• Provide Level 3 engineering and troubleshooting across Microsoft Entra ID, Microsoft 365, Intune, Azure and integrated cloud services.
• Lead root cause analysis for complex and recurring faults, implement permanent corrective actions, and maintain engineering standards, design documentation and operational procedures.
• Act as the senior technical escalation point for identity, Microsoft 365, Azure, cross-tenant incidents, problems and high-risk changes.
• Provide technical guidance, peer review and mentoring to Level 1 and Level 2 support teams.

Cloud, Identity & Multi-Tenant Engineering

• Engineer, administer and continuously improve Microsoft Entra ID across multiple tenancies, including users, groups, roles, enterprise applications, app registrations, service principals and managed identities.
• Own Conditional Access, authentication methods, Identity Protection, Privileged Identity Management, emergency access and identity lifecycle controls.
• Implement and support Entra B2B collaboration, cross-tenant access settings, cross-tenant synchronisation and multitenant organisation capabilities where appropriate.
• Administer Microsoft 365 services including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business and Microsoft 365 Groups.
• Engineer secure external collaboration, guest access, mail flow, domain, retention, coexistence and tenant-to-tenant migration solutions.

Azure, Intune & Automation

• Engineer and operate Azure subscriptions, management groups, resource groups, RBAC, Azure Policy, networking, monitoring and shared platform services.
• Administer Microsoft Intune, Windows Autopilot, device compliance, configuration profiles, application deployment and Conditional Access integration.
• Support Azure Virtual Desktop, virtual networks, private endpoints, DNS, storage accounts, Key Vault, App Service, Azure Monitor and Log Analytics where used.
• Use PowerShell, Microsoft Graph PowerShell, Microsoft Graph API, Azure CLI and REST APIs to automate administration, reporting and configuration.

Cyber Security

• Support ISO 27001 control operation and Microsoft cloud security compliance requirements.
• Apply Zero Trust, least privilege, Microsoft security baselines and CIS guidance across identity, Microsoft 365, endpoints and Azure.
• Own technical remediation of identity and cloud security findings, including assessment, remediation planning, testing, implementation and evidence capture.
• Provide analysis, containment, evidence capture, eradication and recovery support during incidents involving identities, applications, data or Azure resources.

Project Delivery

• Lead technical delivery for tenant integrations, Microsoft 365 migrations, identity consolidation, Azure deployments, endpoint-management uplift and security improvement initiatives.
• Produce solution designs, implementation plans, test plans, change records, rollback plans, migration runbooks and operational handover documentation.
• Plan and execute platform lifecycle activities including tenant changes, authentication uplift, application integration, licensing changes and technology refreshes.
• Provide hands-on engineering support for mergers, acquisitions and business integrations, including identity, tenant, data, application and service transition activities.

Operational Excellence

• Operate within ITIL-aligned incident, problem, change and configuration management practices while keeping asset, tenant and technical records accurate.
• Automate repeatable engineering and operational tasks using PowerShell, Microsoft Graph, APIs and infrastructure-as-code tooling.
• Define and track service health, Secure Score, privileged access, policy compliance, availability and operational improvements.
• Take a lead engineering role in major incidents and post-incident reviews, ensuring corrective actions are technically sound and completed.

Technical Collaboration & Vendors

• Work with Microsoft and cloud vendors to resolve complex faults, review product roadmaps and manage technical escalations.
• Partner with security, network, service desk, applications and business teams to deliver stable end-to-end services.
• Translate business and operational requirements into secure, supportable cloud and identity designs.
• Provide clear technical recommendations, options, dependencies and risk assessments to IT leadership.
• Demonstrated experience designing and implementing secure Windows Server configurations and hardening baselines, with working knowledge of CIS benchmarks and Microsoft security baselines.
• What You Will Need
• Extensive hands-on experience in senior Microsoft cloud, identity or platform engineering, including substantial Level 3 support and project delivery responsibility.
• Advanced Microsoft Entra ID experience across Conditional Access, authentication, privileged access, enterprise applications, app registrations, B2B collaboration and tenant troubleshooting.
• Strong Microsoft 365 engineering experience across Exchange Online, Teams, SharePoint Online and OneDrive for Business.
• Demonstrated experience working across multiple Microsoft 365 and Azure tenancies, including cross-tenant collaboration, coexistence, migration or delegated administration.
• Strong Microsoft Intune experience across enrolment, compliance, configuration, application deployment, Windows Autopilot and Conditional Access integration.
• Practical Azure engineering experience across governance, RBAC, networking, monitoring, Key Vault, storage and common IaaS or PaaS services.
• Strong PowerShell and Microsoft Graph capability, including reusable automation, secure authentication, error handling, logging and controlled deployment.
• Working knowledge of SAML, OAuth 2.0, OpenID Connect and SCIM, with advanced diagnostic skills using Entra, Microsoft 365, Azure and endpoint logs.

Desirable Skills

• Microsoft certifications such as Identity and Access Administrator Associate, Microsoft 365 Administrator Expert or Azure Administrator Associate.
• Experience with Microsoft Defender XDR, Microsoft Sentinel, Defender for Cloud Apps, Microsoft Purview, Azure Arc or Azure Update Manager.
• Experience with tenant-to-tenant migrations, CSP environments, Granular Delegated Admin Privileges, Azure Virtual Desktop, Bicep or Terraform.
• Working knowledge of Windows Server, Active Directory, DNS and PKI in hybrid environments; ISO 27001, ITIL or managed-service-provider experience.