Purpose

We are seeking a highly skilled and self-directed Senior Azure Infrastructure Engineer with specialised experience in Microsoft Azure tenant splits and hybrid infrastructure. The ideal candidate will have significant experience managing complex migrations, strong architectural insight into both cloud and on-premises technologies, and the ability to independently deliver technically sound, business-aligned solutions.

This is a strategic technical role reporting directly to the CTO and will initially focus on the splitting and restricting of an existing Microsoft 365 tenant, followed by broader responsibilities in the administration and enhancement of the firm’s Microsoft 365, Azure, and hybrid environments.

Principal Duties and Responsibilities

Azure Tenant Split Project (Initial Focus):

• Lead the end-to-end splitting of an existing Microsoft 365 tenant into two distinct, operationally independent environments.
• Design and execute a comprehensive migration and segmentation strategy, ensuring minimal disruption to business operations.
• Assess and mitigate implications on licensing, identity management, application integrations, mail flow, security, and user access.
• Maintain regulatory and internal compliance throughout the split process, particularly ISO 27001 and GDPR alignment.
• Collaborate with senior leadership to provide technical direction, project timelines, and risk assessments.

Post-Split Operational Management (Ongoing Duties):

• Manage and optimize Microsoft 365 services including SharePoint, OneDrive, Teams, and Exchange Online.
• Maintain and enforce conditional access policies, Zero Trust architectures, and multi-factor authentication (MFA) across Azure AD.
• Handle daily support tasks, service optimization, and incident resolution across Azure and M365 workloads.
• Lead identity and access governance using PIM, RBAC, and Microsoft Entra.
• Implement, support, and refine security configurations across both cloud and on-prem environments.

Networking, Firewalls & On-Prem Integration:

• Design and support enterprise-grade networking including routing, switching, VLANs, SD-WAN, and Azure VNet configurations.
• Manage and configure firewalls (Azure Firewall, FortiGate, or equivalent) with strong hands-on troubleshooting capabilities.
• Lead projects involving Active Directory, DNS, DHCP, and Group Policy, ensuring seamless synchronization with Azure AD.
• Support hybrid environments and infrastructure where legacy systems must be integrated securely and efficiently into the cloud ecosystem.

What We Offer:

• High-impact role reporting to the CTO with visibility across the organization.
• A leadership opportunity in a strategic Azure migration and modernization program.
• Professional development support and certification sponsorship.
• Competitive salary and benefits in a globally recognized, ISO 27001-certified law firm

• Self-managed: Capable of leading initiatives with minimal oversight.
• Solution-oriented: Able to assess complex challenges and present viable strategies quickly.
• Business-aware: Understands how technology choices impact broader business operations.
• Collaborative: Works effectively with infrastructure, development, and compliance teams.

• Minimum 10 years of experience in enterprise on-premises IT infrastructure (Active Directory, firewalls, routing/switching).
• Minimum 5 years of Azure/M365 hands-on experience, particularly in tenant-level administration.
• Demonstrable experience with splitting a Microsoft 365 tenant, including all technical,security, and operational components.
• Expertise in Azure AD, Conditional Access, Identity Protection, PIM, and M365 security.
• Strong scripting and automation skills (e.g. PowerShell, Terraform, ARM templates).
• Deep understanding of Azure networking, Defender for Cloud, Sentinel, and Microsoft 365 Defender.
• Experience with compliance and security frameworks such as ISO 27001 and GDPR.
• Strong documentation, troubleshooting, and incident response capabilities.
• Critical and analytical thinking – can independently propose solutions, define deliverables, and manage timelines without close supervision.