M365 Engineer

About the Role:

• Owns VFX's Microsoft identity and endpoint environment with emphasis on identity security and endpoint management.
• Manages Entra ID, Conditional Access, PIM, Intune, Autopilot, and CrowdStrike Falcon integration.
• Develops PowerShell automation for identity lifecycle, compliance, and configuration drift detection.

Key Responsibilities:

• Designs and maintains Conditional Access policies enforcing Zero Trust principles.
• Manages full device lifecycle via Intune and Autopilot, including compliance and security baselines.
• Administers M365 platform (Exchange Online, SharePoint, Teams) with DLP, eDiscovery, and Purview.

Requirements:

• Typically 5+ years in Microsoft cloud, identity, or endpoint engineering with production ownership of Entra ID and Intune.
• Deep knowledge of Conditional Access, PIM, identity governance, and hybrid environments.
• Proficiency in PowerShell scripting and experience with endpoint detection and response tooling.

Benefits at VFX:

• Generous Profit Share Plan (PSP) with potential equity opportunities via CSOP.
• Annual all-expenses paid company incentive trip abroad.
• Flexible learning and development budget.