Microsoft 365 & Security Infrastructure Administrator

BURGERS & FRIES AND INCREDIBLE CAREERS!

We're the burger restaurant with the uncomplicated formula: burgers and fries cooked to perfection, with no frozen ingredients. And we've stuck to the same 'perfect and serve' philosophy since our family business began in 1986.

These days, we're still just as much a family as we always have been. We have tons of integrity, we're enthusiastic. we're competitive and we just get it done - whatever the challenge.

We're looking for a Microsoft 365 & Security Infrastructure Administrator who loves building things properly. This role sits at the heart of our cybersecurity strategy, taking a clear security vision and engineering it into a scalable, automated Microsoft cloud platform that's secure by design. It's a hands-on, high-impact role with real ownership and influence

Reporting To: Head of Cybersecurity (Accountable) Role Status: Technical Lead (Responsible) Mission: To translate strategic vision into a scalable, \"secure-by-design\" technical reality using modern Microsoft cloud principles

YOUR PURPOSE

Vision to Reality: While the Head of Cybersecurity defines the \"Why\" and \"Vision,\" this role defines the technical \"What\" and engineers the \"How.\"

Scalability First: Move from case-by-case, reactive fixes to a fully automated, policy-driven management-at-scale model.

KEY OUTCOMES FOR SUCCESS

Scalable Infrastructure: Transition from ad-hoc management to a fully automated, policy-driven environment.

Proactive Security: Remediating security gaps before they are exploited, with a focus on long-term stability.

Metrics-Driven Operations: Establishing a regular cadence of high-signal reporting on platform health and risk reduction.

Zero-Touch Operations: Fully operational, secure automated provisioning reducing manual intervention.

ESSENTIAL RESPONSIBILITIES

Identity, Access & Segregation (EntraID): Optimising structure via Administrative Units and enforcing strict segregation of duties.

Endpoint Security & Device Management (Intune): Configuring MDM/MAM and automated deployment for all device types.

Platform Hardening & Security Baselines: Implementing \"Secure-by-Design\" baselines across the M365 stack, including Copilot.

Azure Tenant & Modern Cloud Governance: Enforcing Data Residency, Zero Trust principles, and Infrastructure as Code (Terraform).

SharePoint & Collaboration Governance: Technical delivery of site life cycles and external sharing controls.

Compliance, Audit & Documentation: Maintaining technical standards and \"code-based\" evidence for audit readiness.

Reporting, Analytics & Metrics: Defining and delivering KPIs to measure implementation effectiveness and platform health.

THE IDEAL CANDIDATE

Proactive Solution-Finder: Prioritises long-term system integrity over short-term fixes.

Data-Driven & Analytical: Defines success through measurable KPIs and clear executive reporting.

Modern Cloud Mentality: Committed to staying current with Microsoft's evolving cloud and AI landscape.

OUR REWARDS & BENEFITS

A generous annual bonus based on business performance

Pension scheme

Enhanced Maternity and Paternity leave

Long service rewards after 5 and 10 years with Five Guys

Five Guys Perks & discounts

Invite to our annual General Managers conference - this year we celebrated in Lisbon!

Life assurance

Private medical via Vitality

Wellbeing support