Microsoft 365 / Identity Engineer

Overview

This role is for an experienced Microsoft 365 and Identity Engineer joining an established team responsible for the organisation's Microsoft 365 tenant and identity platform.

The successful candidate will work alongside existing engineers to manage and secure the Microsoft Entra ID environment, administer Microsoft 365 services, and contribute to security posture improvements across collaboration, messaging, and identity workloads.

Breadth of experience across the entire Microsoft 365 platform is the priority for this position.

Key Responsibilities

Microsoft 365 Administration

• Manage and maintain the Microsoft 365 tenant, including:

  • Exchange Online
  • SharePoint Online
  • Microsoft Teams
  • OneDrive for Business
  • Microsoft 365 Apps

• Manage tenant-wide configuration alongside the team, including:

  • Organisational settings
  • Domain management
  • DNS records
  • Service-level feature toggles

• Monitor service health dashboards, manage incidents, and coordinate with Microsoft support for platform issues.

• Configure and manage Microsoft 365 compliance capabilities, including:

  • Retention policies
  • eDiscovery
  • Sensitivity labels
  • Data classification

• Manage SharePoint Online site collections, hub sites, permissions, and storage quotas.

• Administer Microsoft Teams policies, including:

  • Messaging
  • Meetings
  • Calling
  • App permissions
  • Guest access controls

• Manage Exchange Online:

  • Mail flow rules
  • Transport rules
  • Accepted domains
  • Connectors
  • Shared and resource mailboxes

• Contribute to shared documentation, including:

  • Tenant configuration
  • Operational runbooks
  • Change records

Identity and Access Management (Microsoft Entra ID)

• Manage and contribute to identity lifecycle processes, including:

  • Provisioning
  • Joiner, mover, and leaver workflows
  • Access reviews

• Contribute to the Conditional Access policy framework, including:

  • Design
  • Testing
  • Rollout
  • Ongoing refinement

• Configure and manage:

  • Multi-Factor Authentication (MFA)
  • Registration campaigns
  • Authentication strengths

• Administer Privileged Identity Management (PIM) for just-in-time role activation across Entra ID and Azure resources.

• Manage:

  • Application registrations
  • Enterprise applications
  • Consent frameworks
  • Service principals

• Implement and monitor Entra ID Protection, including:

  • Sign-in risk policies
  • User risk policies
  • Risk-based Conditional Access

• Administer hybrid identity environments, including:

  • Microsoft Entra Connect synchronisation
  • Pass-through authentication
  • Seamless Single Sign-On (SSO)

• Manage role-based access control (RBAC) assignments across Azure and Microsoft 365 workloads.

• Configure and manage:

  • Entitlement Management
  • Access Packages
  • Connected Organisations for external collaboration

• Monitor and report on identity posture using:

  • Entra ID dashboards
  • Sign-in logs
  • Audit logs

Security and Compliance

• Configure and manage Microsoft Defender for Office 365, including:

  • Anti-phishing policies
  • Anti-spam policies
  • Safe Attachments
  • Safe Links

• Implement and maintain Data Loss Prevention (DLP) policies across:

  • Exchange Online
  • SharePoint Online
  • Microsoft Teams
  • OneDrive for Business

• Monitor and respond to security alerts through:

  • Microsoft 365 Defender Portal
  • Microsoft Entra ID Protection

• Support audit and compliance requirements through:

  • Log management
  • Reporting
  • Access reviews
  • Regulatory evidence collection

• Manage Microsoft Secure Score improvement initiatives and track security posture over time.

• Apply Zero Trust principles across:

  • Identity
  • Devices
  • Data workloads within the Microsoft 365 ecosystem

Automation and Tooling

• Develop and maintain PowerShell scripts within the team's shared automation library to support:

  • Bulk administration
  • Reporting
  • Operational tasks across Microsoft 365 and Entra ID

• Use Microsoft Graph API and Microsoft Graph PowerShell SDK for advanced automation and integration tasks.

• Contribute to operational dashboards, automated alerting, and monitoring solutions.

• Identify opportunities to reduce manual administration through automation and process improvements.

 

Required Skills and Experience
7+ years of experience into Microsoft 365

• Strong administration experience across:
  • Exchange Online
  • SharePoint Online
  • Microsoft Teams
  • OneDrive for Business
  • Microsoft 365 Apps

Identity & Access Management

• Extensive experience with:
  • Microsoft Entra ID (Azure Active Directory)
  • Conditional Access
  • MFA
  • Identity Governance
  • Privileged Identity Management (PIM)

Security & Compliance

• Experience with:
  • Microsoft Defender for Office 365
  • Microsoft Purview
  • Data Loss Prevention (DLP)
  • Security and Compliance frameworks

Automation

• Strong PowerShell scripting skills.
• Experience using:
  • Microsoft Graph API
  • Graph PowerShell SDK
• Ability to automate operational and administrative tasks.

Technical Knowledge

• Understanding of:
  • Hybrid identity architectures
  • Entra Connect
  • RBAC
  • Access Governance
  • Zero Trust security principles

Soft Skills

• Strong troubleshooting and analytical skills.
• Excellent documentation and communication skills.
• Ability to work collaboratively within a technical operations team.
• Strong attention to detail and commitment to security best practices.

Why Version 1? 

 At Version 1, we believe in providing our employees with a comprehensive benefits package that prioritises their wellbeing, professional growth, and financial stability. 

• Share in our success with our Quarterly Performance-Related Profit Share Scheme, where employees collectively benefit from a share of our company's profits 
• Strong Career Progression & mentorship coaching through our Strength in Balance & Leadership schemes with a dedicated quarterly Pathways Career Development programme 
• Flexible/remote working, Version 1 is tremendously understanding of life events and people’s individual circumstances and offer flexibility to help achieve a healthy work life balance 
• Financial Wellbeing initiatives including; Pension, Private Healthcare Cover, Life Assurance, Financial advice and an Employee Discount scheme 
• Employee Wellbeing schemes including Gym Discounts, Bike to Work, Fitness classes, Mindfulness Workshops, Employee Assistance Programme and much more. Generous holiday allowance, enhanced maternity/paternity leave, marriage/civil partnership leave and special leave policies 
• Educational assistance, incentivised certifications, and accreditations, including AWS, Microsoft, Oracle, and Red Hat 
• Reward schemes including Version 1’s Annual Excellence Awards & ‘Call-Out’ platform. 
• Environment, Social and Community First initiatives allow you to get involved in local fundraising and development opportunities as part of fostering our diversity, inclusion and belonging schemes. 

And many more exciting benefits… drop us a note to find out more.

Version 1 is an equal opportunities employer. 

We are committed to building a diverse, inclusive and respectful workplace where everyone feels valued and able to thrive. We welcome applications from people of all backgrounds, identities and lived experiences, and we value the different perspectives people bring including those shaped by disability and neurodiversity. 

We want every candidate to have a positive and accessible recruitment experience. If you need reasonable adjustments at any stage of the process, please contact your recruiter at Version 1. We will consider all requests carefully, respectfully and confidentially. 

Video links: https://www.youtube.com/watch?v=F_d3ELTH5zo