Modern Workplace & IAM Administrator

Overview

What you'll do

• Microsoft 365 administration
• Administer and optimize Exchange Online, Teams, SharePoint, OneDrive, Viva, and Intune.
• Enforce policies for collaboration platforms, guest access, data sharing, and lifecycle management.
• Support adoption through training, awareness sessions, user guides, and rollout initiatives.
• Endpoint & device management
• Enroll, configure, secure, and manage corporate devices through Microsoft Intune.
• Enforce device compliance, configuration profiles, security baselines, and application protection policies.
• Manage Windows Update for Business, patch compliance, and reporting.
• Coordinate with the SOC team on endpoint risks and exposure findings.
• Identity & access management
• Administer Entra ID, Active Directory Domain Services, and hybrid identity (Azure AD Connect / Cloud Sync).
• Manage privileged access for admin accounts, service accounts, break-glass accounts, and critical systems.
• Build and maintain Conditional Access policies (location, risk, device compliance, role, application sensitivity).
• Enforce MFA across users, applications, and administrative roles.
• Implement Zero Trust authentication controls.
• Operate device-based and risk-based access policies using Intune, Entra ID, and Microsoft Defender.
• Conduct periodic access reviews for standard and privileged accounts.
• Security & compliance
• Partner with the SOC team to track, investigate, and remediate identity and endpoint threats.
• Maintain compliance with ISO 27001, CIS Benchmarks, and internal policies.
• Prepare evidence for internal and external audits.
• Operate Microsoft Purview for information protection and DLP.
• Ensure all access changes follow ITIL v4 request, incident, and change processes.
• What you bring

Required

• **5+ years** hands-on experience administering Microsoft 365 — Exchange Online, Teams, SharePoint, OneDrive, Intune, and related services.
• Strong knowledge of **Entra ID (P1/P2), Entra PIM, Conditional Access, MFA, SSPR, Azure AD Connect / Cloud Sync, Active Directory, and Group Policy**.
• Hands-on with **Microsoft Intune, Microsoft Defender Suite, Microsoft Sentinel, Microsoft Purview, Fortinet, Azure, and Freshservice**.
• Solid grasp of **ISO 27001, CIS Benchmarks, and ITIL v4**.
• Experience preparing evidence and supporting internal/external audits.
• Strong knowledge of DLP, Conditional Access, endpoint security, compliance policies, and M365 governance.
• Working knowledge of authentication protocols — **SAML, OAuth, Kerberos, and modern authentication**.
• Strong **PowerShell** automation skills.
• Strong troubleshooting, reporting, documentation, and stakeholder-communication skills.

Preferred

• Bachelor's degree in IT, Computer Science, or a related field.
• Microsoft certifications: **SC-300** (Identity & Access Administrator), **MD-102** (Endpoint Administrator), **Microsoft 365 Administrator**, **SC-400** (Information Protection Administrator).
• **ITIL v4** certification.
• Experience in a regulated or government-adjacent environment.
• Familiarity with NIAF (UAE National Information Assurance Framework) or equivalent national security frameworks.
• Pay: From AED8,000.00 per month
• Ability to commute/relocate:
• Dubai: Reliably commute or planning to relocate before starting work (Required)

Application Question(s)

• What are your salary expectations per month (in AED?)

Experience

• administering Microsoft 365 : 5 years (Required)
• Powershell automation: 4 years (Required)