Senior Azure & Microsoft 365 Technical Architect - London - Hybrid

Portfolio BI, Inc.; Greater London; Hybrid; GBP 90,000 - 135,000; Full time

Benefits offered by this job

Hybrid working

Competitive compensation

Health coverage

Paid time off

Learning and development

Certifications and bonuses

Job summary

Portfolio BI, Inc. is seeking a Senior Azure & Microsoft 365 Technical Architect to own and evolve the Azure platform, working with external partners to ensure secure, stable operations and strong governance across Identity and Access Management, Disaster Recovery, and Monitoring.

The role demands hands-on expertise in Azure and 365, cloud architecture, cost optimization, and service monitoring. Hybrid work and competitive compensation are offered, with opportunities for professional

Qualifications

• Hands-on experience with Microsoft Azure and Microsoft 365 platform engineering and security configuration.
• Strong ability to manage identity governance, access reviews, and least-privilege controls across integrated platforms.
• Proven experience in disaster recovery design, testing, and failover procedures for financial services or similarly regulated environments.

Responsibilities

• Own the Azure platform architecture and enforce alignment with documented design and security standards.
• Oversee Entra ID, Conditional Access, RBAC, PIM, and service identities; manage Key Vault and rotation processes.
• Maintain Terraform configurations and CI/CD pipelines; develop automation via PowerShell scripts.

Skills

Azure Platform Engineering

Microsoft 365 Admin

Identity & Access Governance

Disaster Recovery Planning

Networking & Security

Tools

Terraform

Azure DevOps

PowerShell

KQL

Application Insights

Job description

PBI’s flagship products and services, PBI Axiom, PBI Vector, and PBI Stratus, enable alternative asset managers to address their data challenges in analytics, workflow, governance, and security.

We are looking for hands‑on Senior Azure & Microsoft 365 Technical Architect.

The successful candidate will act as the technical owner of the Azure platform, working closely with external development and engineering partners. They will ensure that deployed systems align with the intended architecture, support secure and stable operations, and improve ownership across Identity and Access Management, Disaster Recovery, and Monitoring and Observability.

Main Responsibilities

• Oversee Azure subscriptions, landing zones, networking, compute, databases and Microsoft 365 tenant configuration, including dependencies between current and legacy platforms
• Validate deployed infrastructure against documented architecture and security requirements, including ingress, DNS, certificates and platform access controls
• Review Entra ID, Conditional Access, authentication flows, RBAC, PIM, emergency access, service identities and guest/B2B and client‑facing identities. Ensure least‑privilege access, effective joiner/mover/leaver processes, recurring access reviews and removal of orphaned identities
• Reconcile permissions and access dependencies across Microsoft 365, Azure, Azure DevOps and applications; oversee Key Vault, secrets, certificates and rotation
• Assess and improve disaster recovery, including recovery units, shared dependencies, RTOs/RPOs, backups, database replication, point‑in‑time restoration and multi‑region design. Run restore and failover exercises covering invocation, validation and return to primary, maintaining runbooks, responsibilities and test evidence
• Improve service‑health monitoring using Azure Monitor, Log Analytics, KQL and Application Insights. Map services to monitoring signals, tune alerts for actionability, routing and ownership, and distinguish customer‑facing status from operational diagnostics
• Troubleshoot production issues across infrastructure, applications, APIs and integrations, maintaining practical runbooks and technical documentation
• Maintain Terraform configurations, modules and state; detect configuration drift, support Azure DevOps pipelines and permissions, and develop PowerShell scripts and automation
• Apply Azure Policy and landing‑zone guardrails, maintain tagging, naming and subscription standards, and improve cost management, including telemetry retention and access
• Act as the internal technical counterpart to external providers, constructively challenge proposed changes and communicate gaps, risks and recommendations clearly to technical and non‑technical stakeholders.

Essential

• Strong hands‑on experience with both Microsoft Azure and Microsoft 365, including Azure platform engineering, Microsoft 365 tenant administration and security configuration, Active Directory servers, and email security/spam filtering (Mimecast)
• Experience spanning cloud architecture, engineering and operations in business‑critical production environments
• Experience supporting financial‑services cloud environments, including cloud cost optimisation and FinOps
• Strong knowledge of Entra ID, Conditional Access, Azure RBAC, PIM, Key Vault and identity and access governance across connected platforms
• Practical knowledge of Azure networking, ingress, compute and databases, including backup, replication and restoration
• Experience assessing and validating disaster recovery, including dependency mapping, RTOs/RPOs, recovery procedures, restore testing and regional failover
• Experience with Azure Monitor, Log Analytics, KQL and Application Insights, including service‑health monitoring, alert tuning and troubleshooting distributed, API‑driven services
• Practical Terraform experience covering modules, state management and drift detection, alongside Azure DevOps CI/CD, access controls, PowerShell scripting and Azure Policy
• Strong technical documentation and runbook‑development skills, with the ability to distinguish verified findings from assumptions and recommendations
• Ability to work independently, exercise sound technical judgement, collaborate with and challenge external providers, and communicate clearly with technical and non‑technical stakeholders.

Desirable

• Familiarity with Bicep or ARM templates
• Experience supporting security audits
• Familiarity with AI tools and their practical application in Microsoft 365 or IT operations
• Experience working with multiple external technology suppliers.

You would be part of an international team of people, working on the latest technology and at the forefront of automation and innovation. We offer:

• Hybrid working: Flexibility to combine office and remote work
• Challenging technical projects: Hands‑on work with modern technologies and opportunities to contribute to meaningful improvements
• Competitive compensation: A salary that reflects your skills and experience
• Health coverage: A medical insurance package
• Paid time off: Generous leave to rest and recharge
• Learning and development: Training opportunities to support your career growth
• Certifications and bonuses: Company‑funded professional certification exams and bonuses.