Hybrid Microsoft 365 Security Engineer: Entra/Intune

Morgan Philips (Hong Kong); Greater London; Hybrid; GBP 55,000 - 65,000; Full time

Job summary

Our client in the hospitality sector seeks a Microsoft 365 Security Engineer to architect a scalable, secure cloud platform. You will drive zero-trust principles, automate provisioning, and implement secure-by-design baselines across the Microsoft 365 stack.

You will optimize Entra ID and Intune configurations, govern SharePoint, and contribute to audit-ready documentation. This is a hybrid role with two days in the office in the UK.

Qualifications

• Hands-on Microsoft 365 security experience with Entra ID, Intune, Azure and SharePoint governance.
• Automation mindset with Infrastructure as Code (Terraform) and policy-driven management at scale.
• Strong risk-aware approach and ability to define KPI-based security metrics.

Responsibilities

• Identity, access & segregation (Entra ID): optimise directory structure and enforce segregation of duties.
• Endpoint security & device management (Intune): configure MDM/MAM and automated deployment.
• Platform hardening & security baselines across the Microsoft 365 stack, including Copilot.
• Azure tenant & cloud governance: enforce data residency and Zero Trust using Infrastructure as Code (Terraform).
• SharePoint & collaboration governance: manage site lifecycle and external sharing controls.
• Compliance, audit & documentation: maintain technical standards and code-based evidence for audits.

Job description

Our client in the hospitality sector seeks a Microsoft 365 Security Engineer to architect a scalable, secure cloud platform. You will drive zero-trust principles, automate provisioning, and implement secure-by-design baselines across the Microsoft 365 stack.

You will optimize Entra ID and Intune configurations, govern SharePoint, and contribute to audit-ready documentation. This is a hybrid role with two days in the office in the UK.