MICROSOFT 365 SYSTEMS ADMINISTRATOR
RawTech Group | Australia | Full time

ABOUT THE ROLE:
RawTech Group is your IT department, and Microsoft 365 is where most of our clients live. This role owns that. You will design, secure, automate and support the up-to-date workplace across a portfolio of Australian businesses, from 15-seat professional services firms to multi-site operations with hundreds of endpoints.
This is not a ticket-closing seat. You will spend real time on engineering: building the standards, writing the automation, hardening the tenants, and then handing the run-book to the service desk so it stays fixed.
We hire across four levels and we will place you at the band that matches your evidence, not your title history.

WHAT YOU WILL ACTUALLY DO:
- Identity and access
Design and administer Microsoft Entra ID across client tenants: Conditional Access, MFA and passwordless rollout, Privileged Identity Management, access reviews, hybrid identity and Connect Sync, and guest and B2B governance. You will be the person who decides what a "secure by default" tenant looks like at RawTech and then makes every client match it.
- Endpoint and device
Own the endpoint estate end to end. Windows Autopilot and pre-provisioning, Intune configuration and compliance policies, Windows 11 SOE design, application packaging (Win32, MSI, PowerShell), update rings, BitLocker, macOS and iOS enrolment, and Windows 365 or AVD where the client needs it. Co-management and SCCM migration work comes up on legacy accounts.
- Security and compliance
Microsoft Defender for Endpoint deployment and tuning, attack surface reduction rules, Purview DLP and sensitivity labels, retention, and audit. You will map client tenants against the ASD Essential Eight and produce the gap analysis and remediation plan that goes to the client. Australian Privacy Act and Notifiable Data Breach obligations shape how we configure, and you need to understand why.
- Collaboration and productivity
Exchange Online (transport rules, mail flow, hygiene, migration),



SharePoint Online and OneDrive architecture and governance, Teams administration including meeting and voice policies and Direct Routing, and Microsoft 365 Copilot readiness work: permissions hygiene, oversharing remediation, and rollout.
- Automation
PowerShell 7 and Microsoft Graph are the default answer to "do this for every client". You will build and maintain the scripts, Power Automate flows and Azure Automation runbooks that turn a two-hour manual task into a scheduled job. Anything you do three times gets automated.
- Client-facing engineering
Scope and deliver migrations and projects (tenant to tenant, on-premises to cloud, M and A consolidations). Write the design documents. Run the technical portion of client review meetings. Translate a Conditional Access policy into a sentence a practice manager understands, without being condescending about it.
- Service quality
Take L3 escalations from the service desk, resolve the root cause rather than the symptom, and feed the fix back as documentation and a standard. Contribute to our internal knowledge base and keep client documentation current.

WHAT WE EXPECT IN SUMMARY:
Works independently across Intune, Entra and Exchange Online, with 1-3 years of hands-on Microsoft 365 experience under your belt. Builds and tests configuration profiles and Conditional Access policies without supervision. Packages applications and manages update rings across a device fleet. Handles a mailbox or tenant migration for a small client from start to finish. Writes reusable PowerShell, not one-off scripts you throw away after use. Documents as you go, so the next person (or client)



isn't left guessing. Comfortable taking a ticket that's been escalated once already and actually closing it out.

WHAT YOU NEED:
Non-negotiable at every level:

- Hands-on Microsoft 365 administration in a production environment

- Working knowledge of Entra ID and Intune, not just familiarity

- PowerShell that you wrote yourself, not copied and ran

- Clear written English. You will produce documentation clients read.

- Australian work rights, and the ability to pass a police check. Some client work requires Australian citizenship.

- Driver's licence and willingness to attend client sites

Strongly preferred:

- MSP, managed services or multi-tenant experience. Managing 40 tenants is a different discipline from managing one.

- Microsoft certifications: MS-102, MD-102, SC-300, SC-200, AZ-104, AZ-800

- Exposure to ASD Essential Eight, ISM or ISO 27001

- Experience with PSA and RMM tooling (HaloPSA, NinjaOne, Datto, ConnectWise or similar) and multi-tenant management platforms such as CIPP

- Azure infrastructure fundamentals

HOW WE WORK:
We are Australian owned and operated. Our clients call us because they want an IT department, not a ticket queue, and we staff accordingly: engineers who own outcomes, not tickets assigned to them.

- Hybrid, with client site visits as the work requires

- Certification costs and exam time covered.

- Opportunities to progress into further roles in the IT industry where you can progress your career with a steady path to success.

- Modern tooling. We do not ask you to fight the environment to do the job.

HOW TO APPLY:
Send a CV and a short note telling us one thing you automated, what it replaced, and roughly how much time it gave back. That note matters more to us than the CV.

We welcome applications from Aboriginal and Torres Strait Islander people, and from candidates of all backgrounds. If you need an adjustment to the recruitment process, tell us and we will arrange it.

📌 Microsoft 365 Systems Administrator (Barangaroo)
🏢 RawTech Group
📍 Barangaroo