Job Title

Alfa AI is a recruiting company advertising this vacancy on behalf of a customer.

Overview

Want to be the person who turns a cybersecurity strategy into a secure, automated Microsoft estate? This is a deep technical, hands-on role based in London on a hybrid basis. You will be the technical lead for our tenant's foundation, taking the "Why" from our Head of Cybersecurity and turning it into a concrete technical specification (the "What") and a deployment path (the "How").

We are moving away from ad-hoc, case-by-case management toward scalable, policy-driven operations built on modern Microsoft cloud administration principles. We need a proactive problem solver who puts long-term system integrity ahead of short-term fixes.

What You Will Do

• Identity and Access (Entra ID): optimize structure with Administrative Units and scoped administration, run advanced Conditional Access, implement PIM for just-in-time access, govern service principals, managed identities and AI agent identities such as Copilot agents, and automate joiner/mover/leaver processes.
• Endpoint Security (Intune): lead MDM and MAM across Windows, macOS, iOS and Android, maintain compliance policies, set up Windows Autopilot, macOS Automated Device Enrollment and Apple Business Manager, and harden endpoints with BitLocker, FileVault, Firewall and ASR rules.
• Platform Hardening: maintain security baselines across Exchange Online, SharePoint, OneDrive, Teams, Viva and Copilot, secure mail flow and OME, audit SPF, DKIM and DMARC, tune anti-phishing, malware and DLP, and prevent configuration drift.
• Azure Tenant Governance: manage data residency (including AI/Copilot), RBAC, management groups and subscription governance, automating with Terraform and PowerShell so every change is version-controlled and documented.
• SharePoint and Collaboration: deliver site templates and lifecycle, and control external sharing and guest access.
• Compliance and Documentation: keep configurations audit-ready for GDPR, PCI and internal reviews, and maintain technical documentation for M365 and Intune.
• Reporting: define high-signal KPIs and build automated dashboards showing the health and security posture of the estate.