Senior M365 Engineer

Unify Group; Abu Dhabi; On-site; AED 360,000 - 720,000; Full time

Job summary

Unify Group in the United Arab Emirates seeks an experienced Microsoft 365/Exchange Infrastructure expert to manage Exchange Online, security policies, and hybrid configurations for 1,000+ users. You will lead migrations, enforce Defender for Office 365, and drive identity governance across Entra ID and Purview.

The role emphasizes hands-on PowerShell, Microsoft Graph, and senior stakeholder collaboration to deliver secure, compliant email and collaboration services.

Qualifications

• 7+ years in Microsoft infrastructure, including 5+ years administering Microsoft 365 at enterprise scale (1,000+ users).
• Proven experience leading Exchange and tenant-to-tenant migrations.
• Deep knowledge of Exchange Online, Teams, SharePoint Online and OneDrive.
• Strong Entra ID, Conditional Access and hybrid identity experience.
• Hands-on experience with Purview compliance and Defender for Office 365.
• Strong PowerShell skills, including Microsoft Graph.
• Experience leading projects, mentoring engineers and working with senior stakeholders.
• Proven track record troubleshooting complex email delivery issues using message trace, headers, NDR codes and DNS mail records.
• Hands‑on experience designing and implementing Microsoft 365 security policies (Defender for Office 365, Conditional Access, sharing and audit policies) in an enterprise tenant.

Responsibilities

• Exchange Online, email security and delivery
• Manage Exchange Online, including hybrid Exchange, mail flow, connectors and migrations.
• Configure email security: SPF, DKIM, DMARC, Defender for Office 365 and anti-phishing policies.
• Own resolution of email delivery issues: bounces and NDRs, delayed or missing mail, messages wrongly sent to junk or quarantine, and inbound/outbound blocking.
• Investigate with message trace, message headers, quarantine and Exchange admin center reports.
• Monitor sender reputation and handle blocklist delisting (e.g. Microsoft, Spamhaus) and third-party mail gateway or relay issues.
• Manage DNS records for mail (MX, SPF, DKIM, DMARC, Autodiscover) and review DMARC reports to prevent spoofing and delivery failures.
• Teams, SharePoint and OneDrive
• Administer Teams, including policies, governance, Teams Phone and meeting rooms.
• Design SharePoint Online and OneDrive structure, permissions, sharing and lifecycle policies.
• Security policies, identity and compliance
• Design, implement and maintain Microsoft 365 security policies aligned to Microsoft and CIS security baselines.
• Configure Defender for Office 365 policies: Safe Links, Safe Attachments, anti-phishing, anti-spam and anti-malware.
• Enforce Conditional Access policies: MFA for all users, blocking legacy authentication, and location and device-compliance rules.
• Set external sharing, guest access and Teams/SharePoint security policies.
• Configure audit logging, alert policies and app protection policies for Outlook and Teams on mobile devices.
• Administer Entra ID: hybrid identity (Entra Connect), Conditional Access, MFA and PIM.
• Implement Microsoft Purview: data loss prevention, sensitivity labels, retention and eDiscovery.
• Monitor and improve Microsoft Secure Score and respond to security alerts.
• Operations
• Automate administration and reporting with PowerShell and Microsoft Graph.
• Manage licences, service health, change management and vendor support cases.
• Keep documentation, runbooks and user guidance up to date.

Skills

Microsoft 365 administration

Exchange Online

Hybrid Exchange

Team collaboration

Project leadership

Education

MS-102 Microsoft 365 Administrator Expert

MS-700 Teams Administrator

SC-300 Identity and Access Administrator

SC-401 Information Security Administrator

SC-200

Tools

PowerShell

Microsoft Graph

Entra ID

Job description

• Exchange Online, email security and delivery
• Manage Exchange Online, including hybrid Exchange, mail flow, connectors and migrations.
• Configure email security: SPF, DKIM, DMARC, Defender for Office 365 and anti-phishing policies.
• Own resolution of email delivery issues: bounces and NDRs, delayed or missing mail, messages wrongly sent to junk or quarantine, and inbound/outbound blocking.
• Investigate with message trace, message headers, quarantine and Exchange admin center reports.
• Monitor sender reputation and handle blocklist delisting (e.g. Microsoft, Spamhaus) and third-party mail gateway or relay issues.
• Manage DNS records for mail (MX, SPF, DKIM, DMARC, Autodiscover) and review DMARC reports to prevent spoofing and delivery failures.
• Teams, SharePoint and OneDrive
• Administer Teams, including policies, governance, Teams Phone and meeting rooms.
• Design SharePoint Online and OneDrive structure, permissions, sharing and lifecycle policies.
• Security policies, identity and compliance
• Design, implement and maintain Microsoft 365 security policies aligned to Microsoft and CIS security baselines.
• Configure Defender for Office 365 policies: Safe Links, Safe Attachments, anti-phishing, anti-spam and anti-malware.
• Enforce Conditional Access policies: MFA for all users, blocking legacy authentication, and location and device-compliance rules.
• Set external sharing, guest access and Teams/SharePoint security policies.
• Configure audit logging, alert policies and app protection policies for Outlook and Teams on mobile devices.
• Administer Entra ID: hybrid identity (Entra Connect), Conditional Access, MFA and PIM.
• Implement Microsoft Purview: data loss prevention, sensitivity labels, retention and eDiscovery.
• Monitor and improve Microsoft Secure Score and respond to security alerts.
• Operations
• Automate administration and reporting with PowerShell and Microsoft Graph.
• Manage licences, service health, change management and vendor support cases.
• Keep documentation, runbooks and user guidance up to date.

Responsibilities

• Exchange Online, email security and delivery
• Manage Exchange Online, including hybrid Exchange, mail flow, connectors and migrations.
• Configure email security: SPF, DKIM, DMARC, Defender for Office 365 and anti-phishing policies.
• Own resolution of email delivery issues: bounces and NDRs, delayed or missing mail, messages wrongly sent to junk or quarantine, and inbound/outbound blocking.
• Investigate with message trace, message headers, quarantine and Exchange admin center reports.

Required Qualifications

• 7+ years in Microsoft infrastructure, including 5+ years administering Microsoft 365 at enterprise scale (1,000+ users).
• Proven experience leading Exchange and tenant-to-tenant migrations.
• Deep knowledge of Exchange Online, Teams, SharePoint Online and OneDrive.
• Strong Entra ID, Conditional Access and hybrid identity experience.
• Hands-on experience with Purview compliance and Defender for Office 365.
• Strong PowerShell skills, including Microsoft Graph.
• Experience leading projects, mentoring engineers and working with senior stakeholders.
• Proven track record troubleshooting complex email delivery issues using message trace, headers, NDR codes and DNS mail records.
• Hands‑on experience designing and implementing Microsoft 365 security policies (Defender for Office 365, Conditional Access, sharing and audit policies) in an enterprise tenant.

Preferred Qualifications

Area/Certification

• Microsoft 365 /MS-102 Microsoft 365 Administrator Expert
• Teams/MS-700 Teams Administrator
• Identity/ SC-300 Identity and Access Administrator
• Security / compliance / SC-401 Information Security Administrator, or SC-200

One Platform. One Partner. Your Business, Unified.

Unify delivers integrated business services across HR, Payroll, Finance, IT, Procurement, Legal, and Government Services. We combine smart technology with expert support to help organisations operate more efficiently and grow with confidence.