Software Engineer - Microsoft Entra ID & M365 Security

Snowhill, Birmingham, United Kingdom

Applications have closed

BT Group

From Ultra Fast Full Fibre broadband to TV & Mobile, BT helps UK families, communities & companies reach their potential. Find more BT products here.

View all jobs at BT Group

Why this job matters

You will be part of dynamic team who will be designing and implementing Zero Trust Security Model to improve  BT’s security posture. You will be having an opportunity to work on Microsoft Entra ID (Azure Active Directory) and various new M365 data security and compliance capability/tools.

What you’ll be doing

  • Part of a team who will be delivering various M365 Security and Compliance features/capabilities.
  • Improving BT’s security posture by implementing various security controls like MFA, device restriction, password less etc...
  • Writing PowerShell scripts to generate various reports.
  • Automating various activities using Power Automate, Power App and Logic Apps.
  • Onboarding various applications (Mobile App, Web App, Desktop App, Single Page App) with Microsoft Entra ID (Azure Active Directory) for Single Sign-On and Provisioning
  • Exploring new Microsoft Entra ID (Azure Active Directory) as well as M365 Security features and  help to implement it.
  • Configuring B2B capabilities (access package, policy, access review etc..) as per the application requirement and BT Standard.
  • Supporting any new application requirements, identify areas of improvement, and helping BT to improve Secure Score.
  • Troubleshooting any issues which is reported by application team, identifying root cause, and providing the solution.


  • Knowledge of various Microsoft Purview features Information Protection, Data Loss Prevention, Insider Risk Management etc…
  • Familiarity with Microsoft Defender features Microsoft Defender for Cloud Apps, Microsoft Defender for Identity, Microsoft Defender for Office365, Microsoft Defender for Endpoint
  • Knowledge of Identity Protection, Conditional Access Policy, Privileged Identity
  • Detailed knowledge on Microsoft Entra ID (Azure Active Directory), Microsoft Entra ID Governance (Identity Governance)
  • Experience in KQL (Kusto Query Language), Workbooks, Monitoring tools, Incident management and SIEM tools.
  • Should be proficient in Power Automate, Power App and Power BI
  • Experience of integrating various framework with Microsoft Entra ID (Azure AD) using corresponding MSAL libraries / Apache OIDC libraries.
  • Management and Role Based Access Control
  • Expertise on various protocols - SAML, OAUTH 2.0, OIDC, SCIM
  • Experience in setting up of Microsoft Sentinel and various Azure Cloud resources.
  • Expertise in cost Management of various Azure resources
  • Strong analytical and debugging skills. 
  • Curiosity to learn new technologies.
  • Ability to write required PowerShell Scrips and create new REST API’s using Logic Apps

Our leadership standards

Looking in:
Leading inclusively and Safely
I inspire and build trust through self-awareness, honesty and integrity.
Owning outcomes
I take the right decisions that benefit the broader organisation.

Looking out:
Delivering for the customer
I execute brilliantly on clear priorities that add value to our customers and the wider business.
Commercially savvy
I demonstrate strong commercial focus, bringing an external perspective to decision-making.

Looking to the future:
Growth mindset
I experiment and identify opportunities for growth for both myself and the organisation.
Building for the future
I build diverse future-ready teams where all individuals can be at their best.


  • Competitive salary
  • 25 days annual leave (plus bank holidays)
  • 10% on target bonus
  • Life Assurance
  • Pension scheme
  • Direct share scheme
  • Option to join the Healthcare Cash Plan or other benefits such as dental insurance, gym memberships etc.
  • 50% off EE mobile pay monthly or SIM only plans
  • Exclusive colleague discounts on our latest and greatest BT broadband packages
  • BT TV with TNT Sports and NOW Entertainment
  • 30% discount for friends and family on EE mobile pay monthly and SIM only plans

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  5  0  0

Tags: Active Directory APIs Azure Business Intelligence Cloud Compliance Governance Monitoring PowerShell REST API Risk management SAML Sentinel SIEM Zero Trust

Perks/benefits: Competitive pay Salary bonus Signing bonus Team events

Region: Europe
Country: United Kingdom

More jobs like this

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.