Senior M365 Platform Engineer - 6 month FTC

Senior Microsoft 365 Platform Engineer - 6 month FTC

Location: Bristol, Hybrid 3 days office

The Senior Microsoft 365 Platform Engineer is a senior technical role responsible for the day-to-day running, security and service health of our Microsoft 365 tenant and Azure environment, with particular focus on Entra ID, SharePoint, OneDrive, Teams and Azure, as well as Copilot, Exchange Online and email security. This is a senior individual-contributor role with no direct reports, working within the technical direction set by the Global Business Applications Manager. The successful candidate will drive continuous improvement on their own initiative, mentor colleagues, and partner with Information Security, Risk & Compliance and Global IT to protect the organisation's data and enable secure productivity.

Requirements

• Run the Microsoft 365 platform day to day, maintaining its security posture and service health, and contributing to technical direction and roadmap planning.
• Administer Microsoft Entra ID — identity lifecycle, role-based access control, group management and external/guest access governance.
• Deliver and manage SaaS integrations with Microsoft 365 through Entra enterprise applications and app registrations (SSO, provisioning, API permissions, secrets and certificates).
• Administer and configure our Azure environment day to day — subscriptions, RBAC, networking, Azure Policy, monitoring and cost management — in line with agreed architecture and governance.
• Administer SharePoint Online, OneDrive and Teams (provisioning, external sharing, sensitivity labels, retention) and lead day-to-day administration of Copilot for Microsoft 365, including data readiness, licensing and adoption.
• Develop and maintain PowerShell and Microsoft Graph automation for provisioning, licensing and reporting.
• Manage Exchange Online mail flow — hybrid connectors, transport rules, anti-spam/anti-phishing and email authentication (SPF, DKIM, DMARC).
• Operate tenant backup and recovery for Microsoft 365 workloads (Exchange, SharePoint, OneDrive, Teams).
• Act as the senior escalation point for Microsoft 365 matters and lead initial investigation, triage and remediation of security incidents, including out-of-hours response where necessary. Escalate strategic or high-risk decisions to the Global Business Applications Manager.
• Support Microsoft contract renewals (SKU analysis, vendor engagement) and manage licence allocation.
• Support and mentor junior team members and produce documentation, runbooks and knowledge-base articles that enable colleagues to work safely with Microsoft 365.

Essential skills

• Strong experience administering Microsoft Entra ID, including identity lifecycle, role-based access control, external/guest access, enterprise applications and app registrations (SSO, API permissions, consent, credential lifecycle).
• Hands-on experience administering and configuring Microsoft Azure — subscriptions, RBAC, virtual networking, Azure Policy and monitoring.
• Extensive experience managing SharePoint Online, OneDrive and Teams, including Copilot for Microsoft 365 administration (data readiness, governance, adoption).
• Advanced PowerShell and Microsoft Graph scripting for automation, provisioning and reporting.
• Good working experience of Exchange Online administration, including Exchange security, DLP, mail flow and email security (SPF, DKIM, DMARC, connectors, transport rules, DNS security, distribution lists).
• Working knowledge of Microsoft Intune for endpoint management, compliance, Autopilot and application deployment.
• Experience of managing Microsoft licensing across a global estate and working with Microsoft partners.

Desirable skills

• Experience with Conditional Access, MFA, PIM and Identity Protection in order to support Information Security in the design and operation of Zero Trust controls
• Understanding of Zero Trust security principles and their practical implementation across identity, endpoint and data.
• Experience of migrating hybrid Active Directory to a cloud-only Entra ID model.
• Experience with hybrid identity (Entra Connect / Azure AD Connect).
• Working knowledge of Microsoft Purview (DLP, retention, sensitivity labels, eDiscovery).
• Experience developing and deploying Azure resources using Infrastructure as Code (Bicep, ARM or Terraform) and PowerShell or Azure CLI.
• Experience with GitHub or similar tools for source control and CI/CD of infrastructure and automation.
• Experience with Azure Monitor and Log Analytics.
• Experience with Power BI for reporting and dashboards.
• Experience of managing endpoints through Microsoft Intune — compliance policies, Autopilot, application deployment and app protection.
• Familiarity with related tools and platforms, such as ShareGate (migration), Admindroid (reporting), Checkpoint Harmony Email Security and AvePoint Backup (or equivalents), AWS SES, Google Workspace (migration/coexistence) and Azure networking (private endpoints, VPN/ExpressRoute).

Behaviours

• Ownership of day-to-day operations and initiative — drives improvements without needing to be prompted.
• Personal use of AI — actively uses Copilot and other AI tools in day-to-day work and models good practice for colleagues.
• Strong communication across technical and non-technical audiences.
• Collaboration and knowledge-sharing — mentors junior colleagues and enables safe self-service.

Experience and qualifications

• 5+ years' hands-on experience administering Microsoft 365 at enterprise or global scale.
• Demonstrable experience administering and configuring Microsoft Azure in an enterprise environment.
• A relevant Bachelor's degree or equivalent professional experience.

Working arrangements

Not an on-call role, but occasional out-of-hours work may be required for major changes and security incident response. Minimal international travel may be required