Microsoft Managed Service Operator

About us

Hiyv supports enterprise customers and internal teams across AI, cloud, security, software engineering, digital platforms, infrastructure and data resilience. Hiyv helps organisations scale modern technology operations through secure, compliant and reliable delivery models that combine AI-enabled operations, cloud engineering, platform expertise, and scalable backend execution. The focus is not simply on speed, but on helping customers innovate while maintaining operational control, security, resilience, and sovereignty across increasingly complex technology environments.

For our continuously expanding technical team we are looking for a Managed Service Operator.

The Role

The purpose of this function is to ensure the stable, traceable, and quality-assured operation of defined Microsoft Zero Trust and security services for customers. The role ensures that agreed configurations, policies, controls, reports and operational artefacts are regularly reviewed, maintained and, where required, adjusted in accordance with the change and approval process.

This position combines operational service delivery, technical verification, implementation of approved changes, documentation, reporting, and collaboration with the customer teams. Architecture decisions, service governance and overall customer-side accountability remain with the responsible roles and governing bodies. The role includes the operational management, ongoing maintenance and controlled adjustment of Microsoft managed services, with a focus on Microsoft Entra ID, Microsoft Intune, Microsoft Defender for Endpoint, Defender for Office 365 and Defender for Cloud Apps.

What you will do

Operational Management of Identity & Access

The function includes the ongoing operation of defined Microsoft Entra ID configurations and controls. This includes in particular:

• Operation and regular review of Conditional Access policies, MFA requirements and defined exception processes
• Review of break-glass accounts, privileged roles, PIM processes and relevant access protection measures
• Maintenance of dynamic groups, group-based licensing and related operational artefacts
• Implementation of approved changes and update of documentation and control evidence

Operational Management of Intune & Endpoint Management

The function includes the operation of Microsoft Intune and adjacent endpoint management components in accordance with the agreed service scope. This includes in particular:

• Monitoring and maintenance of Intune security baselines, configuration profiles, compliance policies and assignments
• Operation of update rings, Enrollment Status Page, BitLocker, LAPS and other defined endpoint controls
• Maintenance of app deployments, device groups, filters and standard assignments in line with service and changing requirements
• Review of endpoint status, deviations and operational indicators, including initiation of defined corrective measures

Operation of Microsoft Defender Services

The function includes the operational management of defined Microsoft Defender services for endpoint, collaboration and cloud app security. This includes in particular:

• Monitoring and maintenance of Microsoft Defender for Endpoint onboarding, sensor health, security baselines and defined protection configurations
• Operation of Defender for Office 365 policies, in particular EOP, Safe Links, Safe Attachments, quarantine and impersonation protection in accordance with requirements
• Operation of Defender for Cloud Apps for defined SaaS and cloud app scenarios, including shadow IT, session control and OAuth controls
• Review of relevant security, coverage and posture KPIs and preparation of findings for service reviews and follow-up activities

Change, Ticket and Incident Support

The function supports operations through defined communication and ticket channels. This includes in particular:

• Processing assigned service tickets within the agreed service hours and priorities
• Implementation of approved changes in Entra ID, Intune and Microsoft Defender services according to the defined four-eyes, review or approval process
• Support for technical clarifications, initial analyses and follow-up checks in the incident and problem context
• Escalation to the Practice Lead, Architect or Customer Coordination where decisions, architecture questions or customer-side approvals are required

Reporting, Documentation and Service Governance

The function ensures that operational information is documented in a traceable manner and made usable for service reviews. This includes in particular:

• Maintenance of operational documentation, policy artefacts, exports, evidence and technical status information
• Preparation of coverage, risk, device, mail and cloud app KPIs for monthly reports and service reviews
• Tracking of agreed measures, open items and recurring operational checks
• Ensuring that changes, operational decisions and deviations are documented and escalated transparently

Collaboration and Competence Development

The function works closely with the Swiss service, architecture and customer teams and continuously develops its own operational capabilities. This includes in particular:

• Collaboration with the Practice Lead, Architects, Customer Coordination and other operations teams through defined channels
• Compliance with internal standards for quality, security, data protection, documentation and controlled operations
• Development and maintenance of know-how in Entra ID, Intune, Microsoft Defender services and relevant Microsoft 365 security functions
• Support for the standardisation, automation and continuous improvement of recurring operational tasks

What are we looking for

• 2+ years of relevant professional experience
• Strong organisational skills and attention to detail
• Good English communication and writing skills
• Comfortable working in an international and fast-paced environment
• Proactive, hands-on and able to work independently
• Bachelor’s degree level of working and thinking in IT

Personality and ways of working

• Responsive and solutions-oriented
• Good communicator
• Positive, collaborative and proactive
• Curious about learning and continuous improvement

Location

Sofia, Bulgaria

This is a full-time role with a hybrid working model.

Why join Hiyv

Hiyv operates at the intersection of AI, cloud, software engineering, platform operations, and enterprise-scale digital transformation.

You will join a growing international team supporting leading organisations across Northern Europe that are looking to scale modern technology capabilities while maintaining security, operational control and resilience.

Benefits

• We create opportunities to connect beyond daily work through team events, shared experiences, and activities that strengthen our community
• Sports card to support your active lifestyle
• Health insurance, including dental coverage
• Learning and development opportunities
• 25 days of vacation time
• Hybrid working options from both home and the office

Doesn’t match every requirement? That’s okay - we value potential, curiosity, and the willingness to grow.