About the Role
This is a hands-on Lead Engineer role focusing on the design, security, and operation of the Microsoft 365 estate, Entra ID, and Azure platform. You will take ownership of the architecture and governance, ensuring the technical standards are set and applied consistently. This position requires collaborating with Information Security, Application Support, Product Engineering, and business stakeholders to enhance platform reliability, security, costs, and user experience.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
What You’ll Own:
- Own the architecture, security, and operation of the Microsoft 365 estate, including Exchange Online, SharePoint, OneDrive, Teams, Intune, Defender, and Purview.
- Own Entra ID as the organization's identity platform, managing Conditional Access, Privileged Identity Management, hybrid identity, application integration, and identity governance.
- Own Azure platform engineering and governance, including landing zones, subscription and policy design, monitoring, access control, and cost management.
- Define technical standards for the platform and ensure proper application across the estate.
- Design and maintain the security posture across the estate, covering Zero Trust access, device compliance, data protection, and retention, while providing evidence for audits and customer assurance.
- Automate platform administration and manage configuration as code, utilizing version control and change management.
- Lead significant platform changes such as migrations, tenant work, and new service introductions from design to stable operation.
- Act as the senior technical escalation point for platform issues, ensuring root causes are permanently addressed.
- Mentor engineers through design reviews, technical guidance, and knowledge sharing.
- Assess the Microsoft roadmap, providing advice on adoption implications for cost, security, and user experience.
- Within six months, assess the estate, agree on risks and priorities, close priority identity and privileged access gaps, publish technical standards, and begin automating repetitive administration tasks.
- Within twelve months, demonstrate improved security, collaboration, identity reliability, auditable configuration as code, effective Azure cost and access governance, and strengthened engineering capability.
Qualifications
What We’re Looking For:
- Deep hands-on expertise across the Microsoft 365 estate at enterprise scale, including Exchange Online, SharePoint, OneDrive, Teams, and Intune.
- Strong Entra ID engineering experience covering Conditional Access design, Privileged Identity Management, hybrid identity, directory synchronization, application registration, single sign-on, and identity governance.
- Experience leading large-scale Microsoft 365 platform work such as tenant migration or consolidation through to a stable outcome.
- Practical security and compliance capability within Microsoft 365, including Zero Trust principles, Defender, and Purview for data protection, retention, and eDiscovery.
- Skills in automation and infrastructure as code, with strong PowerShell expertise and experience with Bicep, Terraform, or ARM.
- Knowledge of Azure platform engineering and governance, including subscription and landing zone design, Azure Policy, RBAC, monitoring, and cost control.
- Sound technical judgment with the ability to clearly explain technical decisions to non-technical stakeholders.
Nice to Have
- Technical leadership experience of a small engineering team or acting as a design authority.
- Microsoft certifications such as Identity and Access Administrator, Microsoft 365 Administrator Expert, or Azure Solutions Architect Expert.
- Experience meeting UAE regulatory or public sector security requirements, supporting customer security assurance, and audit.
- Familiarity with securing and integrating AI services within a Microsoft estate, including Copilot governance and data readiness.
- Exposure to hybrid or multi-cloud environments alongside Azure.
- Experience working with other platforms such as Zscaler, Aruba ClearPass, Cofense, ManageEngine, ServiceNow, and Jira Service Management.
- Experience implementing and operating Microsoft Dynamics.
- Experience in an environment where the platform supports both customer-facing products and internal users.
What Working At the company Offers
- Culture: An open, diverse, and inclusive environment with a global vision that encourages personal growth and focuses on ground-breaking, industry-first innovations.
- Career: Outstanding learning, development, and growth opportunities through structured training programs and innovative, high-tech projects.
- Rewards: A competitive remuneration package with a range of perks including healthcare, education support, leave benefits, and more.
