifications

We're looking for proof, not just promises. Candidates should hold at least two of the following:

• Microsoft 365 Certified: Administrator Expert (MS-102)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Strongly Preferred

• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500), or SC-500 Cloud and AI Security Engineer Associate once available
• Microsoft Certified: DevOps Engineer Expert (AZ-400)
• Microsoft Certified: Azure Network Engineer Associate (AZ-700)

Nice to Have

• Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)
• Microsoft Certified: Teams Administrator Associate (MS-700)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Power BI Data Analyst Associate (PL-300)
• CompTIA Security+
• ITIL 4 Foundation
• CISSP
• VMware VCP-DCV

Proof of certification or an official transcript may be requested.

Who We're Looking For

You've spent serious time in Microsoft cloud environments, likely 7+ years, and you've migrated, broken, fixed, and rebuilt enough tenants to have strong, defensible opinions about how it should be done. You write PowerShell without Googling syntax. You've automated yourself out of repetitive work more than once. You can explain a hybrid identity design to a non-technical executive in the morning and debug a Graph API call in the afternoon.

You want a senior IC seat where your scripting, automation, and architectural decisions ship into production quickly and visibly, and where the gap between "I see a problem" and "it's fixed" is measured in days, not quarters.

Required Experience

• Deep, hands-on experience with M365 multi-tenant migrations across Exchange Online, SharePoint, Teams, OneDrive, and identity.
• Expert-level PowerShell scripting and automation; bonus if you've built modules or frameworks others use.
• Strong Azure architecture skills across networking, identity, security, and governance.
• Hybrid identity expertise (Entra ID Connect, Conditional Access, modern auth, and federation where it still lives).
• Working comfort with Dataverse, Power Automate, Power BI, and Microsoft Fabric. Deep expertise isn't required, but the ability to navigate these tools, troubleshoot real issues, and collaborate with clients on them is.
• Clear, direct written and verbal communication.

Preferred Experience

• Infrastructure as Code (Bicep, Terraform, or ARM).
• Azure Virtual Desktop or Windows 365 deployments at meaningful scale.
• Hands-on Power Platform or Fabric work beyond casual exposure.
• Compliance work in regulated environments (HIPAA, SOC 2).
• Background that spans larger, more structured environments as well as fast-moving ones.

The Setup

• Fully remote with modern collaboration tooling.
• Medical, dental, vision, and HSA.
• 401(k).
• Generous PTO and holidays.
• Certification reimbursement and a real training budget.
• On-call rotation, balanced across the team.

Benefits:

• 401(k)
• Dental insurance
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Vision insurance

Equal Opportunity Employer.

Pay: $110,000.00 - $130,000.00 per year

Application Question(s):

• Will you now or in the future require VISA sponsorship?

Work Location: Hybrid remote in Beachwood, OH 44122