Job Description

Fill 1 Copy Twitter Logo Combined Shape Combined Shape arrow-down arrow-button-down-1 Path 2 Group 13 data-transfer-vertical copy Fill 1 Copy Shape Icon Group 13 pin maps-pin-1 Group Group controls-play open-quote button-refresh-arrow data-transfer-vertical settings-horizontal microphone-podcast-2 copy share Search Path 3 Group 3 zoom-in-1
120) ? true : false" @resize.window=" width = (window.innerWidth > 0) ? window.innerWidth : screen.width; if (width

M365 Security Design Engineer in Luton, Bedfordshire
Location Luton, Bedfordshire
Salary Negotiable
Contract Contract
Save job Remove job
M365 Security Design Engineer
Remote working - UK Wide
6-month contract
Paying up to xc2xa390p/h (Outside IR35) - DOE
Responsibilities:

• Design and implement security controls across E5 Microsoft 365 services (e.g., Endpoints; Exchange Online, SharePoint Online, OneDrive, Teams).
• Support Windows 11 and Exchange Online projects through their design and deployment stages.
• Develop and maintain security configurations and baselines in line with industry standards (e.g., NIST, CIS, ISO 27001).
• Configure and manage Microsoft Defender for Office 365 / Cloud / Endpoint / Servers, Purview (Information Protection, Data Loss Prevention), and Microsoft Entra (Azure AD) security features.
• Experience of integrating with MS Sentinel and working with existing SOC teams to adopt Sentinel technology capability.
• Experience of implementing MS Privileged Identity Management (PIM)
• Provide security input and guidance on identity and access management, conditional access policies, and zero trust architecture.
• Conduct risk assessments, gap analysis, and security impact analysis for M365 deployments and integrations.
• Collaborate with security operations and compliance teams to monitor, investigate, and remediate threats and incidents.
• Maintain up-to-date documentation and deliver training or knowledge transfer sessions to operational teams

Experience required:

• Proven experience designing and securing M365 environments in enterprise settings.
• In-depth knowledge of Microsoft 365 security technologies, including Defender suite, Purview, and Entra ID.
• Strong understanding of identity, access management, and conditional access controls.
• Familiarity with regulatory and compliance frameworks such as GDPR, HIPAA, and ISO 27001.
• Proficient with Microsoft security and compliance portals, PowerShell scripting, and automation tools.
• Relevant Microsoft certifications (e.g., SC-100, SC-300, MS-500, AZ-500) are highly desirable.

Disclaimer:
This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.
Job reference 126971_1748015422
Date posted 23 May 2025
Sector
Share Job
Email me jobs like this Email
Create Alert
By submitting your details you agree to our
Charlotte Mitchell
Account Consultant
+44 (0)2392 228 210
Similar Jobs
Feeling uninspired?
Get in touch- we'll find the role for you!
Related news
Get in Touch
We'd love to hear from you!
Keep up with us.
Sign up for all the latest updates, career and recruitment advice with our ARM newsletter. All you need to do is put your details in below, and leave the rest to us!
Get in touch
Shore House
North Harbour Business Park
Compass Road
Portsmouth
PO6 4PR
Candidates
Employers
Specialisms
Useful Links
xc2xa9 Advanced Resource Managers Ltd 2025 Website by
M365 Security Design Engineer
save
Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network. Preferences Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user. Statistics Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you. Marketing Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.