Microsoft 365 Engineer

Remote - Europe

About the Position

Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.

We are looking for a Microsoft 365 Engineer to join our team and manage our identity provider, ensuring secure and efficient operations.

About the Role

You will be responsible for managing the company's identity provider, including Microsoft Entra ID and Microsoft 365. You will handle user access, conditional access design, authentication methods, application onboarding, and more. You will also be the escalation point for identity incidents, expected to resolve them.

Responsibilities

• Manage Microsoft Entra ID and Microsoft 365, including users, groups, roles, and service principals.
• Design and implement Conditional Access policies.
• Manage authentication methods and phishing-resistant factors.
• Onboard applications over SAML 2.0 and OIDC / OAuth 2.0.
• Handle SCIM 2.0 provisioning and tenant consent settings.
• Implement joiner-mover-leaver automation pipelines.
• Ensure least privilege for admin access and govern service accounts and workload identities.
• Diagnose and resolve access and permission issues in Microsoft 365 services.
• Implement and manage automation using PowerShell, Azure Automation Runbooks, Azure Logic Apps, and Power Automate.

Requirements

• 3+ years administering Microsoft Entra ID in production as a primary responsibility.
• Experience with Microsoft 365 tenant settings, licensing, and admin roles.
• Knowledge of Exchange Online, mailbox permissions, mail flow, and Microsoft Defender.
• Experience with Power Platform environments and DLP connector policies.
• Proficiency in PowerShell, Microsoft Graph SDK, and enterprise applications.
• Familiarity with Azure Automation Runbooks, Azure Logic Apps, and Power Automate.
• Strong understanding of least privilege, secure administration, and change management.
• Written and spoken English at B2 or higher.

Nice to Have

• SC-300, MS-102, or SC-401 certifications or equivalent expertise.
• Experience with Microsoft Purview, Microsoft Defender for Cloud Apps, or Microsoft Sentinel.
• Knowledge of Google Cloud IAM, projects, roles, and policies.
• Experience with Git, CI/CD practices, Pester, Bicep, or Terraform.
• Access evidence for SOC 2, ISO 27001, or comparable audit cycles.

We Offer

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams

About the Company

Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.

Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.

If you need accommodations during the application process, please let us know.

Apply for this Job

Contact sales