Portfolio BI
Senior Azure & Microsoft 365 Platform Engineer - London - Hybrid
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
PBI's Flagship Products and Services
PBI's flagship products and services, PBI Axiom, PBI Vector, and PBI Stratus, enable alternative asset managers to address their data challenges in analytics, workflow, governance, and security.
Senior Azure & Microsoft 365 Platform Engineer
We are looking for a Senior Azure & Microsoft 365 Platform Engineer.
The successful candidate will act as the technical owner of the Azure platform, working closely with external development and engineering partners. They will ensure that deployed systems align with the intended architecture, support secure and stable operations, and improve ownership across Identity and Access Management, Disaster Recovery, and Monitoring and Observability.
Main Responsibilities
- Oversee Azure subscriptions, landing zones, networking, compute, databases, and Microsoft 365 tenant configuration, including dependencies between current and legacy platforms.
- Validate deployed infrastructure against documented architecture and security requirements, including ingress, DNS, certificates, and platform access controls.
- Review Entra ID, Conditional Access, authentication flows, RBAC, PIM, emergency access, service identities, and guest/B2B and client-facing identities. Ensure least-privilege access, effective joiner/mover/leaver processes, recurring access reviews, and removal of orphaned identities.
- Reconcile permissions and access dependencies across Microsoft 365, Azure, Azure DevOps, and applications; oversee Key Vault, secrets, certificates, and rotation.
- Assess and improve disaster recovery, including recovery units, shared dependencies, RTOs/RPOs, backups, database replication, point-in-time restoration, and multi-region design. Run restore and failover exercises covering invocation, validation, and return to primary, maintaining runbooks, responsibilities, and test evidence.
- Improve service-health monitoring using Azure Monitor, Log Analytics, KQL, and Application Insights. Map services to monitoring signals, tune alerts for actionability, routing, and ownership, and distinguish customer-facing status from operational diagnostics.
- Troubleshoot production issues across infrastructure, applications, APIs, and integrations, maintaining practical runbooks and technical documentation.
- Maintain Terraform configurations, modules, and state; detect configuration drift, support Azure DevOps pipelines and permissions, and develop PowerShell scripts and automation.
- Apply Azure Policy and landing-zone guardrails, maintain tagging, naming, and subscription standards, and improve cost management, including telemetry retention and access.
- Act as the internal technical counterpart to external providers, constructively challenge proposed changes, and communicate gaps, risks, and recommendations clearly to technical and non-technical stakeholders.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements
Essential
- Strong hands-on experience with both Microsoft Azure and Microsoft 365, including Azure platform engineering, Microsoft 365 tenant administration, and security configuration, Active Directory servers, and email security/spam filtering (Mimecast).
- Experience spanning cloud architecture, engineering, and operations in business-critical production environments.
- Strong knowledge of Entra ID, Conditional Access, Azure RBAC, PIM, Key Vault, and identity and access governance across connected platforms.
- Practical knowledge of Azure networking, ingress, compute, and databases, including backup, replication, and restoration.
- Experience assessing and validating disaster recovery, including dependency mapping, RTOs/RPOs, recovery procedures, restore testing, and regional failover.
- Experience with Azure Monitor, Log Analytics, KQL, and Application Insights, including service-health monitoring, alert tuning, and troubleshooting distributed, API-driven services.
- Practical Terraform experience covering modules, state management, and drift detection, alongside Azure DevOps CI/CD, access controls, PowerShell scripting, and Azure Policy.
- Strong technical documentation and runbook-development skills, with the ability to distinguish verified findings from assumptions and recommendations.
- Ability to work independently, exercise sound technical judgement, collaborate with and challenge external providers, and communicate clearly with technical and non-technical stakeholders.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable
- Familiarity with Bicep or ARM templates and cloud cost optimisation/FinOps.
- Experience supporting security audits.
- Familiarity with AI tools and their practical application in Microsoft 365 or IT operations.
- Experience working with multiple external technology suppliers.
Benefits
You would be part of an international team of people, working on the latest technology and at the forefront of automation and innovation. We offer:
- Flexible working - hybrid mode.
- Working on exciting cutting-edge technology projects.
- Competitive salary.
- Medical insurance package.
- Generous paid time off.
- Professional development and training.
- Professional certification exams sponsored by the company.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location