SC Cleared Azure And Microsoft Sentinel Technical Lead

Focus Cloud Limited; Greater London; On-site; GBP 120,000 - 175,000; Full time

Job summary

Focus Cloud Limited is partnering with a government sector client to deliver a Microsoft cloud security modernisation programme. We seek an experienced Azure and MS Sentinel Technical Lead on a contract basis to guide remediation, plan delivery, and coordinate cross-functional engineers and security specialists.

You will own pod delivery, ensure evidence-based outcomes, manage risks, and support a smooth handover into operations for ongoing resilience and governance.

Qualifications

• Hands-on Microsoft Sentinel and Defender knowledge.
• Translate approved remediation work packages into delivery backlogs.
• Coordinate Sentinel, Azure and other technical specialists.
• Lead multidisciplinary engineering/remediation teams.
• Translate technical work into actionable plans and backlogs.
• Strong troubleshooting and risk management skills.
• Ensure evidence and acceptance testing are completed.

Responsibilities

• Lead the daily technical delivery of a remediation pod.
• Convert work packages into a sequenced backlog.
• Coordinate with Sentinel, Azure and security specialists.
• Manage pod risks, dependencies and blockers.
• Ensure delivery stays within scope and architecture standards.
• Maintain implementation, testing and evidence.
• Demonstrate outcomes at gates and handover to operations.

Skills

Azure Security

Microsoft Sentinel

Delivery Leadership

Backlog Management

Cross-functional Collaboration

Risk Management

Testing & Evidence

Stakeholder Communication

Tools

Azure Monitor

Log Analytics

KQL

SOAR/Logic Apps

Defender for Cloud

Job description

We are partnering with a government sector client delivering a Microsoft cloud security modernisation programme, and are seeking an experienced Azure and MS Sentinel Technical Lead to join on a contract basis. The programme spans Microsoft Sentinel, Azure tenant rationalisation, security remediation, SOC enablement and operational handover, requiring hands‑on Microsoft security changes across complex, governed environments.

You will lead the day‑to‑day technical delivery of a remediation pod, coordinating engineers and technical specialists, managing the pod backlog and ensuring approved remediation activities are implemented, tested and evidenced to a high standard.

Key Responsibilities

• Lead the daily technical delivery of an assigned remediation pod.
• Translate approved remediation work packages into a clear, sequenced delivery backlog.
• Coordinate Sentinel, Azure and other technical specialists.
• Manage pod‑level risks, dependencies, actions and technical blockers.
• Ensure delivery remains within approved scope and architecture standards.
• Maintain implementation, testing and acceptance evidence.
• Demonstrate completed outcomes at quality and acceptance gates.
• Escalate architecture, scope and programme‑level decisions where required.
• Support successful technical handover into operational teams.

Key Deliverables

• Pod delivery plan and backlog
• Daily progress and RAID updates
• Dependency and escalation log
• Completed remediation outputs
• Test and implementation evidence
• Quality and acceptance gate demonstrations
• Pod handover pack

Essential Experience

• Strong technical delivery leadership within Microsoft cloud and security environments.
• Hands‑on Microsoft Sentinel and Defender knowledge.
• Good understanding of Microsoft Azure and cloud security fundamentals.
• Experience leading multidisciplinary engineering or remediation teams.
• Ability to translate technical work packages into actionable delivery plans and backlogs.
• Strong troubleshooting, dependency and technical risk management skills.
• Experience managing implementation, testing, evidence and acceptance.
• Strong communication skills across engineers, architects, project managers and client stakeholders.

Desirable Knowledge

• Microsoft Entra ID
• SIEM and SOC environments
• KQL and detection engineering
• Security‑data connectors and ingestion
• Azure Monitor and Log Analytics
• SOAR, Logic Apps and security automation
• Azure tenant remediation or rationalisation
• Security testing and operational handover

This would be an Inside IR35 Contract role working via umbrella company and as this is a defence sector customer you must be a UK National to be considered for this role. This is due to the occupational nature of the role, and the fact that brings with it risks to national security.