Cyber Security Platform Engineer – Microsoft

# Cyber Security Platform Engineer – Microsoft - LondonIT/Information/Cyber Security Ref:198 Date Posted:
Monday 25 May 2026

Linked In Facebook X

Title:

Cyber Security Platform Engineer – Microsoft Reference No:
2161

Company:
FTSE 100

Reports to
Security Platform Engineering Manager

Location:

London Working Pattern               37.5 hours per week, Monday – Friday.

Location:

London/Peterborough, with potential travel to divisional sites as required by advisory engagements (hybrid working arrangements in place).Salary:
£59,000 - £72,000

Benefits
Bupa, Matched pension contributions.
** The Role
**** Group Cyber Security Overview
** The Group Cyber Security (GCS) team is responsible for managing cyber risk appropriately across) the Group  and has recently refreshed its cyber strategy, with a renewed focus on embedding cyber security as part of the culture and DNA. This is a highly federated business model spanning 11 divisions and over 50 countries, and the cyber strategy has been designed to build materially improved security capabilities whilst working with a divisional focus.

It is an exciting time to join GCS. We are in a period of significant investment, with a multi-year transformation programme under way to build new security capabilities  is responsible for setting the Group cyber standard, measuring compliance against it across all the businesses, and delivering a portfolio of centrally managed security services that divisions can rely on.

The Security Platform Engineering function is central to that portfolio – responsible for ensuring that the security tools the organisation invests in are deeply understood, expertly configured, continuously improved, and consistently delivering their intended security and business value. Microsoft is the most strategically significant security platform, and the uplift and optimisation of the Microsoft security estate is one of the most consequential engineering challenges in the GCS transformation programme.
** Role Summary
** Reporting to the Security Platform Engineering Manager, the Cyber Security Platform Engineer – Microsoft is the Group dedicated technical authority for the Microsoft security platform. The role carries implied ownership of the full Microsoft security stack: the M365 Defender suite, the security-relevant capabilities of Microsoft Entra  (conditional access, Privileged Identity Management, access packages, and least privilege), Intune, and the foundational configuration of the Microsoft 365 and Azure environments on which all of these depend.

This is a role that extends beyond BAU platform management: a significant part of the initial mandate is to critically assess the current state of the Microsoft estate – spanning E3, Active Directory, Entra , Intune, and existing Defender deployments – identify the gaps against vendor-recommended best practice and the Group cyber standard, and build a prioritised strategy and plan to close them.

This role is the primary technical owner of that relationship on the GCS side – working directly with the Microsoft team to prioritise, plan, and drive the E5 deployment across the estate, and ensuring that the professional services and engineering resources available are directed at the highest-value activities. The role must navigate the realities of the federated organisation with skill: delivery will depend on partnership with divisional IT teams, and getting there will require excellent stakeholder management, a clear change communication approach, and an absolute commitment to end-user experience.

Zero tolerance for avoidable downtime is not a preference – it is a non-negotiable operating constraint.

The role works in close partnership with the Cyber Architecture Manager, the Group CTO function, the IT Frameworks Director, Assurance leads, Divisional Security Leads, and the Identity Transformation team. It shares the defining mindset of the whole platform engineering function: genuine passion for the Microsoft platform, curiosity about its full capability, and the drive to get to a secure, consistent, vendor-recommended configuration as quickly and as safely as possible.
** Role Responsibilities / Accountabilities
*…