Modern Digital Workplace Specialist

POSITION SUMMARY

The Modern Digital Workplace Specialist is a hands-on engineering role that delivers and supports Microsoft 365, Azure, hybrid cloud, and on-premises infrastructure across a portfolio of globally distributed enterprise clients, primarily in the Architecture, Engineering, and Construction sector.

Operating across complex multi-tenant environments, the role acts as the final internal escalation point for cross-platform issues and combines deep troubleshooting capability with secure solution design, automation, client onboarding, knowledge transfer and continuous service improvement.

EDUCATION AND EXPERIENCE

• Demonstrable senior-level experience engineering and supporting Microsoft 365, Microsoft Azure, hybrid cloud and on-premises infrastructure in enterprise or managed services environments.
• Strong practical experience across Entra ID, Active Directory, Microsoft Intune, Microsoft Defender for Endpoint, Exchange Online, Microsoft Teams, SharePoint Online and OneDrive.
• Experience supporting virtualisation, networking, backup, endpoint management and identity services across multiple enterprise tenants.
• Advanced PowerShell capability, with evidence of building reliable, secure and maintainable automation for deployment, remediation and operational support.
• Proven experience designing Conditional Access controls aligned to Zero Trust principles and implementing SAML SSO and SCIM integrations, including custom attribute mapping.
• Experience leading security incident investigation, root-cause analysis and structured remediation, with clear documentation and stakeholder communication.
• Experience supporting AEC organisations or similarly complex, globally distributed environments is highly desirable.
• Relevant Microsoft certifications such as Azure Administrator Associate, Identity and Access Administrator Associate, Endpoint Administrator Associate or equivalent are desirable.

KEY JOB ELEMENTS

• Engineer, administer, and support the full Microsoft 365, Azure, and hybrid technology stack across multiple enterprise tenants, covering identity, endpoint, collaboration, networking, virtualisation, backup, and automation.
• Act as the final internal escalation point (L3+/SME), resolving complex cross-system issues across Microsoft 365, Azure, endpoint, identity and infrastructure layers before vendor engagement is required.
• Lead complex investigations and enterprise-wide posture reviews across patch management, device compliance and Conditional Access, identifying root causes and delivering prioritised remediation strategies.
• Design and implement Conditional Access architectures across multiple tenants, aligned to Zero Trust principles while balancing security, operational requirements and user experience.
• Deploy, configure and optimise Microsoft Defender for Endpoint, using PowerShell and RMM tooling such as NinjaOne/NinjaRMM to automate deployment and remediation with minimal manual intervention.
• Lead security incident investigations and root-cause analysis, producing clear timelines, evidence-based findings and targeted hardening recommendations.
• Deliver SAML SSO and SCIM integrations across enterprise applications, including custom attribute mapping and resolution of non-standard provisioning requirements.
• Lead the technical onboarding of enterprise clients from initial discovery and incomplete documentation through to validated configuration records, structured knowledge transfer and operational handover.
• Create and maintain high-quality technical documentation, runbooks, knowledge-base content and handover materials to improve support capability across the wider service team.
• Work directly with client stakeholders, service delivery teams, vendors, and internal engineering specialists to manage technical risk, communicate progress, and drive issues to resolution.
• Identify opportunities to standardise, automate and continuously improve services across the client portfolio, reducing repeat incidents and improving security, resilience and operational efficiency.

PERSON SPECIFICATION

• Deep technical breadth across Microsoft cloud, endpoint, identity and infrastructure technologies, with the judgement to isolate faults spanning more than one platform.
• Strong security mindset with practical understanding of Zero Trust, least privilege, identity protection, endpoint security and secure configuration.
• Confident working independently in high-priority client situations while maintaining a structured, evidence-led approach to diagnosis and remediation.
• Clear, credible communicator who can translate complex technical issues for both specialist and non-technical stakeholders.
• Strong ownership, attention to detail and disciplined documentation habits, with a focus on knowledge sharing rather than individual dependency.
• Comfortable balancing concurrent priorities across multiple clients and tenants in a fast-paced managed services environment.
• Collaborative, client-focused and commercially aware, with a commitment to service quality and continuous improvement.

We are an equal opportunity employer and value diversity in our workforce. All qualified applicants will receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic under applicable law. We are committed to creating an inclusive environment where everyone can thrive.