Senior MSP Engineer - Automation and Platform

Sikich is a professional services provider that focuses on consulting, technology, and compliance. They are seeking a Senior MSP Engineer to support client onboarding, development, and maintenance of tools and platforms for managed services delivery, ensuring standardization and continuous improvement across the platform stack.

Responsibilities:

• Lead the onboarding and deployment of MSP-managed tools into new and existing client environments, including RMM agents, endpoint security platforms, monitoring, and backup solutions, ensuring every deployment follows established standards
• Serve as the primary technical resource for client tool deployments during onboarding engagements, coordinating with project teams to ensure clean handoffs into managed services
• Assist in maintaining and improving platform configurations across the client base, including ConnectWise Automate, SentinelOne, Microsoft Intune, Auvik, and LogicMonitor, keeping environments standardized, healthy, and up to date
• Support the administration of core internal MSP platforms, contributing to the health and standardization of the shared tool stack used across all client environments
• Write and maintain PowerShell scripts and automation workflows that support client onboarding, endpoint management, patching, compliance enforcement, and remediation at scale
• Build and maintain automation routines, alert policies, and remediation workflows in ConnectWise Automate to reduce manual work and drive consistent, proactive service delivery across client environments
• Develop API integrations across platforms, including Microsoft Graph, SentinelOne, and ConnectWise, to enable cross-tool automation, reporting, and alerting
• Support the intake and governance process for new technology entering MSP-managed client environments, helping ensure tools are standardized and documented before deployment
• Partner with the service desk and NOC to identify recurring operational gaps and contribute tooling-based solutions that reduce escalations and manual intervention
• Interact with clients as needed during tool deployment and onboarding phases, translating technical configurations into clear expectations and next steps
• Write and maintain technical runbooks, SOPs, and platform documentation, ensuring configurations and deployment procedures are captured and repeatable
• Assist with escalated platform-related issues and provide mentorship to junior team members

Requirements:

• Proven senior-level experience in a multi-client MSP environment. Candidates without MSP background will not be considered
• Expert-level ConnectWise Automate (LT/Automate) administration or equivalent MSP RMM toolset, including building and maintaining monitors, alert policies, scripting libraries, patch policies, and client-level configurations across multiple tenants
• Ability to write PowerShell scripts from scratch to solve real operational problems, not modify existing templates, with comfort in error handling, logging, and making scripts serviceable by others
• Deep Microsoft Intune / Endpoint Manager experience, including building compliance policies, remediation scripts, configuration profiles, and using Intune as a management and enforcement layer, not just for enrollment
• Strong working knowledge of Windows endpoint management, Active Directory, Group Policy, and Microsoft Entra ID / Azure AD including hybrid identity scenarios
• Experience deploying, configuring, and governing MSP tools across multiple client environments simultaneously, with an understanding of what breaks when standards aren't followed
• Ability to read and build RESTful API integrations using Microsoft Graph, ConnectWise APIs, or similar, to connect platforms and automate workflows that don't have native integrations
• Familiarity with version control practices using Git or similar tools, with scripts and automation artifacts stored, versioned, and maintained in a shared repository rather than locally or ad hoc
• Strong documentation discipline, with runbooks, SOPs, and configurations written so a technician who wasn't in the room can follow them
• Ability to work independently, communicate clearly with leadership, and drive technical initiatives without waiting to be directed
• Hands-on administration of SentinelOne or equivalent enterprise EDR platform in a multi-tenant MSP environment, including policy design, exclusion management, alert tuning, and responding to detections across a diverse client base
• Uphold high ethical standards and maintain confidentiality of sensitive information
• Familiarity with Rewst or similar workflow automation platforms is a plus
• Experience with Huntress, ThreatLocker, Datto, or IT Glue or other equivalent MSP toolsets is a plus
• Familiarity with network monitoring platforms such as Auvik or LogicMonitor is a plus
• Microsoft 365 and Azure administration experience preferred