Infrastructure Engineer - Zero Trust & M365 Lead (SC Cleared)

Matchtech; Greater London; On-site; GBP 75,000 - 110,000; Full time

Job summary

Matchtech seeks a Senior ICT Infrastructure Engineer to lead Zero Trust and M365 initiatives in a permanent role. You will guide Microsoft 365, Azure security, identity, endpoint management and Zero Trust architecture, delivering strategic security controls and governance across the environment.

Key focus areas include Entra ID, Intune, Autopilot and Defender services, with mentoring to junior engineers and strong collaboration across teams to ensure ISO 27001 and GDPR alignment.

Qualifications

• Significant experience in Microsoft 365 administration, infrastructure engineering or cyber security.
• Strong knowledge of MS Exchange, Exchange Online, SharePoint and Microsoft 365 services.
• Practical experience with M365 security, Azure Security and the Microsoft Defender suite.

Responsibilities

• Take technical ownership of Microsoft 365 platforms, including Exchange Online, SharePoint Online, Teams and OneDrive.
• Design, implement and govern Microsoft Entra ID, hybrid identity and cloud governance solutions.
• Manage endpoints through Microsoft Intune, Autopilot, endpoint security and device compliance policies.
• Implement and maintain Zero Trust security controls, Conditional Access and Privileged Identity Management.
• Provide first, second and third line technical support, including escalation management.

Skills

Microsoft 365

Azure security

Zero Trust

PowerShell

Terraform

Microsoft Graph API

Intune

Autopilot

Identity governance

Tools

Terraform

PowerShell

Microsoft Graph API

Job description

Our client, a cyber security organisation specialising in secure cloud and infrastructure solutions, is seeking a Senior ICT Infrastructure Engineer: Zero Trust & M365 Lead for a permanent position. The role will provide technical leadership across Microsoft 365, Azure security, identity, endpoint management and Zero Trust architecture.

Key Responsibilities:

• Take technical ownership of Microsoft 365 platforms, including Exchange Online, SharePoint Online, Teams and OneDrive
• Design, implement and govern Microsoft Entra ID, hybrid identity and cloud governance solutions
• Manage endpoints through Microsoft Intune, Autopilot, endpoint security and device compliance policies
• Implement and maintain Zero Trust security controls, Conditional Access and Privileged Identity Management
• Provide first, second and third line technical support, including escalation management
• Create and govern security baselines in line with organisational and regulatory requirements
• Automate infrastructure and security processes using PowerShell, Microsoft Graph API and Terraform
• Support compliance with ISO 27001, GDPR and Cyber Essentials requirements while mentoring junior engineers

Job Requirements:

• Significant experience in Microsoft 365 administration, infrastructure engineering or cyber security
• Strong knowledge of MS Exchange, Exchange Online, SharePoint and Microsoft 365 services
• Practical experience with M365 security, Azure Security and the Microsoft Defender suite
• Understanding of Zero Trust architecture, Conditional Access, identity governance and security baselines
• Experience managing Microsoft Intune, Autopilot, endpoint security and device compliance
• Proficiency in PowerShell, with an understanding of Microsoft Graph API and Terraform automation
• Knowledge of Microsoft Purview, security monitoring, reporting and cloud governance
• Strong troubleshooting, escalation management, communication and mentoring skills

Benefits:

• Permanent opportunity within the cyber security and ICT infrastructure sector
• Opportunity to lead Microsoft 365 and Zero Trust initiatives
• Exposure to Microsoft Azure, identity security, endpoint management and cloud governance
• Support for continued technical development and knowledge sharing
• Collaborative environment with the opportunity to mentor and support junior engineers