Microsoft 365 Automation Engineer – PowerShell, Graph API, Intune, CIPP & RMM Integration

We operate on a two-tier command framework: CIPP (CyberDrain) / Microsoft Graph API: Strategic Cloud HQ for M365 multi-tenant user provisioning, conditional access, and SharePoint extranets. Syncro PSA / RMM: Tactical Endpoint Control for local Windows OS script execution, system tray tools, and right-click context menu integrations. We are seeking an expert PowerShell / Microsoft Graph / MSP Automation Engineer to write, test, and package our core modular script library. Key Responsibilities & Deliverables 1. PowerShell Script Development (Modular & Clean) Develop, document, and test six core PowerShell 7 scripts with robust error handling (Try/Catch), logging, and -WhatIf support: JC-PS-ONB-01 (New-JaxCapClientUsers.ps1): Cloud user onboarding via Graph API (CSV/JSON input, automated E5/Business Premium license assignment, group membership, and system-preferred MFA enforcement). JC-PS-ONB-02 (New-JaxCapPrebuiltExtranets.ps1): Automated creation of hardened SharePoint Online collaboration hubs/extranets using PnP PowerShell with strict external sharing and sensitivity labels. JC-PS-IR-01 (Stop-JaxCapAccidentalShare.ps1): Emergency cloud kill-switch script that revokes all external sharing links, active user sessions, and high-risk grants across M365 in under 5 seconds. JC-PS-EP-01 (Register-JaxCapQuickActions.ps1): Local Windows registry customization script that injects a branded right-click context menu ("🛡️ JaxCap: Instant Secure Share Link") into Windows File Explorer. JC-PS-EP-02 (Get-InstantSecureLink.ps1): Local script triggered by context menu to upload selected local files to pre-configured secure SharePoint/OneDrive storage and generate a password-protected/expiring link. JC-PS-EP-03 (Repair-JaxCapPrinters.ps1): Self-healing endpoint maintenance script to reset local print spoolers, clear stuck queues, and re-establish local TCP/IP printer bindings. 2. Platform Integration & Testing Syncro RMM Packaging: Format endpoint scripts into Syncro-compatible execution blocks (System & User context) and configure custom System Tray app links. CIPP / Graph Integration: Configure custom script actions in CIPP and establish secure Microsoft Graph API App Registrations with minimal-privilege scopes. Lab Testing: Validate all scripts end-to-end inside a Microsoft 365 E5 Developer Sandbox environment before delivery.