Microsoft 365 Security

Job Vacancy: Microsoft 365 Security Engineer

Technical team - helping customers strengthen identity, devices, data and Microsoft 365 security.

Reports To:

Director of Operations

Contract Type:

Full-time, permanent

Location:

Buckingham office, with flexible remote working

Team:

Technical

Start Date:

To be agreed

Competitive, based on skills and experience

About CloudyIT:

CloudyIT is a UK Microsoft partner specialising in the Modern Workplace. We support around 800 clients across the UK, with approximately 65% being councils, alongside non-profits and SMEs. We help our customers use Microsoft 365 confidently, securely and effectively. We also develop GovRedact, our secure redaction service designed to support organisations with Subject Access Requests (SARs) and Freedom of Information (FOI) requests. You will join a dynamic, growing team where your work has a direct and visible impact on our customers and services.

Purpose of the Role:

To help CloudyIT customers improve and maintain the security of their Microsoft 365 environments. You will assess configurations, implement agreed security controls, investigate security-related issues and provide clear guidance that is proportionate to each customer’s needs, risks and working practices.

Key Responsibilities:

• Review Microsoft 365 security configurations and identify risks, gaps and practical improvements.
• Configure and maintain identity and access controls, including multifactor authentication and Conditional Access.
• Support secure device management through Microsoft Intune and related Microsoft 365 services.
• Help protect email, collaboration and data services using approved Microsoft security controls.
• Investigate security alerts, suspicious activity and customer-reported security concerns, escalating where required.
• Support incident response activities and maintain clear technical records of findings and actions.
• Apply CloudyIT security standards and document customer-specific decisions, exceptions and recommendations.
• Communicate security risks and proposed changes clearly to technical and non-technical customers.
• Contribute to security baselines, checklists, knowledge articles and continuous service improvement.
• Coordinate and support the Cyber Essentials certification process, including evidence gathering, readiness checks, remediation tracking and renewal activity.
• Contribute to the delivery and continuous improvement of GovRedact, supporting customers with secure redaction workflows for Subject Access Requests (SARs) and Freedom of Information (FOI) requests.
• Work with onboarding, migration and support colleagues to build security into customer changes from the outset.

What We Are Looking For:

• Practical experience in Microsoft 365 administration, security, infrastructure or a similar technical role.
• Good working knowledge of Entra ID, Microsoft Intune, Exchange Online, Teams and SharePoint administration.
• Understanding of identity protection, access control, device compliance, email security and data protection principles.
• A careful, evidence-based approach to investigation, change and documentation.
• Good judgement, including when to act, seek further evidence or escalation.
• Clear written and verbal communication, including the ability to explain technical matters in plain English.
• Organised and dependable, able to manage multiple activities and deadlines.
• A positive, customer-focused attitude and a willingness to learn.
• Microsoft certifications such as SC-900 , SC-300 , MS-102 , MD-102 or related security qualifications.
• Experience with Microsoft Defender, Microsoft Purview or Microsoft Sentinel.
• Knowledge of Cyber Essentials, information governance, redaction, SARs or FOI processes.
• Experience implementing Conditional Access, privileged access, security baselines or endpoint compliance policies.
• Experience working in a managed service provider or supporting councils, charities or other small organisations.

Development and Future Opportunities:

This role provides a pathway to develop deeper expertise across Microsoft cloud security, Cyber Essentials and secure information handling. As your experience develops, there may be opportunities to specialise further in areas such as identity and access, endpoint security, Microsoft Defender, compliance, security-focused customer onboarding or the continued development of GovRedact. Development will be shaped around business needs, your strengths and your career interests, with support to work towards relevant Microsoft and security skills and certifications.

Working Pattern:

Based at our Buckingham office, with flexibility for remote working. Occasional travel to customer offices may be required, with reasonable notice and expenses covered.

Pay and Benefits:

Salary will be agreed based on the successful candidate’s skills, experience and suitability for the role, and will be reviewed annually.

• A range of staff benefits, which we will be happy to talk through at interview.
• Training and development opportunities aligned to the role and future specialisms.

#J-18808-Ljbffr

Full job description from WhatJobs. Apply for this role →