M365 Engineer

VFX Financial PLC

M365 Engineer managing Microsoft identity and endpoint environment for VFX Financial. Focusing on security, endpoint management, and supporting M365 platform.

Posted 7/18/2026full-timeRemote • 🇵🇹 PortugalMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Entra ID architecture, Conditional Access policies, and Microsoft Intune for identity and endpoint management. Proficient in PowerShell automation and Zero Trust principles, ensuring compliance and security across hybrid environments.

Highest-signal resume keywords

Entra ID ArchitectureConditional Access PoliciesMicrosoft Intune ManagementPowerShell ScriptingZero Trust Implementation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Entra IDPrivileged Identity ManagementIdentity GovernanceEndpoint Detection and ResponseMobile Device ManagementHybrid Active Directory IntegrationIdentity Lifecycle ManagementCompliance RemediationSecurity BaselinesConfiguration Profiles

Soft Skills

CollaborationProblem-SolvingCommunication

Tools & Technologies

CrowdStrike Falcon Identity ProtectionMicrosoft IntuneAutopilotExchange OnlineSharePoint OnlineMicrosoft Teams

Industry Keywords

Zero Trust ArchitectureB2B Collaboration PoliciesAccess ReviewsData ProtectionIdentity Threat Detection

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Own Entra ID: architecture, user and group lifecycle, hybrid Active Directory integration, and directory governance
Design, implement, and maintain Conditional Access policies enforcing Zero Trust access principles
Manage Privileged Identity Management: just-in-time access, role activation workflows, and regular access reviews
Work with our identity threat detection platform (CrowdStrike Falcon Identity Protection) to monitor for anomalies and respond to identity-based threats
Manage external identities, B2B collaboration policies, and cross-tenant access settings
Own periodic access reviews; ensure IAM controls remain current and evidenced for audit
Own the full lifecycle of Windows and mobile device management via Microsoft Intune and Autopilot — provisioning, configuration, compliance, patching, and decommissioning
Define and enforce device configuration profiles, security baselines, and compliance policies
Monitor endpoint health and security posture; proactively identify and remediate vulnerabilities and configuration drift
Develop and maintain PowerShell automation for identity lifecycle, compliance remediation, and operational self-healing
Administer Exchange Online, SharePoint Online, and Microsoft Teams — security configuration, DLP policies, retention labels, and service health
Support data protection requirements in collaboration with the DPO

Requirements

What you’ll need

Typically 5+ years in Microsoft cloud, identity, or endpoint engineering, with demonstrable production ownership of Entra ID and Intune
Deep working knowledge of Entra ID: Conditional Access, PIM, identity governance, hybrid environments
Hands-on expertise with Microsoft Intune, Autopilot, and MDM/MAM policy management
Proficiency in PowerShell scripting for identity lifecycle and compliance automation
Solid understanding of Zero Trust architecture and practical implementation experience
Experience working with endpoint detection and response tooling in a production environment
Professional proficiency in English.

Benefits

Comp & perks

Generous Profit Share Plan (PSP)
Potential equity opportunities via the Company Share Option Plan (CSOP)
Competitive salary
Annual all-expenses paid company incentive trip abroad
Flexible learning & development budget