Microsoft 365 and Identity Engineer

Role Purpose

The Microsoft 365 & Identity Engineer is a hands-on technical role responsible for supporting, securing and continuously improving Shop2Shop’s Microsoft 365 and cloud identity environment.

You will focus on the stability and effective use of Microsoft 365 services, Entra ID identity controls, access governance, automation and collaboration platforms such as Teams, SharePoint and OneDrive. You will help improve how users access systems securely, how identities and permissions are governed, and how Microsoft 365 supports the needs of a growing fintech business.

You’ll thrive in this role if…

• You treat identity as the front door to the business, and you get satisfaction from making access both secure and frictionless
• You're precise by nature; you know a small slip in a Conditional Access policy or a licence assignment can ripple across the whole tenant
• You reach for automation first; if you've done something by hand twice, you're already scripting it in PowerShell or Graph
• You enjoy going deep to troubleshoot, whether it's a sync issue, a mail-flow problem or a stubborn sign-in failure
• You can walk a non-technical stakeholder through a technical trade-off without losing them or dumbing it down
• Documentation, change control and testing before production are habits for you, not chores
• You like being the person others turn to for anything Microsoft 365 and Identity.

What You Will Do

Microsoft 365 Platform Management

• Administer and support Exchange Online, Teams, SharePoint, OneDrive and Power Platform services.
• Monitor service health, investigate issues and coordinate escalations with Microsoft or service providers.
• Manage tenant configuration changes in line with operational and security requirements.
• Maintain technical documentation, configuration records and support runbooks.
• Manage email security and mail flow, including Exchange Online Protection, connectors and routing, and Defender for Office 365 controls.

Identity and Access Management

• Manage the user identity lifecycle, including account provisioning, changes and deprovisioning.
• Configure and maintain Entra ID roles, groups, enterprise applications and access controls.
• Implement and support Conditional Access, multifactor authentication and passwordless authentication.
• Support access reviews, entitlement recertification and identity governance processes.

Privileged Access and Authentication

• Administer Privileged Identity Management and just-in-time administrative access.
• Review privileged roles and reduce unnecessary or persistent administrative permissions.
• Manage authentication methods, break-glass accounts and emergency access procedures.
• Investigate risky sign-ins and identity-related security events with the Security Operations Analyst.

Collaboration and Data Protection

• Manage collaboration controls across Teams, SharePoint and OneDrive.
• Implement Microsoft Purview data classification, sensitivity labelling and DLP controls.
• Support secure internal and external sharing configurations.
• Work with stakeholders to improve how Microsoft 365 services are used across the business.

Cloud Applications and Automation

• Manage enterprise applications and integrations using SSO, SAML and OAuth.
• Support approved SaaS applications and their integration with Entra ID.
• Identify opportunities to automate repetitive identity and Microsoft 365 administration tasks.
• Develop scripts and workflows that improve consistency, reporting and operational efficiency.

Licensing, Backup and Service Improvement

• Monitor Microsoft licensing allocation, usage and opportunities for cost optimisation.
• Administer Microsoft 365 backup configuration, retention and restoration processes.
• Perform scheduled restore tests and maintain supporting evidence.
• Review platform performance, security recommendations and operational risks to identify improvements.
• Remediate Microsoft 365 and identity vulnerabilities identified by Security Operations within agreed timeframes.

What You’ll Need to Succeed

• Strong working knowledge of Microsoft 365 administration, including Exchange Online, Teams, SharePoint and OneDrive.
• Experience managing Microsoft Entra ID, identity lifecycles, authentication methods and access controls.
• Understanding of Conditional Access, MFA, privileged access and identity governance principles.
• Ability to automate administrative tasks using PowerShell, Microsoft Graph or workflow tools.
• A security-focused approach to tenant configuration, data protection and access management.
• Strong troubleshooting skills across cloud services, identities and application integrations.
• Clear technical documentation and the ability to maintain configuration records and runbooks.
• The ability to work collaboratively with security, endpoint, service-delivery and business teams.

Skills and Knowledge

• Microsoft 365 administration across Exchange Online, Teams, SharePoint, OneDrive and related services.
• Microsoft Entra ID, including identity lifecycle management, groups, enterprise applications and role-based access control.
• Conditional Access, multifactor authentication, passwordless authentication and authentication-method management.
• Privileged access management, including PIM, just-in-time access and emergency-access controls.
• Identity governance concepts, including access reviews, entitlement management and joiner-mover-leaver processes.
• Microsoft Purview capabilities, including sensitivity labels, data classification and data loss prevention.
• PowerShell, Microsoft Graph and workflow automation for administration, reporting and operational improvement.
• SaaS and enterprise application integration using technologies such as SSO, SAML and OAuth.

Qualifications and Experience

• A relevant diploma or degree in Information Technology, Computer Science or a related field, or equivalent practical experience.
• Approximately 5–7 years’ experience administering Microsoft 365 and cloud identity environments.
• Hands-on experience with Exchange Online, Teams, SharePoint, OneDrive and Microsoft 365 tenant administration.
• Practical experience administering Microsoft Entra ID, including identity lifecycles, Conditional Access, MFA and role-based access.
• Experience using PowerShell, Microsoft Graph or workflow tools to automate administration and reporting.
• Exposure to Microsoft Purview, identity governance, privileged identity management or enterprise application integration.
• Experience supporting production environments, troubleshooting service issues and maintaining technical documentation.
• Microsoft Identity and Access Administrator Associate or Microsoft 365 Administrator Expert certification is required or strongly preferred; other related Microsoft certifications would be beneficial.

Other Requirements

• Hybrid working model with regular in-office presence in Stellenbosch, based on team rhythms, collaboration needs and business requirements.
• Ability to attend key planning sessions, stakeholder workshops and in-person team collaboration when required.
• Reliable internet connectivity and a suitable remote-working setup for work-from-home days.