Cloud Engineering Professional - Access & Security

About the role

This role plays a key part in creating and implementing BT’s Zero Trust Security Model, strengthening BT’s global security posture. Working across Microsoft Entra ID, Microsoft Purview and Microsoft Defender, the role contributes to enterprise-wide identity, security and compliance initiatives. It helps secure access, information protection, data governance and automation across BT’s technology environment.

What you’ll be doing

• Application onboarding: Onboard mobile, web, desktop and single-page applications into Microsoft Entra ID for single sign-on and provisioning.
• Identity security controls: Enhance BT’s security posture through controls such as multifactor authentication, passwordless authentication and device-based access restrictions.
• B2B access governance: Configure access packages, policies and access reviews for business-to-business access.
• Microsoft 365 security and compliance: Contribute to the enterprise rollout of Microsoft 365 security and compliance capabilities.
• Information protection: Design and implement sensitivity labels and label policies across Exchange, SharePoint, Teams and OneDrive.
• Data loss prevention: Create and maintain DLP and Endpoint DLP policies across Microsoft 365 and non-Microsoft workloads.
• Records and retention: Build and manage retention labels and retention policies aligned with BT data standards.
• Automation: Automate processes using Power Automate, Power Apps and Logic Apps.
• Troubleshooting and analysis: Resolve identity, access and security issues and provide root-cause analysis.
• Threat readiness: Monitor emerging threats and evaluate BT’s readiness against modern attack vectors.
• Cross-functional collaboration: Build strong relationships across BT to identify opportunities and deliver impactful business outcomes.
• Decision-making and communication: Work effectively through ambiguity, simplify complexity, make informed recommendations and translate technical concepts for diverse audiences.

Essential Skills / Experience

• Deep expertise in Microsoft Entra ID, including Conditional Access, Identity Protection, Privileged Identity Management and role-based access control.
• Hands-on experience with Microsoft Purview capabilities, including Information Protection, DLP, Insider Risk and Data Security Posture Management for AI.
• Experience integrating authentication frameworks using Microsoft Authentication Library or Apache OpenID Connect libraries.
• Strong knowledge of SAML, OAuth 2.0, OpenID Connect and SCIM.
• Experience with KQL, monitoring tools, SIEM, workbooks and incident management.
• Proficiency with Power Automate, Power Apps and Power BI.
• Exposure to the Microsoft Defender stack, including Defender for Cloud Apps, Endpoint, Identity and Office 365.
• Ability to write PowerShell scripts and build REST APIs using Logic Apps.
• Strong methodical, debugging and problem-solving skills, with curiosity to learn and adapt to evolving security technologies.
• A bachelor’s degree in computer science, information technology or a related field, or equivalent practical experience.
• Ability to work independently and collaboratively in fast-paced environments, with familiarity with scripting and coding concepts.
• Preferred certification: Microsoft Identity and Access Administrator or Information Security Administrator.

Our Package