M365 and Security Infrastructure Administrator

Alfa AI is a recruiting company advertising this vacancy on behalf of a customer. Want to be the person who turns a cybersecurity strategy into a secure, automated Microsoft estate? This is a deep technical, hands-on role based in London on a hybrid basis. You will be the technical lead for our tenant''s foundation, taking the "Why" from our Head of Cybersecurity and turning it into a concrete technical specification (the "What") and a deployment path (the "How"). We are moving away from ad-hoc, case-by-case management toward scalable, policy-driven operations built on modern Microsoft cloud administration principles. We need a proactive problem solver who puts long-term system integrity ahead of short-term fixes. What you will do Identity and access (Entra ID): optimize structure with Administrative Units and scoped administration, run advanced Conditional Access, implement PIM for just-in-time access, govern service principals, managed identities and AI agent identities such as Copilot agents, and automate joiner/mover/leaver processes. Endpoint security (Intune): lead MDM and MAM across Windows, macOS, iOS and Android, maintain compliance policies, set up Windows Autopilot, macOS Automated Device Enrollment and Apple Business Manager, and harden endpoints with BitLocker, FileVault, Firewall and ASR rules. Platform hardening: maintain security baselines across Exchange Online, SharePoint, OneDrive, Teams, Viva and Copilot, secure mail flow and OME, audit SPF, DKIM and ..... full job details .....