Infrastructure Engineer - Identity, Office 365, Security and Cloud Platforms

Infrastructure and Cloud Engineer - Role Overview This role sits within the Infrastructure team, supporting the identity, security, endpoint, messaging, Microsoft 365 and cloud platforms that underpin the wider IT estate. It is a platform-ownership and 3rd-line technical role, acting as the key escalation point for the Service Desk and owning complex issue resolution. The role holder will have primary ownership of Conditional Access, cloud security investigations and breach response, CIS hardening, Microsoft Azure, Azure Virtual Desktop (AVD), SharePoint Online and Intune. The position combines deep technical troubleshooting, estate-wide platform ownership and infrastructure/security project delivery. Key Responsibilities 1. Identity, Security and Compliance Administer the Microsoft 365 suite, including Exchange Online, Teams, SharePoint Online, OneDrive and security/compliance services. Own and maintain the Conditional Access policy estate across Active Directory/Entra ID, including policy documentation and secure management of exceptions. Lead cloud security investigations using sign-in, risk and audit logs. Own the Microsoft Defender estate, including XDR incidents, Defender for Office 365 policies, Defender for Endpoint onboarding/alerting and Defender for Identity sensor health. Run vulnerability scans and manage remediation plans across server and endpoint estates. Act as the primary technical owner for cloud security incidents and breach response. Maintain CIS ..... full job details .....