Cloud Security Specialist (Azure AD, M365/O365 Security)

BT Group; Bristol; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading telecommunications company in Bristol seeks a Cloud Security Specialist to drive identity and cloud security solutions. The role entails technical leadership in implementing security policies, managing Microsoft Defender tools, and collaborating across teams to align security initiatives with business goals. Candidates should have strong foundations in cloud and identity security, alongside experience with regulatory frameworks and Microsoft security tools. Benefits include bonus opportunities, pension plans, and generous leave policies.

Benefits

Annual bonus up to 10%

BT Pension scheme

Life Assurance

Employee discounts

Health benefits

25 days annual leave

Volunteering days

Qualifications

• Strong foundation in cloud and identity security.
• Experience with Microsoft 365 Security and Entra ID.
• Familiarity with NIST CSF, ISO 27002, and CIS Controls.

Responsibilities

• Deploy and manage Microsoft Defender XDR.
• Implement phishing-resistant and passwordless authentication.
• Align security initiatives with business goals.

Skills

Cloud security expertise

Identity security knowledge

Collaboration skills

Incident response experience

Tools

Microsoft 365 Security

Azure AD

Defender

SailPoint

CyberArk

Job description

Overview

We\'re now looking for a Cloud Security Specialist to help drive this mission forward. In this individual contributor role, you\'ll lead and deliver identity and cloud security solutions across people, processes, and technologies. You\'ll bring deep technical expertise in areas such as PAM, Active Directory, Azure AD, and Microsoft security tools like DLP, AIP, and Defender—while also collaborating across teams and supporting stakeholders on a wide range of security topics. If you\'re passionate about protecting digital assets and shaping the future of secure connectivity, we\'d love to hear from you.

Innovation has been at the heart of BT since 1846. It\'s not just about developing new technologies—it\'s about using them to make a meaningful difference in people\'s lives. We\'re committed to delivering seamless, secure, and affordable experiences, fast. As we evolve our converged network capabilities, our goal is to provide customers with effortless, reliable connectivity—wherever they are. This transformation is powered by our talented people, who are leading the way not just for BT, but for the industry globally.

What you\'ll be doing

• Leading the deployment and management of Microsoft Defender XDR across Identity, Endpoint, Office, and Cloud Apps.
• Implementing and maintaining phishing-resistant, passwordless authentication across all user devices.
• Designing and enforcing conditional access and multi-factor authentication policies using Entra ID.
• Collaborating with stakeholders to align security initiatives with business goals and maximise the value of our licence investments.
• Conducting risk assessments and developing mitigation plans for services including Entra ID, Defender XDR, and Microsoft Purview.
• Providing technical leadership in shaping and rolling out security policies, including labelling and classification standards.
• Promoting secure access practices through user education, clear documentation, and ongoing support.
• Staying ahead of evolving threats and proactively adapting controls to counter emerging risks.

Qualifications and experience

• Strong foundation in cloud and identity security with a collaborative mindset.
• Experience with: Microsoft 365 Security and Entra ID, including conditional access and authentication strategies.
• Endpoint and cloud security configuration, policy enforcement, and incident response.
• Active Directory and directory services (including Azure AD and Oracle Unified Directory).
• Microsoft security tools such as Defender, Sentinel, DLP, AIP, and passwordless/passkey deployments.
• Regulatory frameworks like NIST CSF, ISO 27002, and CIS Controls.
• Experience working with stakeholders across Information Security to align on strategy and implementation.

It would also be great if you\'re familiar with: Identity platforms such as SailPoint and CyberArk; creating and communicating telemetry data across identity systems, and working with SOC/SIEM teams to ensure compliance.

Benefits

• An annual bonus of up to 10% (company & personal performance dependent).
• BT Pension scheme; minimum 5% employee contribution, BT contribution 10%.
• Life Assurance.
• Exclusive colleague discounts on BT broadband packages.
• 50% off EE mobile pay monthly or SIM only plans and 50% discount for friends and family on EE SIM only plans.
• BT TV, including TNT Sport and NOW Entertainment membership, and 25% off NOW Sport, Cinema and Kids.
• Support for working parents including pay whilst on maternity, adoptive, and paternity leave.
• Option to join the Healthcare Cash Plan or other benefits such as dental insurance, gym memberships, etc.
• 25 days annual leave (not including bank holidays), increasing with service.
• Volunteering days to give back to your local community.
• Brand new electric vehicle salary sacrifice arrangement, known as \'My EV\'.