# Microsoft 365 Engineer

**Company**: Nebius
**Location**: Remote - Europe
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/nebius/jobs/4968213101?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_3096ca26-af6

## Description

You will own the company's identity provider, including Microsoft Entra ID and Microsoft 365. You will be responsible for resolving identity incidents and ensuring secure access to applications.

Responsibilities:

- Design and rollout Conditional Access

- Manage authentication methods policy and phishing-resistant factors

- Onboard applications over SAML 2.0 and OIDC / OAuth 2.0

- Manage app registrations, SCIM 2.0 provisioning, and tenant consent settings

- Implement joiner-mover-leaver pipeline and least privilege for admin access

- Monitor and analyze diagnostics from sign-in, audit, and provisioning logs

- Develop automation using PowerShell, Google Admin SDK Directory API, and Azure Automation Runbooks

Requirements:

- 3+ years administering Microsoft Entra ID in production

- Experience with Microsoft 365 tenant settings, licensing, admin roles, and Service Health

- Knowledge of PowerShell, Exchange Online, Microsoft Defender, and Power Platform

- Written and spoken English at B2 or higher

Nice to haves:

- SC-300, MS-102, or SC-401 certification

- Experience with Microsoft Entra ID Governance, Microsoft Purview, and Google Cloud IAM

- Knowledge of Git, CI/CD practices, and Terraform

## Skills

### Required
- Microsoft Entra ID
- Microsoft 365
- PowerShell
- Exchange Online
- Microsoft Defender
- Power Platform
- English

### Nice to have
- SC-300
- MS-102
- SC-401
- Microsoft Entra ID Governance
- Microsoft Purview
- Google Cloud IAM
- Git
- Terraform

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/nebius/jobs/4968213101?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)
