The posting
Responsibilities
Microsoft 365 Administration & Operations
- Administer and optimise Microsoft 365 across the environment(s), including Exchange Online, SharePoint Online, OneDrive and Microsoft Teams.
- Maintain the health, performance and configuration of environments, monitoring service health and acting on issues proactively.
- Maintain accurate configuration baselines, documentation and runbooks.
- Manage change in line with governance and ITIL processes, ensuring changes are well-tested and clearly communicated.
- Monitor licensing, capacity and adoption, recommending cost and end-user experience improvements where appropriate.
Identity & Access Management
- Manage identity and access using Microsoft Entra ID, including Conditional Access, single sign-on, MFA and privileged access controls.
- Implement and maintain identity governance aligned to the organisation's security posture and regulatory obligations.
- Troubleshoot and resolve complex authentication, access and directory synchronisation issues.
- Ensure identity configurations are consistent, well-documented and aligned to platform standards.
Endpoint & Device Management
- Engineer device management and provisioning with Microsoft Intune and Windows Autopilot at scale.
- Build and maintain compliance, configuration and application deployment policies across managed devices.
- Support and improve the end-user device experience, reducing friction and manual effort wherever possible.
- Resolve complex endpoint issues escalated from the service desk across Windows and, where applicable, macOS and mobile.
Security & Compliance
- Implement and monitor security controls using Microsoft Defender, Conditional Access and Microsoft Secure Score.
- Configure and maintain compliance capability in Microsoft Purview, including data loss prevention, retention and sensitivity labels.
- Align modern workplace configurations to relevant regulatory obligations (e.g. APRA CPS 234/230, ISO 27001, Essential Eight — adjust to your industry context).
- Identify and remediate security and configuration risks.
- Contribute to incident response and post-incident improvement for modern workplace security events.
Project Delivery & Stakeholder Engagement
- Deliver Microsoft 365 projects — migrations, service rollouts, tenant configuration and modern workplace transformations.
- Scope and plan work with stakeholders, communicating clearly and managing expectations throughout delivery.
- Act as a trusted technical advisor, translating business needs into practical, well-governed modern workplace solutions.
- Manage competing priorities and context-switch effectively across environments/projects.
- Document and hand over delivered work so it can be supported consistently by the wider team.
- Build strong working relationships with IT and business stakeholders.
Automation & Continuous Improvement
- Build automation and reduce manual effort using PowerShell, Microsoft Graph and the Power Platform.
- Identify opportunities to standardise and streamline modern workplace delivery.
- Contribute to the continuous improvement of standards, tooling and ways of working.
Technical Escalation & Quality
- Act as an escalation point for complex modern workplace incidents.
- Maintain a high standard of quality in the configurations and solutions delivered and operated.
- Share knowledge and mentor service desk and support colleagues to lift overall team capability.
Role Boundaries Accountable for: The quality, security and consistency of the Microsoft 365 environment(s) engineered and supported — spanning identity, device, collaboration, security and compliance configuration — and the resolution of complex escalated issues. Not accountable for: Direct people management, ownership of commercial relationships/contracts, SLA ownership, or the day-to-day running of the service desk (these sit with the relevant leads and managers).
Success Measures
- Microsoft 365 environments are secure, well-configured and consistently maintained to organisational standards.
- Projects are delivered to scope, on time and with minimal disruption to operations.
- Complex escalations are resolved efficiently, with a reduction in recurring issues over time.
- Identity, device and security configurations are consistent and well-documented.
- Stakeholders regard the engineer as a trusted, responsive technical partner.
- Manual effort is reduced through effective automation and standardisation.
- Modern workplace configurations meet relevant regulatory and security obligations.
- Service desk and support colleagues are supported and up-skilled through knowledge sharing.
- Measurable improvement in the quality, security and reliability of the modern workplace environment over time.
Skills and Experience
- 3 or more years engineering and supporting Microsoft 365, ideally in a managed service or multi-tenant environment.
- Strong hands-on experience with Microsoft Entra ID, Intune, Exchange Online, Teams and SharePoint Online.
- Working knowledge of Microsoft 365 security and compliance tooling, including Defender, Conditional Access and Purview.
- Proficiency in PowerShell scripting and familiarity with Microsoft Graph for automation and reporting.
- Experience with Windows Autopilot and modern device provisioning at scale.
- Ability to manage competing priorities and context-switch across multiple environments/projects.
- Strong client-facing communication skills, with the ability to document and explain technical decisions to varied audiences.
- Prior experience in an MSP, consultancy or multi-tenant environment (highly regarded).
- Exposure to Azure infrastructure, hybrid identity (Microsoft Entra Connect) and the Power Platform.
- Familiarity with regulated-industry frameworks such as ISO 27001, Essential Eight, or sector-specific standards, and relevant Microsoft certifications (highly regarded).
