Senior Microsoft Engineer (Level 3) | Azure | M365 | Security

About the Role We are seeking an experienced Senior Microsoft Engineer (Level 3) to serve as a technical authority within a high-performing operations team, supporting complex Microsoft cloud environments across multiple commercial customers. This is a hands-on senior engineering role focused on resolving complex technical escalations, strengthening security standards, driving technology modernisation, and improving operational efficiency. You will leverage your expertise across Microsoft 365, Microsoft Intune, Microsoft Entra ID, Microsoft Defender, and Microsoft Azure to deliver secure, scalable, and reliable technology solutions. Beyond reactive support, you will proactively identify opportunities to optimise customer environments, enhance security, improve licensing efficiency, and reduce operational complexity. You will also play a key role in mentoring engineers, establishing technical standards, and driving continuous improvement across the wider technical team. About the Client You will be working with an established technology services provider that delivers managed IT services and Microsoft cloud solutions to commercial customers. The organisation prioritises security, operational excellence, and proactive technology management, empowering its technical teams to deliver reliable solutions while continuously improving customer environments. Ideal Profile Professional Experience At least 7 years of experience in systems engineering, cloud engineering, or managed IT services, including significant experience in senior technical support or Level 3 engineering. Proven experience working within a Managed Service Provider (MSP), supporting multiple commercial customer environments. Strong understanding of managed services operations, incident management, problem management, and change management. Demonstrated ability to own complex technical issues, conduct root-cause analysis, and deliver sustainable solutions. Microsoft Intune & Endpoint Management Advanced hands-on experience with Microsoft Intune and Microsoft Endpoint Manager. Strong knowledge of Windows Autopilot, device enrolment, configuration profiles, compliance policies, application deployment, and Windows 10/11 administration. Experience with endpoint security, device lifecycle management, update management, and Microsoft Defender for Endpoint integration. Microsoft 365 Advanced administration and troubleshooting experience across Microsoft 365, including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams. Knowledge of Microsoft 365 licensing, including Business Premium, E3, and E5, and their associated security and compliance capabilities. Understanding of Microsoft Purview, including Data Loss Prevention (DLP) policies and sensitivity labels. Microsoft Entra ID & Identity Security Deep expertise in identity and access management, authentication, identity protection, and access governance. Advanced experience implementing and troubleshooting Conditional Access, multifactor authentication (MFA), and Single Sign-On (SSO). Knowledge of hybrid identity, Entra Connect, directory synchronisation, authentication protocols, role-based access control, and least-privilege security models. Familiarity with Granular Delegated Admin Privileges (GDAP) and delegated administration across multiple customer tenants. Microsoft Defender & Cybersecurity Strong hands-on experience with Microsoft Defender for Endpoint and the broader Microsoft Defender security ecosystem. Experience implementing endpoint protection, attack surface reduction, vulnerability management, and security policies. Knowledge of Microsoft Defender for Office 365, Microsoft Defender XDR, Zero Trust principles, and Microsoft security best practices. Ability to review Microsoft Secure Score and implement recommendations to strengthen security posture. Microsoft Azure Strong experience administering and troubleshooting Azure environments, including virtual machines, networking, storage...