Microsoft 365 Security Engineer Our client, a well-established international hospitality brand with a strong family culture, is looking for a Microsoft 365 and Security Infrastructure Administrator who loves building things properly. This role sits at the heart of the organisation''s cyber security strategy. You''ll take a clear security vision and engineer it into a scalable, automated Microsoft cloud platform that''s secure by design. Scalable infrastructure: ad-hoc management replaced by a fully automated, policy-driven environment. Proactive security: security gaps remediated before they''re exploited, with a focus on long-term stability. Metrics-driven operations: a regular cadence of high-signal reporting on platform health and risk reduction. Zero-touch operations: secure, automated provisioning that minimises manual intervention. Key responsibilities Identity, access and segregation (Entra ID): optimise directory structure using Administrative Units and enforce strict segregation of duties. Endpoint security and device management (Intune): configure MDM/MAM and automated deployment across all device types. Platform hardening and security baselines: implement secure-by-design baselines across the Microsoft 365 stack, including Copilot. Azure tenant and cloud governance: enforce data residency and Zero Trust principles, using Infrastructure as Code (Terraform). SharePoint and collaboration governance: deliver site lifecycle management and external sharing controls. ..... full job details .....