Job Description

As a permanent Workplace Technology Engineer, you will configure, integrate and improve the Microsoft and Azure-based workplace technology environment supporting approximately 250 staff across three locations. Your focus will be on connecting systems, ensuring information and access flow reliably between them and delivering practical improvements across Microsoft 365, Microsoft Entra ID, Microsoft Purview and SharePoint Online.

Working with the internal IT team and a specialist delivery partner, you will implement changes, resolve technical issues and ensure solutions are operationally ready for handover. The role sits alongside a busy BAU function, so you will need to work independently, prioritise pragmatically and keep delivery moving with limited day-to-day direction. This is an engineering delivery role - security policy, control design, cyber risk acceptance, control effectiveness, security tooling and monitoring sit with the Cyber team, and you will implement the Microsoft 365 and identity changes needed to meet the requirements they define.

You will contribute to the following priority initiatives:

• Identity & Access Management – connect applications to Microsoft Entra ID through single sign-on (SSO), identity federation and access configuration.
• Connected Workplace – configure and maintain integrations across Azure-based services, Microsoft 365 and business applications, troubleshooting authentication and connectivity issues.
• Information Protection – configure Microsoft Purview sensitivity labels and information protection settings, supporting DLP and DSPM requirements defined by the Cyber team.
• Modern Workplace – configure and improve SharePoint Online and Microsoft 365 services alongside specialist delivery partners.
• Technology Resilience – strengthen configuration, change, backup, restore and disaster recovery practices for critical systems.
• File Management – support the migration and integration of legacy file shares and Google Drive content into SharePoint Online.
• Security Remediation – implement configuration and integration fixes across identity, endpoints and Microsoft 365 as prioritised by the Cyber team.

You will also help identify opportunities to simplify the environment, reduce manual work and make workplace systems more reliable over time.

Role Responsibilities

• Configure and integrate Microsoft 365, Azure-based services and Microsoft Entra ID to keep workplace systems connected and working reliably.
• Implement Microsoft Purview sensitivity labelling and information protection configurations, including settings that support Cyber-defined DLP policies.
• Connect applications using SSO and identity federation, and configure Conditional Access, Privileged Identity Management (PIM) and Netskope integrations where required.
• Configure and improve SharePoint Online, supporting integrations, modernisation and migrations with specialist partners.
• Investigate and resolve identity, application integration, permissions and configuration issues across the Microsoft workplace environment.
• Support resilience through configuration, testing and documentation of backup, restore and disaster recovery processes.
• Maintain accurate configuration records, technical documentation and evidence for operational and audit requirements.
• Troubleshoot Azure-based and Microsoft 365 services, tracing issues across connected systems to identify root causes.
• Deliver changes from configuration and testing through to rollout, validation and operational handover.
• Collaborate with IT, Cyber, business stakeholders and external partners to implement practical, reliable solutions.
• Proactively identify ways to streamline integrations, improve reliability and reduce recurring technical issues.

Key Skills and Experience

Must-haves

• Hands-on experience configuring and integrating Microsoft 365 and Azure-based workplace services, particularly Microsoft Entra ID, SSO and identity federation.
• Practical experience configuring Microsoft Purview, including sensitivity labels and information protection; familiarity with DLP.
• Experience administering and improving SharePoint Online and connecting business applications within the Microsoft ecosystem.
• Strong troubleshooting skills across identity, authentication, access, cloud configuration and system integrations; this is a configuration-focused role, not a software development role.
• Working knowledge of Entra ID capabilities including Conditional Access, PIM and Identity Protection.
• Ability to document configurations clearly and deliver reliable changes into an operational environment.
• Proactive, technically curious approach, with the ability to work independently, solve problems and suggest better ways of working.

Nice-to-haves

• Experience with Netskope.
• Knowledge of MFA and endpoint hardening.
• Experience with data security posture management (DSPM).
• Experience supporting technology resilience or disaster recovery (DR) initiatives.
• Relevant Microsoft certifications, such as SC-300, SC-401 or MS-102.
• Experience in financial services or APRA-regulated environments, including exposure to CPS 234, CPS 230 and ISO 27001.