M365 and Entra Technical Architect

The Azure Engineer is responsible for building, operating, and optimising cloud infrastructure and platform services within Microsoft Azure. This role provides hands-on engineering, operational support, and continuous improvement of Azure services to ensure secure, scalable, and resilient cloud delivery. The engineer works closely with architects, security teams, and application owners to implement solutions that follow best practice, automation standards, and governance controls.

• Deep understanding of Microsoft 365 architecture including Exchange Online, SharePoint Online, Teams, OneDrive, and Purview.
• Expert knowledge of Entra ID concepts including Conditional Access, MFA, PIM, identity lifecycle, hybrid identity, and identity protection.
• Strong working knowledge of Zero Trust, modern security models, and Microsoft Security stack integrations.
• Understanding of endpoint management frameworks including Intune, compliance policy design, Autopilot, and device governance.
• Familiarity with modern authentication protocols including OAuth 2.0, OIDC, SAML, SCIM, and certificate-based authentication.
• Knowledge of compliance frameworks and data governance within Microsoft 365 (DLP, retention, eDiscovery).
• Understanding of Microsoft Graph, automation tooling, and API-based platform integrations.
• Solid awareness of enterprise networking concepts and their interactions with cloud services.
• Knowledge of service management frameworks (e.g., ITIL) and operational governance models.
• Awareness of cloud cost management, licensing optimisation, and platform lifecycle planning.., * Ability to design secure, scalable, and resilient enterprise architectures across M365 and Entra ID.
• Strong analytical and problem-solving skills with ability to resolve complex identity and collaboration challenges.
• Excellent documentation skills, including HLDs, LLDs, architectural diagrams, and technical standards.
• Strong stakeholder management and the ability to explain technical concepts to non-technical audiences.
• Hands-on skills with PowerShell, Microsoft Graph, and automation tooling.
• Ability to lead workshops, design sessions, and technical governance forums.
• Skilled in architectural reviews, solution assurance, and quality control processes.
• Ability to work across teams including security, networking, service management, and engineering.
• Strong change management and adoption-driven mindset.
• Capable of mentoring engineers and contributing to team capability maturity.., * Microsoft Certified: Cybersecurity Architect Expert, Identity and Access Administrator, or related certifications.
• Microsoft 365 Certified: Enterprise Administrator Expert or equivalent experience.
• Relevant certifications in security frameworks (e.g., CISSP, CCSP) are desirable.
• Formal architecture qualifications (e.g., TOGAF, SABSA) beneficial but not mandatory.
• Proven experience delivering large-scale M365 or Entra transformations.
• Background in enterprise IT, cloud architecture, or related disciplines.
• Strong grounding in ITIL or similar IT service management frameworks.
• Experience working in large, complex enterprise or regulated environments.
• Evidence of ongoing professional development in cloud and security technologies.
• Bachelor's degree in Computer Science, Information Systems, or equivalent practical experience (preferred but not

This is a great opportunity to work within one of the UK's leading Defence organisations based In Frimley or Preston. Mainly remote with 1-2 days per month on site.