Modern Workplace & IAM Administrator

We are hiring a Modern Workplace \& IAM Administrator to lead and secure our digital workplace and identity ecosystem across Microsoft 365, Teams, SharePoint, OneDrive, Viva, Intune, Entra ID, and Active Directory.

You'll balance security, compliance, user productivity, and adoption — making sure that identity, privileged access, endpoint management, and collaboration platforms are governed, monitored, and aligned with ISO 27001, CIS Benchmarks, and ITIL v4. This is a hands-on administrator role with broad ownership across our identity and workplace stack, working closely with our SOC, infrastructure, and end-user teams.

What you'll do

Microsoft 365 administration

• Administer and optimize Exchange Online, Teams, SharePoint, OneDrive, Viva, and Intune.
• Enforce policies for collaboration platforms, guest access, data sharing, and lifecycle management.
• Support adoption through training, awareness sessions, user guides, and rollout initiatives.

Endpoint \& device management

• Enroll, configure, secure, and manage corporate devices through Microsoft Intune.
• Enforce device compliance, configuration profiles, security baselines, and application protection policies.
• Manage Windows Update for Business, patch compliance, and reporting.
• Coordinate with the SOC team on endpoint risks and exposure findings.

Identity \& access management

• Administer Entra ID, Active Directory Domain Services, and hybrid identity (Azure AD Connect / Cloud Sync).
• Manage privileged access for admin accounts, service accounts, break-glass accounts, and critical systems.
• Build and maintain Conditional Access policies (location, risk, device compliance, role, application sensitivity).
• Enforce MFA across users, applications, and administrative roles.
• Implement Zero Trust authentication controls.
• Operate device-based and risk-based access policies using Intune, Entra ID, and Microsoft Defender.
• Conduct periodic access reviews for standard and privileged accounts.

Security \& compliance

• Partner with the SOC team to track, investigate, and remediate identity and endpoint threats.
• Maintain compliance with ISO 27001, CIS Benchmarks, and internal policies.
• Prepare evidence for internal and external audits.
• Operate Microsoft Purview for information protection and DLP.
• Ensure all access changes follow ITIL v4 request, incident, and change processes.

What you bring

Required

• 5+ years hands-on experience administering Microsoft 365 — Exchange Online, Teams, SharePoint, OneDrive, Intune, and related services.
• Strong knowledge of Entra ID (P1/P2), Entra PIM, Conditional Access, MFA, SSPR, Azure AD Connect / Cloud Sync, Active Directory, and Group Policy.
• Hands-on with Microsoft Intune, Microsoft Defender Suite, Microsoft Sentinel, Microsoft Purview, Fortinet, Azure, and Freshservice.
• Solid grasp of ISO 27001, CIS Benchmarks, and ITIL v4.
• Experience preparing evidence and supporting internal/external audits.
• Strong knowledge of DLP, Conditional Access, endpoint security, compliance policies, and M365 governance.
• Working knowledge of authentication protocols — SAML, OAuth, Kerberos, and modern authentication.
• Strong PowerShell automation skills.
• Strong troubleshooting, reporting, documentation, and stakeholder-communication skills.

Preferred

• Bachelor's degree in IT, Computer Science, or a related field.
• Microsoft certifications: SC-300 (Identity \& Access Administrator), MD-102 (Endpoint Administrator), Microsoft 365 Administrator, SC-400 (Information Protection Administrator).
• ITIL v4 certification.
• Experience in a regulated or government-adjacent environment.
• Familiarity with NIAF (UAE National Information Assurance Framework) or equivalent national security frameworks.

Pay: From AED8,000.00 per month

Ability to commute/relocate:

• Dubai: Reliably commute or planning to relocate before starting work (Required)

Application Question(s):

• What are your salary expectations per month (in AED?)

Experience:

• administering Microsoft 365 : 5 years (Required)
• Powershell automation: 4 years (Required)

Work Location: In person