Nesco Data Center is searching for a Senior Microsoft Delivery Engineer & Consultant.

Microsoft 365 Migration Engineer

Job Summary

We are seeking an experienced Microsoft 365 Migration Engineer to lead and execute complex Microsoft 365 cloud migration and implementation projects. This position requires a highly technical engineer with hands-on experience designing, configuring, migrating, troubleshooting, and validating Microsoft 365 environments across multiple workloads.

The successful candidate will be capable of taking an existing Microsoft 365, Microsoft Exchange, Google Workspace, or other email/file collaboration environment and successfully transitioning users and services into a properly architected Microsoft 365 environment.

This is not simply a Microsoft 365 administration role. The ideal candidate has demonstrated experience performing actual production migrations, including tenant-to-tenant migrations, Exchange hybrid migrations, Google Workspace-to-Microsoft 365 migrations, domain and DNS cutovers, identity synchronization, mail-flow changes, Teams migrations, SharePoint migrations, OneDrive migrations, security configuration, and post-migration troubleshooting.

The engineer will work directly with technical stakeholders and client IT teams, provide technical guidance, perform discovery and assessment, execute migration waves and cutovers, troubleshoot issues, and provide documentation and knowledge transfer at project completion.

Core Responsibilities

Microsoft 365 Tenant Architecture & Implementation

• Architect, configure, validate, and implement Microsoft 365 tenants.

• Configure Microsoft 365 licensing based on user requirements and licensing strategy.

• Provision and configure user accounts, mailboxes, groups, and other required Microsoft 365 services.

• Evaluate existing environments and determine migration dependencies, prerequisites, and risks.

• Validate Microsoft 365 configuration against security and operational best practices.

• Support Microsoft 365 Business Premium, Enterprise E3, and Enterprise E5 environments.

• Understand the capabilities and licensing implications associated with Exchange Online, SharePoint Online, OneDrive for Business, Microsoft Teams, Microsoft Intune, Microsoft Entra ID, Defender, and related Microsoft cloud services.

Identity & Authentication

• Design and implement identity integration between on-premises Active Directory and Microsoft 365.

• Configure and troubleshoot directory synchronization.

• Configure, upgrade, and troubleshoot Microsoft Entra Connect / Azure AD Connect environments.

• Implement and validate Single Sign-On and Pass-through Authentication where required.

• Perform account matching and synchronization between existing Active Directory accounts and cloud identities.

• Configure Microsoft Entra ID identity services in cloud-only environments.

• Configure and troubleshoot Multifactor Authentication.

• Implement Conditional Access policies and/or Microsoft Security Defaults.

• Configure self-service password reset and account unlock functionality where required.

• Troubleshoot identity synchronization, authentication, credential, and access issues.

Exchange Online & Email Security

• Design and implement Exchange Online environments.

• Configure and troubleshoot Exchange Online Protection.

• Configure and validate:

  • SPF

  • DKIM

  • DMARC / anti-spoofing concepts

  • Anti-malware

  • Anti-phishing

  • Safe Links

  • Safe Attachments

  • Spoof intelligence

  • Email encryption

  • Data Loss Prevention policies

• Configure mail-flow rules and routing.

• Integrate Microsoft 365 with third-party email security/filtering platforms when required.

• Troubleshoot inbound and outbound mail-flow issues.

• Validate DNS records and mail-flow dependencies.

• Understand SMTP relay requirements for applications, multifunction devices, and other infrastructure.

Exchange Migration

The engineer must have hands-on experience executing production Exchange migrations using one or more migration methodologies, including:

• Exchange hybrid migrations.

• On-premises Exchange to Exchange Online.

• Google Workspace to Microsoft 365.

• Third-party email platform to Microsoft 365.

• Microsoft 365 tenant-to-tenant migrations.

• Mailbox migrations involving:

  • User mailboxes

  • Shared mailboxes

  • Resource mailboxes

  • Public folders

• Migration of email, calendars, contacts, journals, notes, and other supported mailbox content.

• Test/pilot migrations.

• Migration-wave planning and execution.

• Delta synchronization.

• Cutover planning and execution.

• Post-cutover validation.

• Mail-flow modification.

• Outlook client connectivity troubleshooting.

• Migration-related user provisioning and troubleshooting.

Exchange Hybrid Engineering

For environments requiring hybrid Exchange architecture, the engineer should be capable of:

• Assessing Exchange prerequisites for hybrid deployment.

• Validating Exchange versions, service packs, and cumulative updates.

• Validating DNS and Autodiscover functionality.

• Implementing Exchange hybrid architecture.

• Configuring coexistence between on-premises Exchange and Exchange Online.

• Troubleshooting hybrid connectivity.

• Supporting SMTP relay requirements.

• Supporting Exchange management requirements after migration.

• Assisting with legacy Exchange decommissioning when appropriate.

Experience with maintaining an on-premises Exchange server for hybrid management, SMTP relay, or coexistence is highly desirable.

Microsoft 365 Tenant-to-Tenant Migration

The engineer must understand the complexities associated with tenant-to-tenant migrations and be able to coordinate the migration of multiple Microsoft 365 workloads.

Responsibilities may include:

• Source and destination tenant assessment.

• Domain and DNS planning.

• User and identity mapping.

• Mailbox migration.

• Teams migration.

• SharePoint migration.

• OneDrive migration.

• Data and permissions validation.

• Migration-wave planning.

• Test migrations.

• Cutover planning.

• Final synchronization/delta migration.

• Domain removal and registration during cutover.

• DNS and FQDN modifications.

• Post-cutover troubleshooting.

The engineer must understand that tenant-to-tenant migration may require coordinated cutover of Exchange Online, Teams, OneDrive, and SharePoint Online and must be capable of managing the dependencies between these workloads.

Microsoft Teams

• Design and implement Microsoft Teams environments.

• Establish Teams governance standards.

• Configure Teams naming conventions.

• Establish Teams creation and administrative processes.

• Configure guest access and external communication policies.

• Establish approved application/integration standards.

• Address Teams data security requirements.

• Configure expiration, retention, and archiving policies.

• Control Microsoft 365 Group and Teams creation.

• Build and configure Teams for architectural validation and knowledge transfer.

• Migrate Teams, channels, and associated files where applicable.

• Troubleshoot Teams and collaboration migration issues.

• Understand limitations surrounding private chats, meeting history, participant acceptance, and other non-migratable content.

The engineer should be comfortable working with both the technical implementation and governance side of Microsoft Teams, rather than simply provisioning Teams for users.

SharePoint Online

• Design and configure SharePoint Online environments.

• Configure SharePoint Online document libraries.

• Perform discovery of existing file-server and SharePoint environments.

• Identify migration dependencies and compatibility issues.

• Configure and validate SharePoint migration toolsets.

• Migrate folders, files, shares, sites, and associated data.

• Execute multiple migration passes to capture changes.

• Maintain file and folder hierarchies where technically possible.

• Preserve permissions and access structures where possible.

• Coordinate SharePoint cutovers.

• Troubleshoot file naming, invalid-character, embedded URL, permissions, metadata, and other migration issues.

Candidates should understand common SharePoint migration limitations and be able to identify and remediate problematic data before migration.

OneDrive for Business

• Configure OneDrive for Business for users.

• Assess existing user home directories and file structures.

• Identify compatibility and migration issues.

• Configure and validate OneDrive migration toolsets.

• Migrate user data from file servers, Google Drive, or another Microsoft 365 tenant.

• Preserve folder structures, permissions, sharing relationships, and data integrity where possible.

• Perform test migrations and multiple synchronization passes.

• Support migration waves and final cutover.

• Troubleshoot OneDrive migration problems involving:

  • Invalid characters

  • File naming restrictions

  • Embedded URLs

  • Metadata

  • Version history

  • Permissions

  • Shared links

  • Shared folders

Experience with Group Policy and home-directory redirection to OneDrive is preferred.

Microsoft 365 Backup

• Deploy and configure Microsoft 365 backup solutions.

• Protect:

  • Exchange Online

  • SharePoint Online

  • OneDrive

  • Teams

  • Microsoft 365 Groups

  • Calendars

  • Tasks

  • Attachments

• Configure retention policies.

• Validate recurring backup operations.

• Perform restore testing and validation where applicable.

• Ensure administrative access and operational knowledge is transferred to the customer IT team.

Migration Planning & Cutover

The engineer will be responsible for helping plan and execute technically complex migration events with minimal disruption to users.

Responsibilities include:

• Developing migration plans and technical runbooks.

• Performing discovery and prerequisite validation.

• Developing pilot/test migrations.

• Establishing migration waves.

• Monitoring migration progress.

• Troubleshooting migration failures.

• Coordinating DNS and domain changes.

• Coordinating mail-flow changes.

• Performing final synchronization/delta migrations.

• Executing production cutovers.

• Validating user access following migration.

• Performing post-migration cleanup.

• Supporting users and client IT teams following cutover.

• Identifying and documenting risks before production migration.

The engineer must understand that migration success involves much more than copying data; it requires careful coordination of identity, authentication, DNS, mail flow, security, client connectivity, permissions, applications, and user access.

Troubleshooting & Technical Support

The engineer must be comfortable troubleshooting complex issues across the Microsoft cloud ecosystem, including:

• Authentication failures

• Directory synchronization issues

• MFA problems

• Conditional Access issues

• Exchange Online connectivity

• Mail-flow failures

• DNS problems

• SPF/DKIM/anti-spam configuration

• Outlook connectivity

• Hybrid Exchange connectivity

• Mailbox migration failures

• Teams access and migration issues

• SharePoint permissions

• OneDrive synchronization

• File migration errors

• Data integrity issues

• Permission and access problems

• Microsoft 365 licensing issues

The engineer must be capable of independently diagnosing problems rather than relying exclusively on escalation to Microsoft or another third party.

Documentation & Knowledge Transfer

• Create comprehensive technical documentation.

• Document the final Microsoft 365 architecture and configuration.

• Document identity and authentication architecture.

• Document security configurations.

• Document migration procedures and results.

• Document administrative procedures and management best practices.

• Create technical runbooks and operational procedures.

• Conduct administrator training.

• Conduct train-the-trainer sessions for client IT personnel.

• Explain configuration decisions and operational considerations to technical stakeholders.

• Provide sufficient knowledge transfer for the client's IT team to independently manage the environment following project completion.

Documentation and administrative training are core project deliverables, not secondary responsibilities.

Required Professional Experience

Minimum Qualifications

• 5 years of hands-on Microsoft infrastructure/cloud engineering experience.

• 3 years of hands-on Microsoft 365 engineering and administration experience.

• Demonstrated experience performing actual Microsoft 365 migrations in production environments.

• Experience migrating users from at least one of the following:

  • On-premises Exchange

  • Google Workspace

  • Microsoft 365 tenant

  • Third-party email platform

• Experience with Microsoft Exchange Online.

• Experience with Microsoft Entra ID / Azure AD.

• Experience with Active Directory.

• Experience with Microsoft Teams.

• Experience with SharePoint Online.

• Experience with OneDrive for Business.

• Strong understanding of DNS and email routing.

• Experience with Microsoft 365 security configuration.

• Experience troubleshooting production Microsoft 365 environments.

Strongly Preferred Experience

• Microsoft 365 tenant-to-tenant migrations.

• Exchange hybrid migrations.

• Large-scale mailbox migrations.

• Google Workspace-to-Microsoft 365 migrations.

• MigrationWiz or comparable third-party migration platforms.

• Microsoft Entra Connect / Azure AD Connect.

• Pass-through Authentication and SSO.

• Conditional Access.

• Microsoft Defender for Office 365.

• Exchange Online Protection.

• SharePoint migration tooling.

• OneDrive migration tooling.

• Microsoft 365 backup solutions.

• PowerShell automation for Microsoft 365.

• Microsoft Graph.

• Microsoft Intune.

• Group Policy.

• SMTP relay architecture.

• Exchange 2019.

• Legacy Exchange environments.

• Microsoft 365 security and compliance.

Technical Skill Set

The ideal candidate should have strong working knowledge of:

Microsoft Cloud

• Microsoft 365

• Microsoft Entra ID

• Exchange Online

• SharePoint Online

• OneDrive for Business

• Microsoft Teams

• Microsoft Intune

• Microsoft Defender for Office 365

• Microsoft Purview / Data Loss Prevention

• Microsoft 365 Groups

Identity

• Active Directory

• Entra Connect / Azure AD Connect

• Directory Synchronization

• SSO

• Pass-through Authentication

• MFA

• Conditional Access

• Self-Service Password Reset

Messaging

• Exchange Server

• Exchange Online

• Exchange Hybrid

• SMTP

• DNS

• Autodiscover

• SPF

• DKIM

• DMARC

• Mail-flow rules

• Email security

Migration

• MigrationWiz or comparable migration platforms

• Exchange migration methodologies

• Tenant-to-tenant migration

• Google Workspace migration

• SharePoint migration

• OneDrive migration

• Teams migration

• Data/file migration

Automation

• PowerShell

• Microsoft Graph

• Microsoft 365 administrative scripting

Education & Certifications

A bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related technical discipline is preferred.

Equivalent professional experience may be accepted in place of a degree.

Preferred certifications include:

• Microsoft Certified: Administrator Associate

• Microsoft Certified: Identity and Access Administrator Associate

• Microsoft Certified: Messaging Administrator Associate

• Microsoft Certified: Teams Administrator Associate

• Microsoft Certified: Security-related Microsoft certifications

• Other current Microsoft 365/Azure certifications

Certifications are valuable, but demonstrated hands-on migration experience should carry greater weight than certifications alone.

Ideal Candidate Profile

The ideal candidate is a senior-level Microsoft cloud engineer who has personally executed Microsoft 365 migrations, not simply administered an established Microsoft 365 environment.

This individual should be able to walk into an unfamiliar environment, conduct discovery, identify technical dependencies, develop a migration strategy, build or validate the destination tenant, execute pilot migrations, resolve migration issues, coordinate the production cutover, validate the resulting environment, and hand the environment over to the client's IT team.

The candidate should be comfortable acting as both a technical engineer and customer-facing consultant.

They must be able to communicate complicated Microsoft technologies to technical and non-technical stakeholders, explain risks and dependencies, make sound architectural recommendations, and remain calm and methodical during production cutovers.

Critical "Must-Have" Qualifications

A candidate should not be considered fully qualified without substantial hands-on experience in the following areas:

1. Production Microsoft 365 migrations

2. Exchange Online

3. Microsoft Entra ID / Azure AD

4. Active Directory

5. DNS and email routing

6. Microsoft 365 identity synchronization

7. MFA and Conditional Access

8. Exchange migration or hybrid Exchange

9. Microsoft Teams

10. SharePoint Online

11. OneDrive for Business

12. Migration planning and cutover execution

13. Microsoft 365 security

14. Migration troubleshooting

15. Technical documentation and knowledge transfer

A candidate who has only performed Microsoft 365 user administration, desktop support, Office installations, or basic account provisioning would not be considered sufficient for this role.

Work Style & Professional Attributes

• Strong analytical and troubleshooting ability.

• Highly organized and detail-oriented.

• Comfortable working independently.

• Strong written and verbal communication.

• Customer-facing professionalism.

• Able to work with IT managers, infrastructure engineers, security teams, and business stakeholders.

• Able to develop and follow detailed migration plans and runbooks.

• Comfortable working during scheduled migration and cutover windows.

• Strong understanding of change management and production-environment risk.

• Able to document technical work thoroughly.

• Willing and able to take ownership of technical issues through resolution.

Project Success Criteria

The successful engineer will be expected to deliver a Microsoft 365 environment that is:

• Properly architected.

• Securely configured.

• Correctly licensed.

• Properly integrated with identity services.

• Functionally validated.

• Successfully migrated.

• Properly documented.

• Tested following migration.

• Supported through cutover and post-migration stabilization.

• Fully transitioned to the client's IT team through knowledge transfer and administrative training.

The engineer must ultimately leave the customer with a stable, secure, documented, and supportable Microsoft 365 environment, rather than simply completing the data migration.

Nesco Resource offers a comprehensive benefits package for our associates, which includes a MEC (Minimum Essential Coverage) plan that encompasses Medical, Vision, Dental, 401K, and EAP (Employee Assistance Program) services.

Nesco Resource provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.