Senior Microsoft Enterprise Systems Engineer

• Deploy, administer, and harden Active Directory Domain Services (AD DS)
• Deploy and support Exchange Server SE
• Deploy and support SharePoint Server SE
• Design and implement enterprise Microsoft infrastructure services in secure and air-gapped environments
• Enforce security controls, including Group Policy Objects (GPOs), role-based access control (RBAC), and platform hardening standards
• Operate and maintain business-critical services in classified environments
• Collaborate with security, architecture, and engineering teams to deliver enterprise solutions
• Produce technical designs, implementation plans, and service documentation
• Support governance activities and Technical Design Authority (TDA) reviews
• Develop high-level, conceptual, and low-level designs (HLDs, CLDs, and LLDs), operational procedures, and runbooks

Technologies:

• AI
• Active Directory
• Azure
• Cloud
• Support
• Microsoft 365
• Network
• RBAC
• Security
• SharePoint
• Office 365

• 7+ years of Microsoft enterprise infrastructure experience
• Strong hands-on experience with Active Directory Domain Services (AD DS)
• Strong experience with Exchange Server SE
• Strong experience with SharePoint Server SE
• Experience operating in disconnected or restricted-network environments
• Experience working in regulated or classified environments
• Strong technical documentation and stakeholder communication skills, including the ability to communicate effectively with technical and non-technical stakeholders
• Strong written communication skills for producing high-quality design outputs
• The posting states that candidates must hold active SC/DV clearance and UK citizenship; it also states that existing SC clearance or clearance before commencement is required, with willingness to undergo DV
• UK work authorisation is required
• Ability to attend on site in London or Bristol when required, typically around three days per week
• Desirable: experience with government classified systems or secure data centres; configuring and using AI technologies in cloud environments; familiarity with NCSC guidance, UK Government cloud policies, or cross-domain architectures; Microsoft Azure, Microsoft 365, or other relevant cloud certifications; existing DV clearance

We are ByDesign Secure, an independent, outputs-based consultancy focused on complex data assurance challenges in the UK public sector. Our lean specialist team is contributing to a cross-government secure IT transformation, including building a private cloud environment and modernising end-user services. This role supports the design, deployment, and operation of secure Microsoft enterprise services and core collaboration and identity platforms. We offer work on nationally significant projects, a multi-year programme with long-term stability, and career growth. The role is temporary or fixed-term, outside IR35, with a rate of £525-£625 per day. It is hybrid, with work in London or Bristol and Bristol preferred.