Microsoft 365 Security

Cloudy Group; Buckingham; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Staff benefits

Training & development

Remote working flexibility

Job summary

CloudyIT is seeking a Microsoft 365 Security Engineer to strengthen security across Microsoft 365 for UK clients, with a focus on identity, devices and data protection. The role sits at the Buckingham office with flexible remote working.

You will assess configurations, implement security controls such as MFA and Conditional Access, and support secure device management with Intune, Defender and Purview. Collaboration with onboarding, migration and support teams will be essential for secure

Qualifications

• Practical experience in Microsoft 365 administration, security or similar technical role.
• Strong knowledge of Entra ID, Intune, Exchange Online, Teams and SharePoint administration.
• Understanding of identity protection, access control, device compliance, email security and data protection principles.
• Evidence-based approach to investigation, change and documentation.
• Good judgement on escalation and next steps.
• Clear written and verbal communication in plain English.
• Organised, dependable, and able to manage multiple tasks with deadlines.
• Willingness to learn and develop in Microsoft cloud security areas.
• Certifications such as SC-900/SC-300/MS-102/MD-102 or related security qualifications.

Responsibilities

• Review Microsoft 365 security configurations to identify risks and improvements.
• Configure and maintain identity and access controls, including MFA and Conditional Access.
• Support secure device management through Microsoft Intune and related services.
• Help protect email and data services using Microsoft security controls.
• Investigate security alerts and customer-reported concerns; escalate where needed.
• Maintain clear technical records of findings and actions for auditing.

Skills

Microsoft 365 security

Identity & access management

Entra ID

Intune

Email security

Security incident response

Documentation

Communication

Microsoft Defender

Education

Microsoft security certifications (SC-900, SC-300, MS-102, MD-102)

Tools

Microsoft Defender

Microsoft Purview

Microsoft Sentinel

Exchange Online

Teams

SharePoint

Intune

Job description

Job Vacancy: Microsoft 365 Security Engineer

Technical team - helping customers strengthen identity, devices, data and Microsoft 365 security.

Reports To:

Director of Operations

Contract Type:

Full-time, permanent

Location:

Buckingham office, with flexible remote working

Team:

Technical

Start Date:

To be agreed

Competitive, based on skills and experience

About CloudyIT:

CloudyIT is a UK Microsoft partner specialising in the Modern Workplace. We support around 800 clients across the UK, with approximately 65% being councils, alongside non-profits and SMEs. We help our customers use Microsoft 365 confidently, securely and effectively. We also develop GovRedact, our secure redaction service designed to support organisations with Subject Access Requests (SARs) and Freedom of Information (FOI) requests. You will join a dynamic, growing team where your work has a direct and visible impact on our customers and services.

Purpose of the Role:

To help CloudyIT customers improve and maintain the security of their Microsoft 365 environments. You will assess configurations, implement agreed security controls, investigate security-related issues and provide clear guidance that is proportionate to each customer’s needs, risks and working practices.

Key Responsibilities:

• Review Microsoft 365 security configurations and identify risks, gaps and practical improvements.
• Configure and maintain identity and access controls, including multifactor authentication and Conditional Access.
• Support secure device management through Microsoft Intune and related Microsoft 365 services.
• Help protect email, collaboration and data services using approved Microsoft security controls.
• Investigate security alerts, suspicious activity and customer-reported security concerns, escalating where required.
• Support incident response activities and maintain clear technical records of findings and actions.
• Apply CloudyIT security standards and document customer-specific decisions, exceptions and recommendations.
• Communicate security risks and proposed changes clearly to technical and non-technical customers.
• Contribute to security baselines, checklists, knowledge articles and continuous service improvement.
• Coordinate and support the Cyber Essentials certification process, including evidence gathering, readiness checks, remediation tracking and renewal activity.
• Contribute to the delivery and continuous improvement of GovRedact, supporting customers with secure redaction workflows for Subject Access Requests (SARs) and Freedom of Information (FOI) requests.
• Work with onboarding, migration and support colleagues to build security into customer changes from the outset.

What We Are Looking For:

• Practical experience in Microsoft 365 administration, security, infrastructure or a similar technical role.
• Good working knowledge of Entra ID, Microsoft Intune, Exchange Online, Teams and SharePoint administration.
• Understanding of identity protection, access control, device compliance, email security and data protection principles.
• A careful, evidence-based approach to investigation, change and documentation.
• Good judgement, including when to act, seek further evidence or escalation.
• Clear written and verbal communication, including the ability to explain technical matters in plain English.
• Organised and dependable, able to manage multiple activities and deadlines.
• A positive, customer-focused attitude and a willingness to learn.
• Microsoft certifications such as SC-900, SC-300, MS-102, MD-102 or related security qualifications.
• Experience with Microsoft Defender, Microsoft Purview or Microsoft Sentinel.
• Knowledge of Cyber Essentials, information governance, redaction, SARs or FOI processes.
• Experience implementing Conditional Access, privileged access, security baselines or endpoint compliance policies.
• Experience working in a managed service provider or supporting councils, charities or other small organisations.

Development and Future Opportunities:

This role provides a pathway to develop deeper expertise across Microsoft cloud security, Cyber Essentials and secure information handling. As your experience develops, there may be opportunities to specialise further in areas such as identity and access, endpoint security, Microsoft Defender, compliance, security-focused customer onboarding or the continued development of GovRedact. Development will be shaped around business needs, your strengths and your career interests, with support to work towards relevant Microsoft and security skills and certifications.

Working Pattern:

Based at our Buckingham office, with flexibility for remote working. Occasional travel to customer offices may be required, with reasonable notice and expenses covered.

Pay and Benefits:

Salary will be agreed based on the successful candidate’s skills, experience and suitability for the role, and will be reviewed annually.

• A range of staff benefits, which we will be happy to talk through at interview.
• Training and development opportunities aligned to the role and future specialisms.