Senior M365 & Azure Platform Administrator

We are seeking a highly experienced Senior Microsoft 365 & Azure Platform Administrator to take ownership of its Microsoft cloud, identity, security, endpoint management and digital workplace environment. This is a senior technical role responsible for the administration, security, governance, optimisation and continuous improvement of the Microsoft technology estate.

The successful candidate will operate across Microsoft 365, Microsoft Entra ID, Azure, Intune, Defender, Purview, Exchange Online, Teams and related cloud services. The role requires deep hands-on expertise, strong troubleshooting capability, automation skills and the ability to manage a complex enterprise environment while ensuring security, resilience, compliance and an effective end-user experience.

Key Responsibilities:

Microsoft 365 Tenant Administration

• Administer and maintain the Microsoft 365 tenant, including domains, subscriptions, licensing, service settings, admin roles and groups.
• Monitor service health, usage, adoption and platform performance.
• Manage tenant configuration, governance, backup considerations and operational standards.
• Drive continuous optimisation of Microsoft 365 services and licensing.

Identity & Access Management

• Administer Microsoft Entra ID, including users, groups, RBAC, SSO, MFA, Conditional Access and Identity Protection.
• Manage Privileged Identity Management (PIM), access reviews, enterprise applications and B2B/guest access.
• Support hybrid identity environments, directory synchronisation and authentication services.
• Ensure secure identity lifecycle management, including provisioning and deprovisioning.

Microsoft 365 Security

• Administer and monitor Microsoft Defender XDR and related security products.
• Manage Defender for Office 365, Defender for Endpoint, Defender for Identity and Defender for Cloud Apps.
• Configure threat policies, security controls and Microsoft Secure Score improvements.
• Investigate security incidents, alerts and suspicious activity in collaboration with security teams.
• Support the organisation’s Microsoft cloud security posture and operational resilience.

Endpoint & Device Management

• Manage Microsoft Intune across Windows and mobile environments.
• Configure device enrolment, compliance policies, configuration profiles and application deployment.
• Administer Windows Autopilot, endpoint security policies, BitLocker and update rings.
• Manage mobile device management and endpoint lifecycle processes.
• Troubleshoot device compliance, policy deployment and endpoint configuration issues.

Exchange Online

• Administer mailboxes, shared mailboxes, distribution lists, permissions and delegation.
• Manage mail flow, transport rules, connectors and Exchange Online security.
• Configure anti-spam, anti-phishing and email protection policies.
• Support retention, compliance, mail flow troubleshooting and message tracing.

Microsoft Teams, SharePoint & OneDrive

• Administer Teams policies, meetings, calling, external access, guest access and lifecycle governance.
• Manage Teams applications, integrations and collaboration security.
• Administer SharePoint Online sites, permissions, sharing, storage and information architecture.
• Manage OneDrive configuration, synchronisation, external sharing and governance.
• Ensure collaboration platforms are secure, compliant and effectively governed.

Windows 365 / Cloud PC

• Administer Windows 365 Cloud PCs, provisioning policies, images and Azure network connections.
• Manage Cloud PC integration with Intune, RBAC, security and monitoring.
• Troubleshoot provisioning, connectivity, performance and user access issues.
• Support the ongoing optimisation of the organisation’s Cloud PC environment.

Azure Administration

• Manage Azure subscriptions, resource groups, RBAC and core Azure services.
• Administer VNets, DNS, VPNs, storage, virtual machines and hybrid connectivity.
• Manage Azure Monitor, Azure Policy, Key Vault and backup/recovery services.
• Support Azure infrastructure security, availability, monitoring and operational performance.

Microsoft Purview & Compliance

• Configure and administer Microsoft Purview capabilities, including:
• Data classification
• Sensitivity labels
• Data Loss Prevention (DLP)
• Retention policies
• Records management
• eDiscovery
• Audit
• Insider Risk Management
• Support information protection, regulatory compliance and data governance initiatives.

Power Platform & Microsoft 365 Apps

• Administer Power Apps, Power Automate and Power BI tenant settings.
• Manage environments, connectors, permissions, DLP policies and governance controls.
• Support enterprise deployment and configuration of Microsoft 365 Apps, including Outlook, Word, Excel, PowerPoint, OneDrive, Teams and Edge.
• Manage Office update channels and enterprise application deployment standards.

Copilot & AI Administration

• Support Microsoft 365 Copilot readiness, licensing and deployment.
• Assess permissions, data access, security and governance requirements for AI adoption.
• Ensure appropriate controls are in place before enabling AI capabilities across the organisation.
• Support Copilot configuration, monitoring and user adoption.

Automation, Scripting & Operational Excellence

• Develop PowerShell automation for administration, reporting and bulk operations.
• Use Microsoft Graph API and Azure CLI to automate repetitive administrative tasks.
• Automate user provisioning, deprovisioning, reporting and compliance activities.
• Improve operational efficiency through scripting, standardisation and automation.

Infrastructure, Monitoring & Troubleshooting

• Apply strong knowledge of TCP/IP, DNS, DHCP, VPNs, proxies, firewalls and authentication protocols.
• Support Active Directory, Entra Connect, synchronisation and hybrid infrastructure.
• Troubleshoot certificates, authentication and connectivity issues.
• Use Service Health, audit logs, sign-in logs, Defender incidents, Intune diagnostics, Exchange tracing and Azure Monitor.
• Conduct root-cause analysis and implement preventative solutions.

Requirements:

• Significant hands-on experience administering Microsoft 365 and Azure in an enterprise environment.
• Deep expertise in Microsoft Entra ID, Intune, Microsoft 365 security and cloud administration.
• Proven experience managing complex identity, endpoint, security and collaboration environments.
• Strong PowerShell, Microsoft Graph API and automation capabilities.
• Experience with hybrid Active Directory / Entra ID environments.
• Strong understanding of cloud security, governance, compliance and data protection.
• Excellent troubleshooting, incident management and root-cause analysis skills.
• Ability to operate independently, manage competing priorities and take ownership of the Microsoft cloud platform.
• Strong communication and stakeholder management skills.
• Bachelor’s degree in Computer Science, Information Technology, Engineering or a related discipline.
• Relevant Microsoft certifications are highly important and will be a key differentiator in candidate selection.