About The Role

As a Microsoft System Administrator Cybersecurity Engineer, you will be part of our IT Operations team, working closely with Helpdesk and Linux Admins, Network Engineers, and the wider Cybersecurity function, as well as the rest of the business teams. You'll work on optimising and securing our user infrastructure with the flexibility to be creative in your solution designs. This hybrid role is ideal for someone with a strong Microsoft systems background who is passionate about cybersecurity or a security-minded engineer looking to deepen their Microsoft expertise.

You'll have the opportunity to shape how we protect our environment from the ground up, not just react to threats. Da Vinci offers an exciting and dynamic work environment, where employees are given the freedom to come up with great ideas and the space to push these to completion. This is a unique opportunity to be part of a successful and fast-growing company.

Responsibilities

Microsoft Infrastructure: Engineer and maintain a global Microsoft Directory infrastructure that incorporates security best practices, business continuity, high availability, and scalability Manage and optimise our Microsoft 365, Intune, Entra ID (Azure AD), and integrated on-premise Active Directory environments Automate, standardise, and document IT processes to optimise work structures using PowerShell, Infrastructure as Code (IaC), and Autopilot Manage the full lifecycle of Windows servers and workstations: build, deploy, maintain, and decommission Perform performance monitoring and system capacity management Perform remote troubleshooting to diagnose production issues Support internal teams on hardware and software issues Cybersecurity: Proactively identify and mitigate security risks across our Microsoft ecosystem, foreseeing and preventing issues before they arise and implementing permanent fixes when problems do occur Perform periodic security audits of the environment, enforcing compliance with industry standards and frameworks (e.g., CIS Benchmarks, NIST, ISO 27001) Implement and manage identity access management (IAM) policies, including conditional access, MFA, privileged access management (PAM), and zero-trust principles Monitor, investigate, and respond to security alerts using tools such as Microsoft Defender for Endpoint, Microsoft Sentinel, and Defender for Identity Harden Windows server and desktop configurations in line with security baselines Collaborate with the Cybersecurity team on incident response, vulnerability management, and threat hunting initiatives Stay current with the evolving threat landscape and recommend improvements to our security posture

Requirements

Must-Have 3+ years of experience working with Microsoft systems, including Microsoft 365, Intune, Entra ID, and integrated on-premise Active Directory Proven experience building effective and scalable systems using Infrastructure as Code (IaC), PowerShell scripting, and Autopilot Solid understanding of networking, authentication, and identity management principles Windows desktop and server configuration management skills A demonstrable interest in or experience with cybersecurity, whether through hands-on work, certifications, personal projects, or CTF participation Degree in Computer Science, Engineering, ICT, Cybersecurity, or a related field Ability to manage multiple projects spanning multiple teams to successful completion Strong communication skills, including the ability to effectively communicate technical information to a non-technical audience Nice-to-Have Relevant security certifications such as SC-200, SC-300, AZ-500 Experience with Microsoft Sentinel (SIEM) or similar security monitoring platforms Familiarity with zero-trust architecture and modern identity security models Experience with vulnerability scanning and remediation tools Knowledge of compliance frameworks (CIS, NIST, ISO 27001) Experience with Linux administration

Benefits

: An opportunity to work in a high-tech, drive