IT System Administrator

Praxy; Dubai; On-site; AED 90,000 - 130,000; Full time

Job summary

Easygenerator is seeking a dedicated Microsoft 365 Security Administrator to support our global, AI-driven EdTech platform. You will manage and secure tenants across regions, implement Zero Trust, and lead identity governance with Entra ID, CA, and PIM.

You will also orchestrate Intune, Windows 365, Defender suites, and incident response while driving automation with PowerShell and maintaining ISO 27001/SOC 2/GDPR alignment across a multi-region organization.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• 2+ years of enterprise Microsoft 365 administration experience.
• 1+ year hands-on experience managing Microsoft E5 security capabilities.
• Strong expertise in Microsoft Entra ID, Conditional Access, PIM, and identity governance.
• Experience with Microsoft Intune, Windows 365, and endpoint security management.
• Hands-on experience with Microsoft Defender suite and security incident response.
• Solid understanding of Zero Trust architecture and identity-first security models.
• Experience operating within a multi-region or global organization.
• Strong PowerShell scripting and automation skills.
• Knowledge of ISO 27001, SOC 2, and GDPR compliance.
• Analytical, detail-oriented, and proactive with a security-first mindset.
• Ability to document processes clearly and support audit requirements.

Responsibilities

• Manage and administer global Microsoft 365 tenant(s) across multiple regions.
• Architect and maintain secure configurations across Exchange Online, SharePoint Online, OneDrive, and Teams.
• Lead identity strategy using Microsoft Entra ID, CA, PIM, RBAC, and Privileged Identity Management.
• Enforce Zero Trust principles, least-privilege access, and Just-in-Time access models.
• Administer Microsoft Intune and Windows 365 environments, including device compliance policies and Autopilot provisioning.
• Lead global laptop provisioning for new hires, ensuring secure configuration and timely delivery.
• Own and manage Joiner-Mover-Leaver lifecycle globally across all systems and devices.
• Maintain accurate IT asset inventory including hardware and software.
• Monitor global device health, compliance posture, and endpoint performance.
• Own and manage Microsoft Defender security suite.
• Configure Microsoft Purview (DLP, retention policies, Insider Risk, eDiscovery, Labels).
• Monitor and respond to identity and endpoint security incidents with SOC.
• Support SIEM integrations (Microsoft Sentinel or third-party tools).
• Conduct periodic global access reviews and entitlement audits.
• Develop PowerShell automation to streamline provisioning and deprovisioning.
• Maintain audit-ready documentation for ISO 27001, SOC 2, GDPR.

Skills

Entra ID

Conditional Access

PIM

Identity governance

Intune

Windows 365

Endpoint security

Microsoft Defender

Incident response

PowerShell scripting

Automation

Zero Trust

Global operations

ISO 27001

SOC 2

GDPR

Analytical thinking

Education

Bachelor’s degree in Information Technology, Computer Science, or a related field

Tools

Defender suite

Job description

Easygenerator is a fast-growing EdTech scale-up transforming how teams share knowledge. We build award-winning e-learning software used by global enterprises, and we’re just getting started. We’re an AI-first company, using cutting-edge tools both in our products and internal workflows. You’ll gain hands-on AI experience and develop a future-proof skillset while contributing to a fast-moving, high-impact product.

WHAT YOU’LL DO

• Manage and administer global Microsoft 365 tenant(s) (E3/E5) across multiple regions.
• Architect and maintain secure configurations across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.
• Lead enterprise identity strategy using Microsoft Entra ID, including Conditional Access, Identity Protection, RBAC, and Privileged Identity Management (PIM).
• Enforce Zero Trust principles, least-privilege access, and Just-in-Time access models.
• Administer Microsoft Intune and Windows 365 environments, including device compliance policies, security baselines, and Autopilot provisioning.
• Lead global laptop provisioning for new hires, ensuring secure configuration and timely delivery.
• Own and manage the full Joiner-Mover-Leaver lifecycle globally, including onboarding and off-boarding across all systems and devices.
• Maintain an accurate and up-to-date IT asset inventory, including hardware and software tracking.
• Monitor global device health, compliance posture, and endpoint performance.
• Own and manage Microsoft Defender security suite (Endpoint, Office 365, Identity, Cloud Apps).
• Configure Microsoft Purview (DLP, retention policies, Insider Risk, eDiscovery, Sensitivity Labels).
• Monitor and respond to identity and endpoint security incidents in coordination with SOC teams.
• Support SIEM integrations (Microsoft Sentinel or third-party tools).
• Conduct periodic global access reviews, entitlement audits, and compliance checks.
• Develop PowerShell automation to streamline provisioning, deprovisioning, and administrative tasks.
• Maintain audit-ready documentation and support ISO 27001, SOC 2, and GDPR compliance efforts.
• Continuously improve operational efficiency, governance frameworks, and security posture.

WHAT YOU'LL BRING

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• 2+ years of enterprise Microsoft 365 administration experience.
• 1+ year hands-on experience managing Microsoft E5 security capabilities.
• Strong expertise in Microsoft Entra ID, Conditional Access, PIM, and identity governance.
• Experience with Microsoft Intune, Windows 365, and endpoint security management.
• Hands-on experience with Microsoft Defender suite and security incident response.
• Solid understanding of Zero Trust architecture and identity-first security models.
• Experience operating within a multi-region or global organization.
• Strong PowerShell scripting and automation skills.
• Knowledge of compliance frameworks such as ISO 27001, SOC 2, and GDPR.
• Analytical, detail-oriented, and proactive with a strong security-first mindset.
• Ability to document processes clearly and support audit requirements.