Onboarding Engineer

The Onboarding Engineer is a seasoned IT generalist working in a service provider capacity for a variety of clients. The role is responsible for advanced technical support of M365, Windows based server systems, virtualization technology, shared storage, email and unified communications, security access controls, data networking, backup/DR, etc. This critical role is accountable, along with the other team members, for delivery of services that meet all technical requirements for clients in a timely fashion. The SE also requires personal and administrative skills, such as initiative, time management, prioritization, multi-tasking, project assessment, scoping, estimation, time allocation/tracking, documentation, communication, and testing and solution deployment.

About the role

The Onboarding Engineer is the hands-on technical builder who turns a signed contract into a fully instrumented, documented, monitored, and supportable client. You execute the technical work behind the scenes while a Project Manager and vCIO own the client relationship.

When the onboarding pipeline is light, you flex into Technical Services — supporting existing clients on escalations, project work, and platform improvements. That dual mode is intentional. It keeps your skills sharp across the full client lifecycle and gives the team a senior generalist who can step in anywhere.

What you'll own during onboarding

• Technical discovery. Sit alongside the vCIO/PM through discovery, then go deep — environment, network topology, identity, M365, line-of-business apps, third-party dependencies, risk areas.
• Documentation. Build the client's documentation from scratch to NetStandard's standard: assets, configurations, passwords, runbooks, network diagrams. This is the canonical source of truth the support team relies on.
• RMM and patching. Deploy RMM agents, configure policies, validate coverage, baseline patch and AV health.
• PSA configuration. Stand up the client in PSA — contracts, SLAs, asset sync, alert routing, user records, ticket templates.
• Network monitoring. Deploy and tune network monitoring, validate discovery, confirm syslog/SNMP ingestion, set sane alerting thresholds.
• Microsoft 365 / Entra. Validate tenant configuration, baseline conditional access and identity posture, wire the tenant into our monitoring and reporting stack.
• Handoff. Produce a tight handoff package — known issues, environmental quirks, escalation paths, open follow-ups — and walk Tier 1/2 through it before going live.

Flex responsibilities (lighter onboarding periods)

• Tier 2/3 escalations on existing clients
• Project work: migrations, hardware refreshes, security baselines
• Improving our onboarding runbooks, templates, and automation
• Mentoring helpdesk on documentation quality and ticket hygiene

What we're looking for

• 5+ years in an MSP or internal IT generalist role with hands-on responsibility across endpoints, identity, networking, and cloud.
• Working fluency with the modern MSP stack — ideally HaloPSA (or ConnectWise/Autotask), NinjaOne (or Kaseya/Datto), and an IT documentation platform (ITGlue/Hudu).
• Strong Microsoft 365 and Entra chops: tenant configuration, conditional access, hybrid identity exposure, basic Purview/compliance.
• Network literacy. You can walk into a client, look at the firewall and switching, and understand what's there. VLANs, basic routing, VPN, SD-WAN exposure.
• A documentation reflex. You don't consider work "done" until it's written down clearly enough for someone else to support.
• Comfortable owning a checklist and pushing to completion without daily PM hand-holding.
• Clear written communication. You'll be heads-down a lot — your notes, runbooks, and handoffs are how the team trusts your work.

Bonus points

• Auvik or comparable network monitoring experience
• Scripting (PowerShell, Python) for repeatable deployment tasks
• Past experience standardizing or improving an onboarding process
• Backup & DR experience in setup, configuration, and troubleshooting
• M365 certs (MS-102, MS-700, SC-300) or Security+ / similar

Job Type: Full-time

Pay: $64,492.00 - $71,218.00 per year

Benefits:

• 401(k)
• Dental insurance
• Health insurance

Ability to Commute:

• Overland Park, KS 66214 (Required)

Ability to Relocate:

• Overland Park, KS 66214: Relocate before starting work (Required)

Work Location: In person