Senior Microsoft 365 Platform Lead - Bristol (Hybrid)

SmartStream; West of England; Hybride; GBP 70 000 - 95 000; Plein temps

Résumé du poste

SmartStream is seeking a Senior Microsoft 365 Platform Engineer to own and operate our global Microsoft 365 tenant from Bristol, in a hybrid role. The position focuses on Exchange Online, SharePoint/OneDrive, Teams, Copilot, Entra ID, and security, with leadership responsibilities and mentoring for junior staff.

The role involves driving continuous improvement, collaborating with Information Security and Global IT to protect data and enable secure productivity, and managing licensing and vendor

Qualifications

• 5+ years hands-on experience administering Microsoft 365 at enterprise scale.
• Demonstrable experience managing enterprise mail flow within Microsoft 365.
• Strong PowerShell and Microsoft Graph scripting experience.

Responsabilités

• Own the Microsoft 365 platform end-to-end, including security posture and governance.
• Lead governance for Exchange Online mail flow, SP/OneDrive/Teams, and Copilot rollout.
• Administer Entra ID and external/guest access governance.
• Develop automation for provisioning, licensing and reporting via PowerShell and Graph.
• Mentor junior colleagues and produce runbooks and knowledge-base articles.

Connaissances

Exchange Online management

Email security

SharePoint Online

OneDrive

Teams administration

Entra ID

Copilot for Microsoft 365

PowerShell scripting

Microsoft Graph

SaaS integrations

Intune

Licensing management

Formation

Bachelor's degree or equivalent professional experience

Outils

PowerShell

Microsoft Graph

Description du poste

Senior Microsoft 365 Platform Engineer - 6 month FTC

Location: Bristol, Hybrid 3 days office

The Senior Microsoft 365 Platform Engineer is a senior technical role responsible for the day-to-day running, security and service health of our Microsoft 365 tenant and Azure environment, with particular focus on Entra ID, SharePoint, OneDrive, Teams and Azure, as well as Copilot, Exchange Online and email security. This is a senior individual-contributor role with no direct reports, working within the technical direction set by the Global Business Applications Manager. The successful candidate will drive continuous improvement on their own initiative, mentor colleagues, and partner with Information Security, Risk & Compliance and Global IT to protect the organisation's data and enable secure productivity.

• Run the Microsoft 365 platform day to day, maintaining its security posture and service health, and contributing to technical direction and roadmap planning.

• Administer Microsoft Entra ID — identity lifecycle, role-based access control, group management and external/guest access governance.

• Deliver and manage SaaS integrations with Microsoft 365 through Entra enterprise applications and app registrations (SSO, provisioning, API permissions, secrets and certificates).

• Administer and configure our Azure environment day to day — subscriptions, RBAC, networking, Azure Policy, monitoring and cost management — in line with agreed architecture and governance.

• Administer SharePoint Online, OneDrive and Teams (provisioning, external sharing, sensitivity labels, retention) and lead day-to-day administration of Copilot for Microsoft 365, including data readiness, licensing and adoption.

• Develop and maintain PowerShell and Microsoft Graph automation for provisioning, licensing and reporting.

• Manage Exchange Online mail flow — hybrid connectors, transport rules, anti-spam/anti-phishing and email authentication (SPF, DKIM, DMARC).

• Operate tenant backup and recovery for Microsoft 365 workloads (Exchange, SharePoint, OneDrive, Teams).

• Act as the senior escalation point for Microsoft 365 matters and lead initial investigation, triage and remediation of security incidents, including out-of-hours response where necessary. Escalate strategic or high-risk decisions to the Global Business Applications Manager.

• Support Microsoft contract renewals (SKU analysis, vendor engagement) and manage licence allocation.

• Support and mentor junior team members and produce documentation, runbooks and knowledge-base articles that enable colleagues to work safely with Microsoft 365.

Essential skills

• Strong experience administering Microsoft Entra ID, including identity lifecycle, role-based access control, external/guest access, enterprise applications and app registrations (SSO, API permissions, consent, credential lifecycle).

• Hands-on experience administering and configuring Microsoft Azure — subscriptions, RBAC, virtual networking, Azure Policy and monitoring.

• Extensive experience managing SharePoint Online, OneDrive and Teams, including Copilot for Microsoft 365 administration (data readiness, governance, adoption).

• Advanced PowerShell and Microsoft Graph scripting for automation, provisioning and reporting.

• Good working experience of Exchange Online administration, including Exchange security, DLP, mail flow and email security (SPF, DKIM, DMARC, connectors, transport rules, DNS security, distribution lists).

• Working knowledge of Microsoft Intune for endpoint management, compliance, Autopilot and application deployment.

• Experience of managing Microsoft licensing across a global estate and working with Microsoft partners.

Desirable skills

• Experience with Conditional Access, MFA, PIM and Identity Protection in order to support Information Security in the design and operation of Zero Trust controls

• Understanding of Zero Trust security principles and their practical implementation across identity, endpoint and data.

• Experience of migrating hybrid Active Directory to a cloud-only Entra ID model.

• Experience with hybrid identity (Entra Connect / Azure AD Connect).

• Working knowledge of Microsoft Purview (DLP, retention, sensitivity labels, eDiscovery).

• Experience developing and deploying Azure resources using Infrastructure as Code (Bicep, ARM or Terraform) and PowerShell or Azure CLI.

• Experience with GitHub or similar tools for source control and CI/CD of infrastructure and automation.

• Experience with Azure Monitor and Log Analytics.

• Experience with Power BI for reporting and dashboards.

• Experience of managing endpoints through Microsoft Intune — compliance policies, Autopilot, application deployment and app protection.

• Familiarity with related tools and platforms, such as ShareGate (migration), Admindroid (reporting), Checkpoint Harmony Email Security and AvePoint Backup (or equivalents), AWS SES, Google Workspace (migration/coexistence) and Azure networking (private endpoints, VPN/ExpressRoute).

Behaviours

• Ownership of day-to-day operations and initiative — drives improvements without needing to be prompted.

• Personal use of AI — actively uses Copilot and other AI tools in day-to-day work and models good practice for colleagues.

• Strong communication across technical and non-technical audiences.

• Collaboration and knowledge-sharing — mentors junior colleagues and enables safe self-service.

Experience and qualifications

• 5+ years' hands-on experience administering Microsoft 365 at enterprise or global scale.

• Demonstrable experience administering and configuring Microsoft Azure in an enterprise environment.

• A relevant Bachelor's degree or equivalent professional experience.

Working arrangements

Not an on-call role, but occasional out-of-hours work may be required for major changes and security incident response. Minimal international travel may be required

Equality Statement: SmartStream is an equal opportunities employer. We are committed to promoting equality of opportunity and following practices which are free from unfair and unlawful discrimination.