Platform Engineer: Azure IAM, Intune & Automation (On-site)

OpticoreIT Limited; Dunstable; On-site; GBP 52,000 - 82,000; Full time

Job summary

Opticore IT is seeking a Platform Engineer to design, manage, secure and optimise enterprise Microsoft platforms in a hospitality environment. The role focuses on Entra ID, AD, Intune, SCCM, PowerShell and Office 365 with on-site work in Dunstable for a 3-month contract inside IR35.

You will implement CA policies, automate provisioning, and support Azure/DevOps tasks while collaborating with cloud engineering teams to ensure robust, compliant identity and device management.

Qualifications

• Manage and optimise Entra ID (Azure AD) and Active Directory environments.
• Design, implement, and maintain Conditional Access policies and identity security controls.
• Lead integrations with enterprise applications ensuring robust authentication and authorisation.
• Troubleshoot complex identity, SSO, MFA, and synchronisation issues.
• Administer Intune for Windows 10/11 and Android device management.
• Work with SCCM (ConfigMgr) to support OS deployments, patch management, and application lifecycle management.
• Develop and maintain configuration baselines, compliance policies, and endpoint security posture.
• Build, maintain, and improve automation workflows using PowerShell.
• Develop scripts to streamline provisioning, reporting, configuration, and operational tasks.
• Support and optimise the Office 365 platform, including Exchange Online, SharePoint, Teams, and associated workloads.
• Implement retention, compliance, and governance configurations within M365.
• Support activities within Azure and Azure DevOps environments.
• Assist with pipelines, resource management, monitoring, and infrastructure-as-code principles.
• Collaborate with cloud engineering teams on deployments, improvements, and troubleshooting.
• Support diagnosis of networking issues relevant to identity, endpoint management, and cloud services.
• Apply foundational understanding of TCP/IP, DNS, DHCP, VPN, and firewall concepts.

Responsibilities

• What you'll be doing: Manage and optimise Entra ID (Azure AD) and AD environments.
• Design, implement, and maintain Conditional Access policies and identity security controls.
• Lead integrations with enterprise applications ensuring robust authentication and authorisation mechanisms.
• Troubleshoot identity, SSO, MFA, and synchronisation issues.
• Administer and enhance Microsoft Intune for Windows 10/11 and Android device management.
• Work with SCCM to support OS deployments, patch management, and application lifecycle management.
• Develop and maintain configuration baselines, compliance policies, and endpoint security posture.
• Build, maintain, and improve automation workflows using PowerShell.
• Develop scripts to streamline provisioning, reporting, configuration, and operational tasks.
• Support and optimise the Office 365 platform, including Exchange Online, SharePoint, Teams, and associated workloads.
• Implement retention, compliance, and governance configurations within M365.
• Assist with Azure and Azure DevOps environments.
• Collaborate with cloud engineering teams on deployments, improvements, and troubleshooting.
• Support diagnosis of networking issues relevant to identity, endpoint management, and cloud services.
• Apply foundational understanding of TCP/IP, DNS, DHCP, VPN, and firewall concepts.

Skills

Enterprise MS environments

Entra ID / AD

Conditional Access

Intune

SCCM

PowerShell

Office 365

Azure / DevOps

Problem diagnosis

Communication skills

Collaboration

Tools

PowerShell

SCCM (ConfigMgr)

Intune

Azure DevOps

Job description

Opticore IT is seeking a Platform Engineer to design, manage, secure and optimise enterprise Microsoft platforms in a hospitality environment. The role focuses on Entra ID, AD, Intune, SCCM, PowerShell and Office 365 with on-site work in Dunstable for a 3-month contract inside IR35.

You will implement CA policies, automate provisioning, and support Azure/DevOps tasks while collaborating with cloud engineering teams to ensure robust, compliant identity and device management.