← All roles

Microsoft 365 Engineer

Nebius· IT Infrastructure
Apply on company site
PragueFull-timePosted 1mo ago

About the role

Nebius is seeking a Microsoft 365 Engineer to own and manage the company's identity provider landscape, focusing on Microsoft Entra ID and Microsoft 365, with secondary exposure to Google Workspace and Cloud Identity. The role includes design, implementation, automation, incident escalation, and governance of identity, licensing, and access across tenants and applications.

Responsibilities

  • Own Microsoft Entra ID and Microsoft 365 environments including users, dynamic and assigned groups, administrative units, directory roles, service principals, and workload identities.
  • Design and rollout Conditional Access with named locations, client app and platform conditions, session controls, sign-in frequency, break-glass exclusions, and report-only staging.
  • Manage authentication methods policy and phishing-resistant factors.
  • Onboard applications via SAML 2.0 and OIDC/OAuth 2.0 including related configurations (NameID, claims mapping, certificate rollover, encrypted assertions; authorization codes, client credentials, device code).
  • Administer app registrations: redirect URIs, permissions, admin consent workflow, secret and certificate lifecycle.
  • Configure SCIM 2.0 provisioning: attribute mappings, scoping filters, expression transformations, quarantined jobs, drift reconciliation.
  • Manage tenant consent settings, OAuth grant review, remediation of over-permissioned/stale apps; implement defensible controls for SaaS without SSO/SCIM.
  • Automation pipelines for joiner-mover-leaver: provisioning, group-based licensing, revocation with session/refresh token invalidation.
  • Enforce least privilege for admin access: scoped RBAC, PIM, access reviews, entitlement management packages.
  • Governance of service accounts and workload identities: ownership, credential rotation, permission scoping, decommissioning.
  • Manage Microsoft 365 tenant settings, licensing, admin roles; troubleshoot Exchange Online, SharePoint Online, Power Platform access/permissions.
  • Analyze diagnostics from sign-in, audit, and provisioning logs; configure Log Analytics and KQL queries.
  • Configure cross-tenant access settings and B2B external collaboration.
  • Automation and tooling across platforms (PowerShell Graph SDK, Graph REST API, Admin SDK Directory API, Cloud Identity API, gcloud).
  • Develop scheduled and event-driven workflows (Azure Automation Runbooks, Azure Logic Apps, Power Automate).
  • Ensure unattended execution with managed identities, credential rotation, structured logging, error handling, and retries.
  • Treat automation as production code with version control, peer reviews, and documented rollback.

Qualifications

  • 3+ years administering Microsoft Entra ID in production as a primary responsibility.
  • Microsoft 365 tenant: settings, licensing, admin roles, Service Health
  • Exchange Online: mailbox permissions, groups, mail flow, SPF/DKIM/DMARC
  • Microsoft Defender: threat policies, quarantine, message trace
  • Power Platform: environments, DLP connector policies, maker access
  • PowerShell: Exchange Online module, Microsoft Graph SDK
  • Enterprise applications, app registrations, consent and permission models, automated provisioning
  • Azure Automation Runbooks, Azure Logic Apps, Power Automate, or comparable platforms
  • Least privilege, secure administration, change management, and documentation of configurations
  • English proficiency at B2 or higher

Skills

Required:Microsoft Entra ID administrationMicrosoft 365 administrationExchange OnlinePowerShell / Graph SDK
Nice to have:Azure Automation / Logic Apps / Power Automate

Benefits

  • Competitive compensation
  • Career growth and learning opportunities
  • Flexibility and ownership
  • Collaborative and innovative culture
  • Opportunity to work on impactful AI projects
  • International environment and talented teams
Last updated Oct 7, 2026. Interested? Apply on the company site.
Nebius logo

About Nebius

The ultimate cloud for AI explorers

Discover the most efficient way to build, tune and run your AI models and applications on top-notch NVIDIA® GPUs.

AI CloudToken FactoryGPUKubernetesSlurmManaged servicesTerraformAPI
Company profileWebsite

More open roles at Nebius