Modern Workspace Engineer II

About Katalyst

Katalyst is a Digital Operations Partner. For more than 20 years, we have run the network, cybersecurity, and cloud infrastructure that mid-market organizations depend on, many of them in regulated industries like healthcare, financial services, credit unions, legal, manufacturing, and local government. We stand behind our work with an Accountability Guarantee: if we miss our operational commitments, the client gets their last 30 days of service back.

The Role

As a Modern Workspace Engineer II, you will own Microsoft 365, identity, and endpoints for a set of managed clients. You are the escalation point past Level 1, the technical lead for your assigned clients, and the engineer who makes sure the same issue does not come back. Every request is triaged and logged before it reaches you, so you spend your time engineering instead of sorting tickets.

What You'll Do

• Administer Microsoft 365 across multiple client tenants, including Exchange Online, SharePoint, OneDrive, and Teams.
• Manage Entra ID and hybrid identity, including Conditional Access, MFA, SSO, Entra Connect, and Active Directory.
• Run endpoint management in Intune and Autopilot for Windows and macOS devices.
• Triage endpoint and identity security alerts and contain compromised accounts.
• Apply Purview data protection (sensitivity labels, DLP, retention) and restore mail, files, and sites from backup.
• Take escalations from Level 1, resolve them, and coach L1 engineers through the fix.
• Find and fix the root cause of repeat issues.
• Serve as technical lead for assigned clients: know their environments, explain issues in plain language, lead during incidents, and run projects like migrations and device rollouts.
• Keep KB articles and SOPs current, and use PowerShell to automate repetitive work.

What You Bring

• 3+ years in IT support or systems administration, with at least 2 in an MSP or multi-tenant environment.
• Hands-on Microsoft 365 administration, including mail flow, connectors, message trace, SharePoint and OneDrive permissions, and Teams policies.
• Experience building and troubleshooting Conditional Access, MFA, SSO, and role assignments in Entra ID, using sign-in logs to find root cause.
• Working knowledge of Active Directory, Group Policy, Entra Connect, and DNS/DHCP basics.
• Intune and Autopilot experience, from enrollment through compliance policies, update rings, and app deployment.
• Enough PowerShell to read, modify, and safely run scripts against Microsoft Graph and Exchange Online.
• Solid troubleshooting across Windows, macOS, networking basics, and mail flow.
• Clear written communication: you can explain a fix to an end user and document it for the next engineer.
• Experience as a client's primary technical contact, or leading a project from scope to close.
• Good judgment about when to own an issue, when to escalate, and when to ask early.

Nice to Have

• Experience in healthcare, financial services, credit union, or legal environments, and familiarity with HIPAA, GLBA, or NCUA requirements.
• Experience with Microsoft Defender, Purview, ITDR, or application control tools.
• Experience with multi-tenant Microsoft 365 management, RMM, and PSA ticketing platforms.
• Experience with cloud-to-cloud Microsoft 365 backup and server backup.
• Microsoft certifications such as SC-300, MD-102, MS-102, MS-700, SC-200, or SC-401.
• Interest in using AI for triage, documentation, and automation.

Why Katalyst

• Microsoft certifications paid for by Katalyst, with paid study time.
• Automated triage and documentation take the busywork off your plate.
• Every ticket reports against what the client bought, so your good work gets seen and credited.
• A clear path to Engineer III, architecture, and project work.
• Hard problems: regulated clients at multi-tenant scale.