Microsoft 365 Architect – Managed Services | Flexible PTO

q.beyond ibérica; Jerez de la Frontera; Hybrid; EUR 45,000 - 60,000; Full time

Benefits offered by this job

Company healthcare program

30 days vacation

Flexible work location including home‑

Office-friendly hybrid model

Job summary

q.beyond ibérica S.L. is seeking a Microsoft 365 Specialist – Managed Services to manage Defender baselines and secure Microsoft 365 tenants. You will implement Conditional Access, Entra ID policies, and Zero Trust concepts while supporting hybrid work environments for our German enterprise clients.

The role emphasizes ITIL-aligned operations, strong documentation, and customer-focused service delivery, with opportunities for internal development and flexible work location in Spain.

Qualifications

• IT vocational training or CS degree or equivalent.
• Several years of experience managing Microsoft 365 environments.
• Strong knowledge of Defender stack (Endpoint, Office, Identity) and Zero Trust concepts.
• Experience with ITIL-based incident, change and problem processes.
• Structured work style with strong documentation and standardisation.
• Strong customer and service orientation.
• Good English (C1).

Responsibilities

• Provide and maintain Defender baselines for Defender for Endpoint, Defender for Office 365 and Defender for Identity.
• Harden Microsoft 365 tenants to CIS-aligned security levels with documentation and semi-annual reviews.
• Set up and maintain Conditional Access policy sets in Microsoft Entra ID (MFA, legacy auth, privileged roles, break glass, device compliance).
• Implement Identity Protection and Privileged Identity Management as licensed.
• Operate self-services like password reset and recovery keys, monitor Service Health, and provide monthly tenant/licence/security reporting.
• Contribute to Intune endpoint management, Azure Virtual Desktop, OneDrive and Exchange Online.
• Handle incidents, service requests and changes per ITIL 4; analyze current state and support go-live.
• Maintain service documentation and configuration states in the ITSM tool.
• Contribute to service reviews and develop baselines with the service owner.
• Automate recurring tasks with PowerShell and Microsoft Graph.
• Assess new Microsoft features and vendor changes for customer impact.

Skills

Microsoft 365 admin

Defender stack

PowerShell

ITIL processes

Hybrid identities

Documentation

Customer orientation

English (C1)

Education

IT qualification / degree

Tools

Microsoft Entra ID

Job description

q.beyond ibérica S.L. is seeking a Microsoft 365 Specialist – Managed Services to manage Defender baselines and secure Microsoft 365 tenants. You will implement Conditional Access, Entra ID policies, and Zero Trust concepts while supporting hybrid work environments for our German enterprise clients.

The role emphasizes ITIL-aligned operations, strong documentation, and customer-focused service delivery, with opportunities for internal development and flexible work location in Spain.