Microsoft 365 Security Engineer

Morgan Philips Group; City Of London; Hybrid; GBP 55,000 - 65,000; Full time

Job summary

Morgan Philips Group seeks a Microsoft 365 Security Engineer to design and implement a scalable, secure Microsoft cloud platform with Entra ID, Intune, and governance across SharePoint.

You will build a policy-driven, automated environment and drive Zero Trust, data residency, and secure-by-design baselines. The role combines hands-on engineering with governance and compliance oversight.

Qualifications

• Hands-on Microsoft 365 security experience including Entra ID, Intune, and SharePoint governance.
• Experience with IaC (Terraform) and policy-driven management at scale.
• Ability to implement secure-by-design baselines across the Microsoft 365 stack.

Responsibilities

• Optimise directory structure using Administrative Units and enforce segregation of duties (Entra ID).
• Configure MDM/MAM and automated deployment across device types (Intune).
• Implement secure baselines across the Microsoft 365 stack including Copilot.
• Enforce data residency and Zero Trust using Terraform IaC.
• Deliver site lifecycle management and external sharing controls (SharePoint).

Skills

Data-driven

Analytical thinking

Automation mindset

Problem solving

Tools

Entra ID

Intune

Azure

SharePoint governance

Terraform

Job description

Microsoft 365 Security Engineer

Our client, a well-established international hospitality brand with a strong family culture, is looking for a Microsoft 365 & Security Infrastructure Administrator who loves building things properly.

This role sits at the heart of the organisation's cyber security strategy. You'll take a clear security vision and engineer it into a scalable, automated Microsoft cloud platform that's secure by design.

• Scalable infrastructure: ad-hoc management replaced by a fully automated, policy-driven environment.
• Proactive security: security gaps remediated before they're exploited, with a focus on long-term stability.
• Metrics-driven operations: a regular cadence of high-signal reporting on platform health and risk reduction.
• Zero-touch operations: secure, automated provisioning that minimises manual intervention.

Key responsibilities

• Identity, access & segregation (Entra ID): optimise directory structure using Administrative Units and enforce strict segregation of duties.
• Endpoint security & device management (Intune): configure MDM/MAM and automated deployment across all device types.
• Platform hardening & security baselines: implement secure-by-design baselines across the Microsoft 365 stack, including Copilot.
• Azure tenant & cloud governance: enforce data residency and Zero Trust principles, using Infrastructure as Code (Terraform).
• SharePoint & collaboration governance: deliver site lifecycle management and external sharing controls.
• Compliance, audit & documentation: maintain technical standards and code-based evidence for audit readiness.

About you

• Proactive solution-finder: you put long-term system integrity ahead of short-term fixes.
• Data-driven and analytical: you define success through measurable KPIs and clear executive reporting.
• Modern cloud mentality: you stay current with Microsoft's evolving cloud and AI landscape.
• Hands-on Microsoft 365 security experience: strong working knowledge of Entra ID, Intune, Azure and SharePoint governance.
• Automation mindset: experience with Infrastructure as Code (ideally Terraform) and policy-driven management at scale.

This is a permanent role, with two days a week in the office. Salary on offer is £55,000 - £65,000.

Please note you will receive an automated response advising you that we have received your CV.

We are committed to ensuring that all job applicants are treated equally, without discrimination because of gender, sexual orientation, marital or civil partner status, gender reassignment, race, colour, nationality, ethnic or national origin, religion or belief, disability or age