Microsoft 365 Security

Job Vacancy:
Microsoft 365 Security Engineer

Technical team - helping customers strengthen identity, devices, data and Microsoft 365 security.

Director of Operations

Full-time, permanent

Buckingham office, with flexible remote working

Technical

To be agreed

Competitive, based on skills and experience

CloudyIT is a UK Microsoft partner specialising in the Modern Workplace. We support around 800 clients across the UK, with approximately 65% being councils, alongside non-profits and SMEs. We help our customers use Microsoft 365 confidently, securely and effectively. We also develop Gov Redact, our secure redaction service designed to support organisations with Subject Access Requests (SARs) and Freedom of Information (FOI) requests.

You will join a dynamic, growing team where your work has a direct and visible impact on our customers and services.

To help CloudyIT customers improve and maintain the security of their Microsoft 365 environments. You will assess configurations, implement agreed security controls, investigate security-related issues and provide clear guidance that is proportionate to each customer’s needs, risks and working practices.

• Review Microsoft 365 security configurations and identify risks, gaps and practical improvements.
• Configure and maintain identity and access controls, including multifactor authentication and Conditional Access.
• Support secure device management through Microsoft Intune and related Microsoft 365 services.
• Help protect email, collaboration and data services using approved Microsoft security controls.
• Investigate security alerts, suspicious activity and customer-reported security concerns, escalating where required.
• Support incident response activities and maintain clear technical records of findings and actions.
• Apply CloudyIT security standards and document customer-specific decisions, exceptions and recommendations.
• Communicate security risks and proposed changes clearly to technical and non-technical customers.
• Contribute to security baselines, checklists, knowledge articles and continuous service improvement.
• Coordinate and support the Cyber Essentials certification process, including evidence gathering, readiness checks, remediation tracking and renewal activity.
• Contribute to the delivery and continuous improvement of Gov Redact, supporting customers with secure redaction workflows for Subject Access Requests (SARs) and Freedom of Information (FOI) requests.
• Work with onboarding, migration and support colleagues to build security into customer changes from the outset.

• Practical experience in Microsoft 365 administration, security, infrastructure or a similar technical role.
• Good working knowledge of Entra , Microsoft Intune, Exchange Online, Teams and SharePoint administration.
• Understanding of identity protection, access control, device compliance, email security and data protection principles.
• A careful, evidence-based approach to investigation, change and documentation.
• Good judgement, including when to act, seek further evidence or escalation.
• Clear written and verbal communication, including the ability to explain technical matters in plain English.
• Organised and dependable, able to manage multiple activities and deadlines.
• A positive, customer-focused attitude and a willingness to learn.
• Microsoft certifications such as SC-900
  , SC-300
  , MS-102
  , MD-102 or related security qualifications.
• Experience with Microsoft Defender, Microsoft Purview or Microsoft Sentinel.
• Knowledge of Cyber Essentials, information governance, redaction, SARs or FOI processes.
• Experience implementing Conditional Access, privileged access, security baselines or…