Lead Engineer - M365

About the Role
The company is focused on owning the design, security, and operation of the Microsoft 365 estate, Entra ID, and Azure platform. This hands-on Lead Engineer role sets technical standards, leads a small engineering group, and serves as the final technical escalation point. You'll collaborate with Information Security, Application Support, Product Engineering, and business stakeholders to enhance platform reliability, security, cost, and user experience.

Responsibilities
What You’ll Own

• Own the architecture, security and operation of the Microsoft 365 estate, including Exchange Online, SharePoint, OneDrive, Teams, Intune, Defender, and Purview.
• Own Entra ID as the organization's identity platform, covering Conditional Access, Privileged Identity Management, hybrid identity, application integration, and identity governance.
• Own Azure platform engineering and governance, including landing zones, subscription and policy design, monitoring, access control, and cost management.
• Define the technical standards for the platform and ensure they are applied consistently across the estate.
• Design and maintain the security posture across the estate, including Zero Trust access, device compliance, data protection and retention, providing evidence required for audit and customer assurance.
• Automate platform administration and manage configuration as code, with appropriate version control and change management.
• Lead significant platform changes such as migrations, tenant work, and new service introductions, from design through to stable operation.
• Act as the senior technical escalation point for platform issues and ensure root causes are addressed permanently.
• Mentor engineers through design review, technical guidance, and knowledge sharing.
• Assess the Microsoft roadmap and advise on adoption, including implications for cost, security, and user experience.
• Within six months, assess the estate, agree on risks and priorities, close priority identity and privileged-access gaps, publish technical standards, and begin automating repetitive administration.
• Within twelve months, demonstrate improved security, collaboration and identity reliability, auditable configuration as code, effective Azure cost and access governance, and stronger engineering capability.

Qualifications
What We’re Looking For

• Deep hands-on expertise across the Microsoft 365 estate at enterprise scale, including Exchange Online, SharePoint and OneDrive, Teams, and Intune.
• Strong Entra ID engineering experience covering Conditional Access design, Privileged Identity Management, hybrid identity and directory synchronization, application registration, single sign-on, and identity governance.
• Experience leading large-scale Microsoft 365 platform work such as tenant migration or consolidation, and managing it to a stable outcome.
• Practical security and compliance capability within Microsoft 365, including Zero Trust principles, Defender, and Purview for data protection, retention, and eDiscovery.
• Strong skills in automation and infrastructure as code, with proficiency in PowerShell and experience with Bicep, Terraform, or ARM.
• Experience with Azure platform engineering and governance, including subscription and landing zone design, Azure Policy, RBAC, monitoring, and cost control.
• Sound technical judgment and the ability to communicate technical decisions clearly to non-technical stakeholders.

Nice to Have

• Technical leadership of a small engineering team, or acting as a design authority.
• Microsoft certifications such as Identity and Access Administrator, Microsoft 365 Administrator Expert, or Azure Solutions Architect Expert.
• Experience meeting UAE regulatory or public sector security requirements, supporting customer security assurance and audit.
• Experience securing and integrating AI services within a Microsoft estate, including Copilot governance and data readiness.
• Exposure to hybrid or multi-cloud environments alongside Azure.
• Experience working with platforms such as Zscaler, Aruba ClearPass, Cofense, ManageEngine, ServiceNow, and Jira Service Management.
• Experience implementing and operating Microsoft Dynamics.
• Experience in environments where the platform supports customer-facing products as well as internal users.

Benefits

• Culture: An open, diverse, and inclusive environment that encourages personal growth and focuses on groundbreaking, industry-first innovations.
• Career: Outstanding learning, development, and growth opportunities via structured training programs and innovative, high-tech projects.
• Rewards: A competitive remuneration package with additional perks including healthcare, education support, leave benefits, and more.

If you want to work close to both advanced AI capability and real-world execution, we’d like to hear from you. We seek performance-driven, inquisitive minds with the agility to adapt to ambiguity and a passion for pioneering new frontiers in the AI space.