IT System Administrator (Microsoft 365 & Security)

About the role

Easygenerator, a fast‑growing EdTech scale‑up, is looking for an IT System Administrator to manage its global Microsoft 365 environment and drive security initiatives across multiple regions.

Key responsibilities

• Manage and administer global Microsoft 365 tenant(s) (E3/E5) across multiple regions.
• Architect and maintain secure configurations for Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.
• Lead enterprise identity strategy using Microsoft Entra ID, Conditional Access, Identity Protection, RBAC and Privileged Identity Management.
• Enforce Zero Trust, least‑privilege and Just‑in‑Time access models.
• Administer Microsoft Intune and Windows 365, including device compliance, security baselines and Autopilot provisioning.
• Own the Joiner‑Mover‑Leaver lifecycle globally, handling onboarding and off‑boarding of users and devices.
• Maintain an accurate IT asset inventory and monitor device health and compliance.
• Manage Microsoft Defender suite (Endpoint, Office 365, Identity, Cloud Apps) and respond to security incidents.
• Configure Microsoft Purview (DLP, retention, Insider Risk, eDiscovery, Sensitivity Labels).
• Develop PowerShell automation for provisioning, de‑provisioning and administrative tasks.

Required profile

• Bachelor’s degree in Information Technology, Computer Science or a related field.
• 2+ years of enterprise Microsoft 365 administration experience.
• 1+ year hands‑on experience with Microsoft E5 security capabilities.
• Experience operating in a multi‑region or global organization.
• Analytical, detail‑oriented and proactive with a security‑first mindset.

Required skills

• Microsoft 365 (E3/E5) administration
• Microsoft Entra ID, Conditional Access, Privileged Identity Management
• Zero Trust architecture and identity‑first security models
• Microsoft Intune and Windows 365 device management
• Microsoft Defender suite (Endpoint, Office 365, Identity, Cloud Apps)
• Microsoft Purview (DLP, retention, Insider Risk, eDiscovery, Sensitivity Labels)
• PowerShell scripting and automation
• SIEM integration experience (Microsoft Sentinel or third‑party)