Functional Role: Cloud, Security & Identity Specialist
This role reports to: Director of Technology
Who reports to this role: No direct reports
Key Accountabilities:- Administer and secure Microsoft 365, Azure, Microsoft Entra ID, Intune, defender and related cloud services.
- Own identity and access management, including MFA, conditional access, RBAC, privileged access, SSO, security groups, access reviews, and onboarding slash offboarding.
- Manage hybrid and cloud-only identities and SaaS application access, including enterprise applications and business central access dependencies.
- Monitor, investigate and respond to cybersecurity alerts, phishing, malware, suspicious activity and account compromise; support containment, remediation and post incident review.
- Administer endpoint security and compliance, including device configuration, encryption, patching, application deployment and EDR controls.
- Drive vulnerability management by identifying, prioritizing, tracking and validating remediation of security weaknesses.
- Support backup, disaster recovery, business continuity and ransomware-recovery readiness for cloud and endpoint services.
- Performed security reviews of new applications, vendors and integrations, including SOC reports, penetration testing, vulnerability management and data handling practices.
- Develop and maintain security standards, procedures, technical documentation, system configurations and operational runbooks.
- Automate repeatable administration and security tasks using PowerShell, Microsoft graph, power automate or other appropriate tools.
- Provide escalation support for complex cloud, identity, endpoint and security issues and collaborate with technology team members, vendors and managed-services partners.
Qualifications:- Diploma or degree in information technology, computer science, cybersecurity or related discipline, or an equivalent combination of education, certification and experience.
- Relevant Microsoft and security certifications are assets, such as Azure administrator, Identity and Access Administrator, Security Operations Analyst, Azure Security Engineer, Security+, SSCP.
Skills:- Microsoft 365, Azure, Entra ID, Intune, Microsoft defender and exchange online administration.
- Identity and access management; MFA, conditional access, RBAC, PIM, SSO, enterprise applications and security groups.
- Endpoint security, EDR, vulnerability management, incident response and Zero Trust Principles.
- PowerShell and Microsoft graph; Working knowledge of DNS, TCP/ IP, VPN, SPF, DKIM and DMARC.
- Backup/ disaster recovery concepts and strong technical documentation practices
Experience:- 2-4 plus years of progressive hands-on experience in cloud infrastructure, systems admin, indefinity management, cybersecurity or related technical role.
- Demonstrated experience administering Microsoft 365 and Entra ID in a business environment.
