Microsoft 365 Security & Identity Administrator

Tata Consultancy Services; Philippines; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

Tata Consultancy Services in the Philippines is seeking a Microsoft 365 Security & Identity Administrator to operate and secure Microsoft 365, identity, endpoint, cloud, and core Windows infrastructure services. You will work with Infrastructure, Security Operations, Risk, Audit, and Compliance teams to maintain platform availability and enforce security controls.

The role covers Exchange Online, Entra ID, Intune, Purview, and Azure services, including on-premises integration, SSO, and

Qualifications

• Bachelor’s degree in IT or related field or equivalent experience.
• Microsoft Identity and Access Administrator Associate (SC-300) certification.
• Microsoft Information Protection and Compliance Administrator Associate (SC-400) certification.

Responsibilities

• Administer Exchange Online mailboxes, groups, and mail-flow configurations.
• Manage Entra ID and hybrid identity synchronization.
• Configure MFA, Conditional Access, RBAC, and SSO integrations.
• Maintain Intune device management and Autopilot configurations.
• Monitor Purview data classification, DLP, retention, and eDiscovery.
• Administer DNS, PKI, SSL/TLS certificates, and certificate lifecycle management.
• Document incidents, changes, risks, and remediation plans.
• Collaborate with Security Ops, Risk, Audit, and Compliance teams.

Skills

Exchange Online admin

Entra ID & AD

Intune admin

Purview & DLP

Azure admin

Windows Server admin

PKI & SSL/TLS

SSO integrations

PowerShell

ITIL knowledge

Education

Bachelor’s degree or equivalent

SC-300 / Identity & Access Administrator

SC-400 / Information Protection & Compliance

Tools

Azure Portal

Entra Connect

Exchange Online Admin Center

Job description

The Microsoft 365 Security & Identity Administrator is responsible for the secure, reliable, and compliant operation of Microsoft 365, identity, endpoint, cloud, and core Windows infrastructure services. The role covers Exchange Online, Microsoft Intune, Microsoft Entra ID, Microsoft Purview, Security & Compliance, Azure, Active Directory Domain Services, DNS, internal certificates, Single Sign-On, system administration, and operational documentation.

The position works with Infrastructure, Security Operations, Application, Risk, Audit, and Compliance teams to maintain platform availability, enforce security controls, resolve incidents, and support regulatory and audit requirements in an enterprise or BFSI environment.

1. Microsoft 365 & Exchange Online

• Administer Exchange Online mailboxes, shared mailboxes, distribution groups, transport rules, connectors, and mail-flow configurations.
• Investigate email delivery, access, authentication, spam, phishing, and service-related issues.
• Manage Microsoft 365 licensing, administrative roles, service health, and tenant configurations.
• Implement and maintain secure messaging and collaboration configurations in line with organizational

2. Identity, Active Directory & SSO

• Administer Microsoft Entra ID and on-premises Active Directory Domain Services, including users, groups, organizational units, service accounts, and Group Policy.
• Support hybrid identity synchronization using Microsoft Entra Connect and troubleshoot directory synchronization issues.
• Configure and maintain Multi-Factor Authentication, Conditional Access, Role-Based Access Control, and identity governance controls.
• Integrate enterprise applications with Single Sign-On using SAML, OAuth 2.0, and OpenID Connect.
• Support joiner, mover, and leaver processes, periodic access reviews, and removal of orphaned or excessive access.

3. Endpoint Management with Microsoft Intune

• Manage device enrollment, configuration profiles, compliance policies, security baselines, and application deployment through Microsoft Intune.
• Support Windows Autopilot, mobile device management, mobile application management, and endpoint lifecycle activities.
• Monitor device compliance and coordinate remediation for non-compliant or unhealthy endpoints.
• Collaborate with endpoint security teams to maintain secure configuration and operational readiness.

4. Microsoft Purview, Security & Compliance

• Administer Microsoft Purview capabilities for data classification, sensitivity labels, Data Loss Prevention, retention, records management, audit, and eDiscovery support.
• Monitor Microsoft 365 security and compliance dashboards and coordinate corrective actions for identified gaps.
• Support compliance assessments and evidence collection for internal policies and applicable regulatory frameworks.
• Assist investigations involving data handling, unauthorized access, information protection, and compliance events.
• Administer Azure subscriptions, resource groups, virtual machines, storage, networking, monitoring, and access assignments within the approved scope.
• Perform Windows Server administration, health monitoring, capacity checks, configuration management, backup validation, and troubleshooting.
• Implement cloud governance, tagging, least-privilege access, logging, and security configuration standards.
• Support incident, problem, change, release, and service request processes in accordance with ITSM practices.

6. DNS, Certificates & Core Infrastructure

• Administer internal DNS zones, records, forwarders, conditional forwarding, name resolution, and related troubleshooting.
• Manage internal Public Key Infrastructure and certificate lifecycle activities, including request, issuance, deployment, renewal, revocation, and expiry monitoring.
• Support SSL/TLS and application certificates used by internal systems, cloud services, and SSO integrations.
• Maintain availability and resiliency of Domain Controllers, DNS, identity, and certificate services.

7. Documentation & Governance

• Create and maintain SOPs, runbooks, architecture diagrams, configuration standards, knowledge articles, and troubleshooting guides.
• Keep asset, access, certificate, patching, and configuration records current and audit-ready.
• Document incidents, root cause analyses, changes, risks, exceptions, and remediation plans.
• Participate in disaster recovery exercises, control testing, operational reviews, and internal or external audits.

Technical Skills

• Exchange Online and Microsoft 365 administration
• Microsoft Entra ID, Active Directory Domain Services, Entra Connect, MFA, Conditional Access, and RBAC
• Microsoft Intune, Windows Autopilot, MDM, MAM, compliance policies, and security baselines
• Microsoft Purview, DLP, sensitivity labels, retention, audit, eDiscovery, and compliance capabilities
• Microsoft Azure administration covering identity, compute, networking, storage, monitoring, and governance
• Windows Server administration, Group Policy, DNS, and hybrid infrastructure troubleshooting
• Internal PKI, SSL/TLS certificates, certificate lifecycle management, and SSO integrations
• Patch management, vulnerability remediation, change management, incident management, and technical documentation
• Working knowledge of PowerShell for administration, reporting, and operational automation

Preferred Qualifications & Certifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related discipline, or equivalent relevant experience.
• Microsoft Certified: Identity and Access Administrator Associate (SC-300).
• Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400).
• Microsoft 365, Security, Compliance, and Identity certifications are advantageous.
• ITIL Foundation or equivalent IT service management knowledge is preferred.

Preferred Certifications

• Microsoft Identity & Access Administrator (SC-300)
• CISSP / SSCP
• CISM
• CompTIA Security+
• Certified IAM or PAM practitioner certifications