EUC Engineer Team Lead (Azure/M365)

• Manage identity and access lifecycle through Microsoft Entra, including Conditional Access, PIM, RBAC, and governance policies.
• Work withthecyber security team to configure and monitor cloud security tools, including:
• Microsoft Defender (Endpoint, Identity, Office 365, Cloud Apps)
• Microsoft Purview for DLP, data classification, auditing, and compliance
• Microsoft Secure Score & Compliance Manager
• Build and deploy policies to enforce controls via Intune, Autopilot, and compliance baselines.
• Apply Azure governance frameworks including Management Groups, Blueprints, Policies, and cost management strategies.
• Administration and hardening of Windows Servers and Linux systems
• Automate infrastructure and compliance workflows using advanced PowerShell scripting.
• Take part in incident response efforts for cloud-related security incidents, working closely with the Lead Platform Engineer Team Lead and Head of Infrastructure.
• Support internal and external audit preparation related to cloud infrastructure and M365.
• Collaborate with data, security, and development teams to improve platform maturity.

• Microsoft Platform Proficiency: In-depth knowledge of Microsoft Azure (networking, compute, storage, security), Microsoft 365 (Exchange Online, Teams, SharePoint, OneDrive), and Microsoft Entra ID (access reviews, lifecycle workflows, PIM).
• Design, implement, and continuously improve Microsoft Azure infrastructure solutions with a strong focus on security,scalability, reliability, and performance, including:
• Azure Virtual Machines (VMs)
• App Services
• Container Apps
• Azure Kubernetes Service (AKS)
• Azure SQL servers
• Image management, scaling strategies, and workload optimisation.
• Configure, maintain, and support Azure networking components, ensuring secure and resilient connectivity across cloud and hybrid environments:
• Virtual Networks (VNets), VNet Peering, and Network Security Groups (NSGs)
• Azure Firewall deployment, rule management, and traffic inspection
• Application Gateway configuration, including WAF policies
• Azure Front Door for global load balancing and application acceleration
• Azure Virtual WAN architecture and routing
• VPN and hybrid connectivity (Site-to-Site, Point-to-Site), including troubleshooting and failover testing
• System and Device Management: Skilled in managing Windows Server, Active Directory, DNS, DHCP, Linux Servers, and configuration management using Microsoft Defender & Intune (configuration baselines, compliance profiles).
• Scripting, Automation & DevOps: Expert in scripting and automation with PowerShell.
• Working knowledge of CI/CD tools, infrastructure pipelines, and automation workflows (desirable).
• Security, Monitoring & Governance: Proficient in cloud-nativ security and RBAC, familiar with monitoring tools including Azure Monitor, and experienced in supporting ISO27001 certification processes or surveillance audits (desirable).
• Communication & Collaboration: Strong communication skills, including the ability to translate technical risks into business impacts, and experience collaborating across technical and business teams.
• Additional Desirable Experience: Familiarity with the Microsoft Power Platform (Power Automate, Power Apps, Dataverse), remote management and maintenance tools, and ITSM platforms such as ServiceDesk Plus.

Qualifications:

• Degree in Computer Science, Information Technology, or related field
• Microsoft Certified: Azure Administrator Associate (required)
• Microsoft Certified: Azure Solutions Architect or equivalent (desirable)
• Microsoft 365 or Power Platform certifications (desirable)
• Certification in Terraform, Kubernetes, or related technologies (desirable)

• Lead the EUC Team and manage Azure infrastructure
• Work with a leading organization within the financial services industry
• Competitive Compensation Package