Cloud Engineer - Access and Security

Cloud Engineering Professional - Access & Security

Why this job matters

This role plays a key part in scheming and implementing BT’s Zero Trust Security Model — strengthening our global security posture. You will work across critical identity and security technologies including Microsoft Entra ID (Azure AD), Microsoft Purview, and Microsoft Defender, contributing directly to BT’s enterprise-wide 
security and compliance initiatives.

What you’ll be doing

• Onboarding applications (Mobile, Web, Desktop, SPA) into Microsoft Entra ID for SSO and provisioning 
• Enhancing BT's security posture with controls such as MFA, password less authentication, device-based restrictions, etc. 
• Configuring B2B access governance — access packages, policies, access reviews 
• Contributing to enterprise rollout of Microsoft 365 Security & Compliance capabilities 
• scheming and implementing sensitivity labels and label policies across Exchange, SharePoint, Teams, OneDrive 
• Creating and maintaining DLP and Endpoint DLP policies across Microsoft 365 and non-Microsoft workloads 
• Building and managing retention labels and retention policies aligned with BT data standards 
• Automating processes using Power Automate, Power Apps, and Logic Apps 
• Troubleshooting identity, access, and security issues and delivering root-cause analysis 
• Monitoring emerging threats and evaluating BT’s readiness against modern attack vectors 

Skills Required

• Deep expertise in Microsoft Entra ID 
•  Experience integrating frameworks using MSAL libraries / Apache OIDC libraries
•  Strong knowledge of Microsoft Purview — Information Protection, DLP, Insider Risk, DSPM for AI
•  Experience with Conditional Access, Identity Protection, PIM, and RBAC
•  Proficiency in authentication protocols: SAML, OAuth 2.0, OIDC, SCIM
•  Hands-on experience with KQL, monitoring tools, SIEM, workbooks, and incident management
•  Proficiency with Power Automate, Power Apps, and Power BI
•  Exposure to Microsoft Defender stack (Cloud Apps, Endpoint, Identity, Office 365)
•  Strong analytical, debugging, and problem-solving skills
•  Ability to write PowerShell scripts and build REST APIs using Logic Apps
• Curiosity to learn and adapt to evolving security technologies

Experience

• Bachelor’s degree in computer science, IT, or related field — or equivalent practical experience  
• Ability to work independently and collaboratively in fast-paced environments  
• Hands-on experience with Entra ID and Microsoft Purview  
• Familiarity with scripting and coding concepts  
• Preferred: Microsoft Identity & Access Administrator or Information Security Administrator certification 

About us

BT Group was the world’s first telco and our heritage in the sector is unrivalled.  As home to several of the UK’s most recognised and cherished brands – BT, EE, Openreach and Plusnet, we have always played a critical role in creating the future, and we have reached an inflection point in the transformation of our business. 

Over the next two years, we will complete the UK’s largest and most successful digital infrastructure project – connecting more than 25 million premises to full fibre broadband.  Together with our heavy investment in 5G, we play a central role in revolutionising how people connect with each other. 

While we are through the most capital-intensive phase of our fibre investment, meaning we can reward our shareholders for their commitment and patience, we are absolutely focused on how we organise ourselves in the best way to serve our customers in the years to come.  This includes radical simplification of systems, structures, and processes on a huge scale. Together with our application of AI and technology, we are on a path to creating the UK’s best telco, reimagining the customer experience and relationship with one of this country’s biggest infrastructure companies.  

Change on the scale we will all experience in the coming years is unprecedented.  BT Group is committed to being the driving force behind improving connectivity for millions and there has never been a more exciting time to join a company and leadership team with the skills, experience, creativity, and passion to take this company into a new era.

A FEW POINTS TO NOTE:

Although these roles are listed as full-time, if you’re a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.

We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.

DON'T MEET EVERY SINGLE REQUIREMENT?

Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.