Cloud & Microsoft 365 Engineer; Mid-Senior

Cape Town

Sonata One is a rapidly scaling, regulated fund services and technology (fintech) business. We’re The Private Funds Clearinghouse, connecting more than 53,000 investors with 6,500 funds and 180 fund managers around the globe. Our vision is to change the paradigm of private markets investing through harmonising the end-to-end investment process within one platform. Investors benefit from a seamless, one‑and‑done experience across the fund lifecycle (from fund selection and subscription through to settlement and reporting) underpinned by a globally compliant KYC passport and 24/7 support.

Fund managers can raise capital faster at a lower cost from a wider pool of pre‑approved investors. Founded in 2015, Sonata One has a presence in eight locations worldwide including the US, UK and Luxembourg, Guernsey, South Africa and Mauritius.

Sonata One is seeking an experienced Cloud & Microsoft 365 Engineer to own the design, implementation, and ongoing operation of our Microsoft cloud estate. You will act as a senior technical owner across identity, endpoint management, collaboration, data governance, security operations, and automation—ensuring our M365 environment is secure, compliant, scalable, and aligned with business outcomes.

This is a hands‑on engineering role with significant architectural influence: you will translate security and governance requirements (including SOC 2, ISO 27001, and NIST‑aligned controls) into practical configurations, automation, and operational processes. You will partner with business stakeholders, IT operations, and external vendors to deliver reliable services, lead complex initiatives, and drive continuous improvement across the Microsoft stack.

• Operate within ITIL‑aligned practices: incidents, changes, problems, and service requests with clear SLAs and communication.
• Plan and lead M365 projects using structured project management (scope, timeline, risk, stakeholder management).
• Coordinate cross‑functional delivery (security, infrastructure, applications, vendors) to meet business deadlines and quality standards.
• Act as primary escalation contact for 2nd & 3rd level end‑user support issues.
• Lead the design, implementation, and lifecycle management of Microsoft Intune for enterprise mobile device and application management.
• Configure and manage mobile application deployment, updates, and retirement within Microsoft 365.
• Implement Conditional Access
  , security baselines, compliance policies, and data protection controls for mobile devices and managed applications.
• Oversee MDM and MAM across supported mobile platforms (iOS, Android, Windows).
• Automate enrolment, compliance remediation, and operational workflows; drive measurable efficiency and reliability improvements.
• Ensure all devices accessing Sonata One resources meet defined security and governance standards.
• Architect and implement identity and access management (IAM) solutions using Microsoft Entra .
• Design and deploy secure authentication including MFA, SSO, and modern auth patterns for cloud and integrated applications.
• Integrate third‑party SaaS and line‑of‑business applications while maintaining least‑privilege and strong security posture.
• Provide expert guidance on identity governance, privileged access, and Entra best practices.
• Automate identity‑related operations (group management, licensing workflows, lifecycle tasks) where appropriate.
• Support SOC 2 control activities through documented processes and regular user access reviews.

• Own the identity lifecycle: joiner/mover/leaver, role‑based access control (RBAC), and federation where applicable.
• Design, configure, and automate identity governance workflows to meet internal policy and regulatory expectations.
• Implement self‑service identity and password management capabilities aligned with security policy.
• Drive adoption and maturation of the Microsoft Identity Governance capabilities (access reviews, entitlement management, lifecycle workflows).
• Conduct periodic access certifications with business owners in line with SOC 2 and Sonata One access control policies.
• Lead administration and support of Mi…