Near Shore Sr. IT Specialist (Argentina Applicants Only)

About CSG Inc.

CSG Inc. is a Managed IT Services Provider (MSP) delivering enterprise-grade IT management, cloud engineering, cybersecurity, and strategic consulting to small- and medium-sized businesses across the United States. We serve clients across diverse industries, including finance, healthcare, manufacturing, wholesale, and food & beverage. Our mission is to handle the complete technology lifecycle so our clients can focus entirely on driving their business forward.

Role Overview

We are seeking an experienced Senior IT Specialist based in Argentina to serve as a core technical anchor and project lead for our cloud, identity, endpoint, and cybersecurity operations. In this role, you will lead end-to-end technical initiatives—architecting and deploying new Microsoft 365/Azure environments, taking over and remediating legacy client infrastructures, building custom Intune kiosk profiles, managing Google Workspace, optimizing licensing, and responding to complex security incidents.

Beyond hands-on engineering, you will act as the primary technical point of contact and project manager on complex client projects. You will interface directly with senior client leadership, evaluate and coordinate with third-party vendors, present analytical reports, and deliver proactive infrastructure roadmaps. Additionally, you will handle Tier 3 escalations and assist the broader team with Tier 1/2 ticket overflow during peak volumes.

Key Responsibilities

• Technical Project Management & Client Leadership: Serve as the primary technical contact and project manager for complex client onboardings, infrastructure overhauls, and cloud migrations. Lead project scoping, timeline management, milestone tracking, and direct status communications with senior client staff and executive management.

• M365 Tenant Architecture & Licensing: Build, configure, and secure new Microsoft 365 tenants from the ground up. Audit, assign, and optimize Microsoft 365 licensing tiers (Business, Enterprise, Add-ons) to ensure maximum feature adoption and cost efficiency.

• Exchange Online & Email Security: Manage complex Exchange Online environments, mail flow rules, shared mailboxes, hygiene policies, retention tags, and email authentication standards (SPF, DKIM, DMARC).

• Security Incident Response & Advisory: Act as an incident lead to detect, triage, contain, and remediate complex security incidents (e.g., account compromises, phishing outbreaks, malware/ransomware alerts). Advise client leadership and internal teams on root cause analysis and immediate containment strategies.

• Proactive Enhancements & Advisory: Continuously assess client environments against CIS, NIST, and HIPAA security benchmarks. Identify vulnerabilities, bottlenecks, and obsolete configurations, proactively delivering actionable improvement roadmaps to management.

• Reporting & Analytical Insights: Generate, analyze, and present regular reports regarding tenant health, endpoint compliance, security posture, ticket trends, and license utilization for both internal review and executive client presentations.

• Vendor Research & Tool Evaluation: Research, evaluate, and vet emerging IT vendors, hardware models, and cloud software solutions. Present comparative analyses and recommendations to support procurement and client project decisions.

• Endpoint Management & Custom Kiosk Deployments: Design, deploy, and maintain device profiles using Microsoft Intune (MDM/MAM). Architect and deploy custom Intune-managed Kiosk mode implementations (single-app and multi-app dedicated devices) for specialized client workflows.

• Identity & Access Management: Administer Microsoft Entra ID (Azure AD), including Conditional Access policies, Multi-Factor Authentication (MFA), Single Sign-On (SSO), Role-Based Access Control (RBAC), and hybrid identity configurations.

• Environment Takeovers & Migrations: Audit, document, and remediate inherited Microsoft 365 and Azure environments when onboarding new clients from previous IT vendors. Execute seamless tenant-to-tenant and on-premises-to-cloud migrations.

• Multi-Platform & Vendor Collaboration: Administer Google Workspace tenants and collaborate with third-party software developers to ensure seamless API integrations and adherence to compliance baselines.

• VoIP & Telephony Support: Configure and manage cloud VoIP systems, softphones, call routing, auto-attendants, and Microsoft Teams Phone integrations.

• Escalations & Team Support: Serve as the Tier 3 escalation lead for complex technical roadblocks while stepping in to assist with Tier 1 and Tier 2 ticket overflow as business demand requires.

• Scripting & Automation: Utilize PowerShell to automate administrative tasks, tenant provisioning, reporting, and bulk policy updates across M365 and Azure environments.

• Documentation & SOPs: Author comprehensive standard operating procedures (SOPs), incident response runbooks, network topology maps, and client transition guides.

Required Qualifications

• Location: Must be legally residing and eligible to work as an independent contractor in Argentina.

• Experience: 5+ years of hands-on IT systems, networking, and cloud administration experience, with at least 2+ years in an MSP or multi-tenant enterprise environment.

• Project Leadership: Demonstrated experience serving as a project manager or primary technical liaison, successfully driving IT initiatives while interfacing directly with C-suite and executive client stakeholders.

• Microsoft Cloud & Licensing Mastery: Deep, demonstrable expertise in Microsoft 365 tenant administration, Exchange Online mail flow, Entra ID, and licensing structure optimization.

• Security & Incident Response: Proven experience investigating and responding to security incidents, analyzing audit logs, and configuring threat protection policies (e.g., Defender for Office 365, Defender for Endpoint).

• Endpoint & Kiosk Engineering: Proven hands-on experience configuring Microsoft Intune, Autopilot, compliance baselines, Win32 application packaging, and dedicated Intune Kiosk mode profiles.

• Reporting & Analytical Skills: Ability to extract, analyze, and synthesize raw tenant and infrastructure data into actionable executive summaries and health reports.

• Multi-Platform Administration: Experience administering Google Workspace alongside Microsoft environments.

• Telephony & Networking: Experience supporting cloud VoIP telephony systems and core networking fundamentals (firewalls, VLANs, VPNs, DNS, DHCP).

• Scripting: Strong working knowledge of PowerShell scripting for Microsoft 365 and Entra automation.

• Language & Communication: Fluent/Bilingual English proficiency (C1/C2 level) with superior verbal and written communication skills suitable for high-stakes executive interaction.

Preferred Qualifications

• Relevant industry certifications (e.g., MS-102: Microsoft 365 Administrator Expert, SC-200: Microsoft Security Operations Analyst, SC-300: Identity and Access Administrator, AZ-104: Azure Administrator, or MD-102: Endpoint Administrator).

• Formal project management training or certifications (e.g., CAPM, PMP, Agile/Scrum) is a strong plus.

• Deep understanding of regulatory compliance frameworks (e.g., HIPAA, SOC 2, CIS Controls).

• Hands-on experience with VMware ESXi, Hyper-V, and modern RMM/PSA platforms.

• Familiarity with enterprise backup and disaster recovery solutions (e.g., Veeam, Datto, Acronis).

Work Environment & Expectations

• 100% Remote: Must maintain a dedicated, quiet home office setup with high-speed, reliable fiber/broadband internet and backup power solutions.

• Availability: Active, accessible, and responsive via Teams, email, and VoIP throughout standard US operating hours.