Lead Engineer - M365

Role overview

Responsibilities

• Own Microsoft 365 architecture, security, and operations, including Exchange Online, SharePoint, OneDrive, Teams, Intune, Defender, and Purview.
• Own Entra ID identity services, covering Conditional Access, Privileged Identity Management, hybrid identity, application integration, and identity governance.
• Own Azure platform engineering and governance, including landing zones, subscription and policy design, monitoring, access control, and cost management.
• Define and consistently apply platform technical standards; maintain security posture, Zero Trust access, device compliance, data protection, and retention.
• Provide audit and customer assurance evidence; automate administration and manage configuration as code with version control and change management.
• Lead migrations, tenant work, and service introductions from design through stable operation; act as senior technical escalation and resolve root causes.
• Mentor engineers through design reviews, technical guidance, and knowledge sharing; assess Microsoft roadmap adoption for cost, security, and user experience.
• Within six months, assess the estate, agree priorities, close priority identity and privileged-access gaps, publish standards, and begin automation.
• Within twelve months, demonstrate improved security, collaboration, and identity reliability, auditable configuration as code, effective Azure cost and access governance, and stronger engineering capability.

Required qualifications

• Deep hands-on expertise across the enterprise Microsoft 365 estate, including Exchange Online, SharePoint, OneDrive, Teams, and Intune.
• Strong Entra ID engineering across Conditional Access, Privileged Identity Management, hybrid identity and directory synchronization, application registration and single sign-on, and identity governance.
• Experience leading large-scale Microsoft 365 tenant migration or consolidation through to a stable outcome.
• Practical Microsoft 365 security and compliance capability, including Zero Trust, Defender, and Purview for data protection, retention, and eDiscovery.
• Automation and infrastructure as code, with strong PowerShell and experience with Bicep, Terraform, or ARM.
• Azure platform engineering and governance, including subscription and landing zone design, Azure Policy, RBAC, monitoring, and cost control.
• Sound technical judgment and ability to explain technical decisions clearly to non-technical stakeholders.

Preferred experience

• Technical leadership of a small engineering team or acting as a design authority is a plus.
• Microsoft Identity and Access Administrator, Microsoft 365 Administrator Expert, or Azure Solutions Architect Expert certifications are a plus.
• UAE regulatory or public sector security requirements, customer security assurance, and audit experience are advantageous.
• Experience securing and integrating AI services, including Copilot governance and data readiness, is advantageous.
• Hybrid or multi-cloud exposure, platforms such as Zscaler, Aruba ClearPass, Cofense, ManageEngine, ServiceNow, or Jira Service Management, and Microsoft Dynamics experience are advantageous.
• Experience supporting platforms for customer-facing products as well as internal users is a plus.

About Inception42

What the company offers

• The company describes an open, diverse, and inclusive culture, learning and development opportunities, and high-tech projects.
• A competitive remuneration package may include healthcare, education support, leave benefits, and other perks.