Job Title: Group M365 IS Engineer

Reports to: Group IS Technical Manager

Department: Information Services

Location: Crawley

_____________________________________________________________________

JOB FUNCTION

Responsible for monitoring, administering and securing the company’s computers, systems and users in a hybrid M365 and on-premises environment. Involved in the implementation and support of new and existing computer systems.

KEY RESPONSIBILITIES

Continuous development of the Microsoft 365 core platform and Exchange Online service including identifying, evaluating, and deploying new capabilities, processes, and solutions.

Design and implement Microsoft 365 and on-premises/AD security and compliance controls during and post M365 tenant-to-tenant an on-premises migrations.

Drive technical security improvements, working with internal and external teams and partners.

Assist with third level support cases interfacing with external companies and internal teams.

Drive operational excellence and automation whilst documenting procedures and training department personnel.

DETAILED RESPONSIBILITIES

Manage new/existing domains and the migration/integration of separate business entities as required.

Create and manage user accounts, groups, user/resource/shared mailboxes and public folders in a hybrid M365/AD environment.

Manage Exchange Online transport rules and email flow using Email Security Gateways. Manage DMARC for email domains.

Configure and manage security settings in M365/AD including RBAC, MFA, conditional access policies, group policies and third-party access to M365/AD

Create and manage VPN accounts for local/global users and third-party contractors. Configure and maintain granular vpn access and MFA on enterprise firewalls.

Investigate and apply improvements to hardware configurations, systems software, and application software to agreed security levels. Monitor and troubleshoot Microsoft Entra Connect and Microsoft 365 alerts and warnings.

Implement and maintain firewall and anti-virus technologies that secure IT systems. Identify and remediate security issues, develop plans and procedures to ensure safety and privacy of information.

Keep up to date with new Microsoft 365 product releases e.g. Copilot and regularly review new settings and features. Manage patching of Office 365 clients using Microsoft 365 Cloud update

SKILLS AND KNOWLEDGE

At least 3 years’ experience working with hybrid AD/M365 environments is essential, with a clear understanding of Azure/Entra/AD systems and Exchange online systems and security.

Experience in the configuration and maintenance of enterprise firewalls.

Competent in automation processes using PowerShell, scripts and policies.

Have a clear understanding of Server, PC and network security, including anti-virus systems, patch management, NTFS, MFA, SAML, RBAC, Group and User permissions.

Have a clear understanding of Active Directory/Entra user accounts, group policies and their implementation in a hybrid environment that includes Exchange online messaging.

Must be able to communicate effectively with persons at all levels, internally externally and with suppliers, often within a pressured environment.