About the Company
At Asiacruit, we connect top talent with forward-thinking organizations across industries. Our mission is to help businesses grow through smart, strategic, and people-focused solutions. We are expanding our Microsoft services practice and seeking a System Engineer to join our team.
About the Role
This position is employed through Asiacruit BPO, Inc. and embedded within Philotech, a US-based Managed IT and Cybersecurity provider operating as a global MSP. You will be part of a lean, high-trust engineering team delivering secure, compliant, and scalable IT environments across a growing portfolio of SMB clients in regulated industries. This is an engineering role requiring ownership, judgment, and the ability to operate across multiple client environments simultaneously. You will work directly with clients through onboarding, ongoing support, and project delivery — and coordinate with third-party vendors as an extension of that work. Microsoft certifications are a strong preference and signal the continuous learning mindset we actively invest in.
Responsibilities
Technical & Administrative
- Administer and manage cloud productivity platforms including Microsoft 365 and Google Workspace across multiple client tenants, covering identity, email, collaboration, and security services.
- Manage endpoint environments using RMM and MDM tooling (such as Atera or Intune); enforce device compliance, patch management, and automated remediation policies.
- Maintain endpoint security across client environments using layered protection tools (such as Bitdefender, Microsoft Defender, or Huntress); monitor alerts and respond to detections.
- Administer backup and disaster recovery solutions; validate recovery objectives and test restoration procedures on a regular cadence.
- Support and respond to Tier 1 through Tier 3 issues — from initial intake and ticket triage through to complex troubleshooting and escalation resolution across Microsoft and Google stacks.
- Configure and maintain email security controls including SPF, DKIM, and DMARC for all managed domains.
- Write and maintain PowerShell scripts to automate administrative tasks, bulk configuration, compliance checks, and reporting across client environments.
Client Interaction & Collaboration
- Serve as a primary technical point of contact for assigned clients, managing day-to-day support, communicating clearly on project status, and building trusted working relationships.
- Lead technical onboarding for new clients: conduct environment assessments, establish baseline configurations, and deliver documentation and knowledge transfer.
- Gather and interpret client requirements; produce solution design documentation and deliver professional services engagements on time and to scope.
- Coordinate with third-party vendors — ISPs, hardware suppliers, software providers, and Microsoft — to resolve escalations and ensure timely delivery on client commitments.
- Communicate technical findings and recommendations clearly to both technical and non-technical stakeholders, including client leadership.
Security and Identity
- Implement identity and access management using Azure AD, Conditional Access, MFA, and Privileged Identity Management.
- Apply security best practices and Microsoft security tooling (BitDefender for Endpoint, BitDefender for Cloud, Sentinel) to protect customer environments.
Engineering & Documentation
- Design and implement secure, scalable configurations across client M365 tenants including Conditional Access, MFA enforcement, identity governance, and licensing alignment.
- Maintain Microsoft Secure Score baselines across client environments; identify improvement opportunities and execute hardening tasks aligned to client compliance requirements.
- Produce and maintain accurate runbooks, network diagrams, configuration baselines, and change logs for all managed environments.
- Identify and implement workflow improvements to reduce manual effort and improve consistency across service delivery.
- Contribute to the internal knowledge base; document repeatable processes and tooling configurations for team use.
Qualifications
Required
- 2–3+ years of hands-on experience in system engineering, IT administration, or MSP service delivery.
- Demonstrated proficiency with Microsoft 365 administration including Entra ID, Exchange Online, Intune, and core security features.
- Experience with Google Workspace administration in a professional or client-facing setting.
- Solid working knowledge of core networking concepts: DNS, DHCP, TCP/IP, VLANs, firewall rules, and email hygiene protocols.
- PowerShell scripting capability; able to write, read, and modify scripts for administrative and automation tasks.
- Experience working directly with clients: onboarding, requirements gathering, and ongoing support relationships.
- Strong documentation habits and professional written and verbal communication skills in English.
Preferred Experience
- Candidates with any of the following will be given preference in the selection process:
- Microsoft certifications — any of the following are relevant to this role: MD-102, MS-102, AZ-104, AZ-500, SC-300, SC-900.
- Prior MSP or multi-tenant client environment experience.
- Familiarity with RMM platforms, endpoint protection solutions, or backup/DR tooling in a managed services context.
- Exposure to compliance frameworks such as FTC Safeguards Rule, DOL ERISA cybersecurity guidance, HIPAA, or CMMC.
- Hyper-V virtualization and on-premises Windows Server administration.
- Experience coordinating with third-party vendors and technology partners in a client delivery context.
Why join
Philotech is a growing MSP with a clear mission and a team that takes engineering seriously. Here is what you can expect:
- Real Engineering Work — you will design and own solutions across security, cloud, identity, compliance, and client delivery — not just follow tickets.
- Certification Investment — we fund and support Microsoft certification paths and build a plan around your goals.
- Your Career Path — you and your manager will create a development plan built around both your goals and the company's, with clear milestones and compensation checkpoints tied to achievement.
- Global Client Exposure — work directly with US-based clients in regulated industries and build skills that carry real career weight.
- Shift Premium — night shift availabilityf or US-aligned project work comes with corresponding shift premiums.
- Continuous Learning Culture — regular team learning sessions, access to Microsoft learning resources, and leadership that mentors rather than just manages.
How to Apply
- Apply at asiacruit.com or send your resume to [Confidential Information] with the subject line System Engineer – [Your Name].
