Migration Specialist Engineer

Anovia (formerly Innovatia Technical Services) is an industry-leading technology outsourcing support provider with expertise in the telecommunications industry. Operating for over 20 years, we specialize in workflow and knowledge processes, as well as technical support, helpdesk and multilingual support services. With over 200 professional experts across the globe, we service some of the worlds’ most successful Fortune 500 and Fortune 1000 companies.

About the Role

Anovia is looking for a Project Engineer to deliver Microsoft 365, identity, and migration projects for our clients. This is hands-on cloud engineering, not advisory work: you build and harden tenants, untangle hybrid identity, manage devices through Intune, and move mail, files, and users between platforms without losing data or a weekend.

You will work across many client tenants at once, typically with two to five projects running in parallel at different stages. Each project is yours to execute — discovery, build, pilot, cutover, handover — with a senior engineer available for architecture calls.

• 5-10 years in IT overall, with at least 2 years administering Microsoft 365 and Entra IDacross more than one organization or tenant.

• At least five migrations you personally executed— mailbox, tenant-to-tenant, file, or Active Directory domain — with the tooling you used named.

• You own the technical execution and escalate architecture decisions. You are not expected to design a client's identity strategy from scratch; you are expected to implement one correctly and spot when it is wrong.

• Run mailbox, tenant, file, and domain migrations end to end using various migration tools — discovery, pilot group, cutover plan, cutover, post-cutover support.

• Agree rollback criteria and a downtime window with the client before the window opens, and hold to them.

• Reconcile what actually moved against what was supposed to move, and chase the difference.

• Run mailbox, tenant, file, and domain migrations end to end using various migration tools — discovery, pilot group, cutover plan, cutover, post-cutover support.

• Agree rollback criteria and a downtime window with the client before the window opens and hold to them.

• Reconcile what moved against what was supposed to move and chase the difference.

• Deploy and maintain Azure infrastructure: VMs, virtual networks, NSGs, site-to-site VPN, Azure Files, Azure Backup, and Azure Virtual Desktop where clients use it.

• Manage client devices through Intune: Autopilot enrolment, compliance and configuration profiles, app packaging and deployment, BitLocker and Defender policy, update rings.

• Write the as-built documentation into IT Glue and brief the service desk, so nothing undocumented is left behind.

• Keep project time and status current in the PSA so account managers can see where things stand.

• Join client calls to explain what is changing, what will briefly break, and when.

All four of the pillars below are required. Within each, you should be able to do most of what is listed without supervision.

• Exchange Online: mail flow, connectors, transport rules, shared and resource mailboxes, mailbox delegation, message trace, retention basics

• Mail DNS: MX, SPF, DKIM, DMARC, Autodiscover, and what TTL does to a cutover

• SharePoint Online and OneDrive: site and library creation, permission inheritance, sharing policies, sync troubleshooting

• Microsoft Teams: provisioning, guest access, and how Teams relates to the SharePoint site behind it

• Microsoft 365 admin center, license assignment, and group-based licensing

• Users, groups, dynamic groups, administrative roles and units

• Entra Connect Sync or Cloud Sync: installation, OU and attribute filtering, and resolving sync errors

• Hybrid join versus Entra join, and when each applies

• Conditional Access policy design, MFA rollout, SSPR, and why security defaults are not enough

• Enterprise applications and SAML or OIDC single sign-on

• Virtual machines, virtual networks, NSGs, public IPs, site-to-site VPN

• Azure Files with AD DS or Entra authentication; Azure Virtual Desktop basics

• Azure Backup and Recovery Services vaults

• Subscriptions, resource groups, RBAC, and enough cost management to not surprise a client

• Enrollment: Windows Autopilot, co-management, BYOD, Apple and Android enrollment

• Compliance policies, configuration profiles, and the Settings Catalog

• App deployment: Win32 packaging (.intunewin), Store apps, and line-of-business apps

• BitLocker policy and Defender for Endpoint onboarding

• Update rings and Windows Update for Business

5.  Migration delivery— demonstrable experience in at least two of:

• On-premises Exchange to Exchange Online: cutover, staged, or hybrid using the Hybrid Configuration Wizard

• Tenant-to-tenant migration following an acquisition, divestiture, or rebrand

• Google Workspace or IMAP to Microsoft 365

• File server or NAS to SharePoint Online, OneDrive, or Teams

• Active Directory domain migration or consolidation: ADMT, SID history, forest trusts, UPN suffix change, workstation re-domain

• Another MDM platform into Intune

• Active Directory Domain Services, DNS, DHCP, Group Policy, file and print services

• Hyper-V setup and configuration

• Bulk operations against Exchange Online, Microsoft Graph, and Entra

• You read and modify scripts rather than only running ones you found

• Experience working on a fully remote team.

• Client-facing: comfortable explaining a downtime window to a non-technical stakeholder.

• Documentation discipline — across many tenants, undocumented work is lost work.

• Available for scheduled after-hours and weekend cutover windows.

• Prior MSP or multi-client experience.

Required qualifications

• Security and compliance:Microsoft Purview (DLP, retention, sensitivity labels, eDiscovery), Defender for Office 365, Defender for Cloud Apps, Secure Score remediation, CIS benchmarks, HIPAA or CMMC-adjacent client work

• Privileged identity:Privileged Identity Management, access reviews, entitlement management

• Automation:Power Automate, Power Apps, Azure Automation, Logic Apps, Graph API scripting beyond cmdlets

• Microsoft 365 backup and BCDR:Veeam, Datto, Dropsuite, Afi, Acronis, Keepit

• Hypervisors:VMware ESXi, Nutanix Acropolis

• Other platforms:AWS, Google Workspace administration, Egnyte, Citrix ShareFile, Cloudflare, QuickBooks Online

• Apple ecosystem:macOS and iOS deployment, Apple Business Manager, Jamf, Mosyle, or Intune for Mac

• Network and edge:SonicWall and Fortinet firewalls, Cisco Meraki and Ubiquiti wireless, Cisco and Dell switching

• Storage:QNAP, Synology, and Dell NAS, particularly as a migration source

• MSP tooling:ConnectWise Manage and Automate, Sention, Autotask, Kaseya, NinjaOne, Datto RMM, IT Glue, Hudu; multi-tenant M365 administration tools such as Nerdio, inforcer, CIPP; password management such as Keeper; M365 migration tools such as BitTitan.

At least one current Microsoft role-based certification, or demonstrable equivalent experience. Examples:

·       MS-102- Microsoft 365 Administrator Expert

·       SC-300- Identity and Access Administrator

·       MD-102- Endpoint Administrator

·       AZ-104- Azure Administrator Associate

·       AZ-800 / AZ-801- Windows Server Hybrid Administrator

·       MS-700- Teams Administrator

·       SC-200- Security Operations Analyst

Benefits at Anovia

• Comprehensive Health Insurance policy
• Employee Wellness Program with focus on mental health
• Robust reward and recognition programs
• Company incentive programs offered
• Attractive leave policy: Holiday Leave, Maternity Leave, Paternity Leave, Birthday leave, Bereavement Leave and Paid Leave for personal time off
• Ample growth and learning opportunities
• Remote work opportunities
• Focus on work/life balance
• Immigration Program supporting immigration to Canada for eligible employees

We thank all candidates for their interest, however, only those selected for an interview will be contacted.
Anovia is an equal opportunity employer.