Microsoft 365 Security Engineer

Morgan Philips (Hong Kong); Greater London; Hybrid; GBP 55,000 - 65,000; Full time

Job summary

Our client in the hospitality sector seeks a Microsoft 365 Security Engineer to architect a scalable, secure cloud platform. You will drive zero-trust principles, automate provisioning, and implement secure-by-design baselines across the Microsoft 365 stack.

You will optimize Entra ID and Intune configurations, govern SharePoint, and contribute to audit-ready documentation. This is a hybrid role with two days in the office in the UK.

Qualifications

• Hands-on Microsoft 365 security experience with Entra ID, Intune, Azure and SharePoint governance.
• Automation mindset with Infrastructure as Code (Terraform) and policy-driven management at scale.
• Strong risk-aware approach and ability to define KPI-based security metrics.

Responsibilities

• Identity, access & segregation (Entra ID): optimise directory structure and enforce segregation of duties.
• Endpoint security & device management (Intune): configure MDM/MAM and automated deployment.
• Platform hardening & security baselines across the Microsoft 365 stack, including Copilot.
• Azure tenant & cloud governance: enforce data residency and Zero Trust using Infrastructure as Code (Terraform).
• SharePoint & collaboration governance: manage site lifecycle and external sharing controls.
• Compliance, audit & documentation: maintain technical standards and code-based evidence for audits.

Job description

Microsoft 365 Security Engineer

Our client, a well–established international hospitality brand with a strong family culture, is looking for a Microsoft 365 & Security Infrastructure Administrator who loves building things properly.
This role sits at the heart of the organisation's cyber security strategy. You'll take a clear security vision and engineer it into a scalable, automated Microsoft cloud platform that's secure by design.

• Scalable infrastructure: ad–hoc management replaced by a fully automated, policy–driven environment.
• Proactive security: security gaps remediated before they're exploited, with a focus on long–term stability.
• Metrics–driven operations: a regular cadence of high–signal reporting on platform health and risk reduction.
• Zero–touch operations: secure, automated provisioning that minimises manual intervention.

Key responsibilities

• Identity, access & segregation (Entra ID): optimise directory structure using Administrative Units and enforce strict segregation of duties.
• Endpoint security & device management (Intune): configure MDM/MAM and automated deployment across all device types.
• Platform hardening & security baselines: implement secure–by–design baselines across the Microsoft 365 stack, including Copilot.
• Azure tenant & cloud governance: enforce data residency and Zero Trust principles, using Infrastructure as Code (Terraform).
• SharePoint & collaboration governance: deliver site lifecycle management and external sharing controls.
• Compliance, audit & documentation: maintain technical standards and code–based evidence for audit readiness.

About you

• Proactive solution–finder: you put long–term system integrity ahead of short–term fixes.
• Data–driven and analytical: you define success through measurable KPIs and clear executive reporting.
• Modern cloud mentality: you stay current with Microsoft's evolving cloud and AI landscape.
• Hands–on Microsoft 365 security experience: strong working knowledge of Entra ID, Intune, Azure and SharePoint governance.
• Automation mindset: experience with Infrastructure as Code (ideally Terraform) and policy–driven management at scale.

This is a permanent role, with two days a week in the office. Salary on offer is GBP55,000 – GBP65,000.

We are committed to ensuring that all job applicants are treated equally, without discrimination because of gender, sexual orientation, marital or civil partner status, gender reassignment, race, colour, nationality, ethnic or national origin, religion or belief, disability or age.