Contract type: Permanent Hours: 37.5 hours / week Salary: circa £48,000 depending on experience Location: Leeds(LS1 4HR) OR Birmingham (B2 5DB) WFH policy: Employees are required to attend the office 2 days/week Flexible working: Variety of flexible work patterns subject to line manager discretion e.g. Compressed 9-day fortnight. Reports to: IT Service Operations Manager Deadline Note: We reserve the right to close the advert before the advertised deadline if there are a high volume of applications. Role Summary:The IT Cloud Productivity Engineer (Microsoft) is responsible for the day-to-day operational management, administration, optimisation, security, and support of the Microsoft 365 environment and integrated productivity services. The role ensures the stability, performance, availability, and security of core collaboration platforms to deliver an optimal and consistent user experience across the organisation. The role acts as the Microsoft Platform Owner, holding overall accountability for the strategic direction, design authority, and operational integrity of the Microsoft platforms. The Platform Owner defines and enforces platform configuration standards, approved design patterns, and governance controls across collaboration, identity, security, and endpoint services. The role has end-to-end ownership for the planning and delivery of platform enhancements, ensuring the Microsoft environment remains secure, resilient, scalable, and aligned to organisational priorities. As the final technical decision-maker for the platform, the Platform Owner ensures that all changes are implemented in line with agreed architectural principles, security requirements, and regulatory obligations. Working in close partnership with the Technical and specialist teams across Security, Infrastructure, and IT Operations, the role provides clear direction and assurance that Microsoft platform decisions, roadmaps, and changes are consistent, compliant, and strategically aligned ### Key Responsibilities - Own the operational administration, optimisation, and lifecycle management of Microsoft 365 services, including Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft Defender, Copilot, Microsoft Purview (sensitivity, retention, audit), and the Power Platform. - Design, implement, and govern identity and access management using Azure AD / Entra ID, including Conditional Access, MFA enforcement, SSO integrations, and access governance aligned to Zero Trust principles. - Own end-to-end endpoint lifecycle management across Windows, macOS, and iOS platforms using Microsoft Intune, including: a. Definition and enforcement of BYOD vs corporate device strategies. b. Creation, management, and optimisation of Autopilot profiles for device provisioning and user onboarding. c.Ongoing configuration, compliance, and lifecycle support of managed devices. - Lead application lifecycle management and packaging across all supported device types, including: a.Application packaging, deployment, update, and retirement strategies b.Standardisation of deployment methods, detection rules, and user targeting c. Ensuring secure, scalable, and consistent application delivery via Intune and related tooling - Own and manage the third-party productivity and identity ecosystem, including JumpCloud, Apple Business Manager, DocuSign, Sage and Exclaimer, ensuring seamless integration with Microsoft 365 and endpoint management platforms. - Define and enforce Microsoft 365 security and compliance configurations, including anti-spam and malware policies, data protection controls, audit capabilities, and alignment with organisational and regulatory requirements. - Design and deliver automation and efficiency initiatives using Power Automate and PowerShell, including the creation of AI agents using Microsoft Copilot, reducing business-as-usual workload for the Service Desk and improving operational resilience across the digital workplace. - Act as the senior escalation point for the Service Desk, Data & Analytics and all other tech hub teams for all Microsoft, endpoint, and cloud productivity issues, providing advanced troubleshooting, root-cause analysis, and knowledge transfer. - Maintain authoritative technical documentation and reporting, including platform configurations, standards, procedures, and reporting on service performance, security posture, and usage trends. - Collaborate closely with Security, Infrastructure, Legal/Data Protection, and other technology teams to ensure cohesive service delivery, secure design, and compliance across the Microsoft 365 ecosystem. - Provide mentorship and technical leadership, upskilling colleagues across the wider IT teams, and supporting the maturity of cloud productivity and endpoint management capabilities. ### Skills Knowledge and Expertise Essential: - Proven enterprise experience owning and administering the Microsoft 365 ecosystem, including Exchange Online, Teams, SharePoint Online, OneDrive, Defender, Purview, and Power Platform. - Proven ability to design, configure, optimise, support, and operate Microsoft 365 services across their full lifecycle. - Strong hands-on expertise with Azure AD / Entra ID, including Conditional Access, MFA strategy, SSO integrations, Privileged Identity Management and identity lifecycle management. - Extensive experience managing enterprise endpoints using Microsoft Intune across Windows, macOS, Android, and iOS platforms. - Demonstrable ownership of end-to-end device lifecycle management, including provisioning, compliance, and retirement. - Proven capability to manage application lifecycle management, including packaging, deployment, updates, and retirement across supported device types. - Strong experience configuring Microsoft 365 security and compliance controls, including anti-spam, malware protection, data governance, and audit policies. - Experience acting as a senior escalation point for Microsoft 365, endpoint, and cloud productivity incidents, providing advanced troubleshooting and root-cause analysis. - Ability to produce and maintain high-quality technical documentation, standards, and service reporting. - Strong stakeholder engagement and collaboration skills, working effectively across IT Service Operations, Security, Infrastructure, and technology teams. - Proactive, ownership-driven approach with a focus on service stability, optimisation, and continuous improvement. Desirable - Experience with Microsoft Copilot and advanced use of Purview for information protection and compliance. - Demonstrable ownership of Autopilot provisioning and strategic approaches to BYOD vs corporate-owned device models. - SME-level knowledge of Apple Business Manager and macOS management, including integration with Intune and JumpCloud. - Practical experience collaborating with Security, Legal, and Data Protection teams on eDiscovery, SARs, and regulatory compliance activities. - Proven ability to design and implement automation using Power Automate and PowerShell to reduce operational workload and improve efficiency. - Experience mentoring and upskilling colleagues, contributing to service maturity and capability development. - Demonstrable contribution to digital workplace transformation initiatives beyond day-to-day operational delivery. ### Employee Benefits As if contributing to and supporting work that makes life better for millions wasn’t rewarding enough, we offer a full range of benefits too. Key benefits that may be available depending on the role include: - Annual performance based bonus, up to 10% - 25 days annual leave, plus eight bank holidays - Up to 8% pension contribution - Financial support and time off for study relevant to your role, plus a professional membership subscription - Employee referral scheme (up to £1500), and colleague recognition scheme - Family friendly policies, including enhanced maternity leave and shared parental leave - Free, confidential employee assistance, including financial management, family care, mental health, and on-call GP service - Three paid volunteering days a year - Season ticket loan and cycle to work schemes - Family savings on days out and English Heritage, gym discounts, cash back and discounts at selected retailers - Employee resource groups