Microsoft 365 Engineer

About the role

We are looking for a Microsoft 365 Engineer to design, implement and maintain a secure, high‑performing modern workplace across our Microsoft 365 tenant(s). The role combines day‑to‑day operations, project delivery and technical escalation to ensure a reliable collaboration environment for end users.

Key responsibilities

• Administer and optimise Exchange Online, SharePoint Online, OneDrive and Teams, maintaining health, performance and configuration baselines.
• Manage identity and access using Microsoft Entra ID, Conditional Access, MFA and privileged access controls, and resolve complex authentication issues.
• Engineer device management at scale with Intune and Windows Autopilot, creating compliance and application deployment policies.
• Implement security controls with Microsoft Defender, Conditional Access and Microsoft Secure Score, and configure data loss prevention, retention and sensitivity labels in Microsoft Purview.
• Deliver Microsoft 365 projects such as migrations, tenant configuration and modern workplace transformations, acting as a trusted technical advisor to stakeholders.
• Automate routine tasks using PowerShell, Microsoft Graph and the Power Platform, and continuously improve standards and tooling.
• Serve as an escalation point for complex incidents, ensuring high‑quality configurations and knowledge transfer to support teams.

Required profile

• Minimum 3 years of hands‑on engineering and support experience with Microsoft 365 in a managed‑service or multi‑tenant environment.
• Proven ability to manage competing priorities, communicate technical decisions to non‑technical audiences and work collaboratively with IT and business stakeholders.
• Experience delivering projects and adhering to ITIL‑style change and governance processes.

Required skills

• Microsoft 365 suite (Exchange Online, SharePoint Online, Teams, OneDrive)
• Microsoft Entra ID (Azure AD), Conditional Access, MFA, Privileged Identity Management
• Intune, Windows Autopilot, device compliance and configuration policies
• Microsoft Defender, Microsoft Secure Score, Microsoft Purview (DLP, retention, sensitivity labels)
• PowerShell scripting, Microsoft Graph API, Power Platform automation
• Basic knowledge of Azure AD Connect, hybrid identity and Azure infrastructure