Microsoft 365 Engineer  

About the role

CoreData, a global market research consultancy, is hiring a hands-on Microsoft 365 Engineer to own the management, security, and reliability of our digital infrastructure, systems, and data. You'll be the in-house subject-matter expert across Microsoft 365 administration, identity and access, security and compliance, and network security.

This Manila-based, full-time role suits candidates with 5+ years managing and monitoring Microsoft environments, with some Microsoft Defender exposure. Reporting to the Cloud Infrastructure Engineer, you'll join our Manila team and support offices in Australia, the UK, and the US.

About You

Detail-oriented with a strong commitment to security and confidentiality, you're passionate about IT infrastructure and cybersecurity and thrive in fast-paced, collaborative environments under tight deadlines.

You work well independently and in a team, troubleshoot complex issues, and engage with stakeholders across regions. You own problems from report to resolution, communicate clearly with technical and non-technical colleagues, document your work, and apply a security-first, least-privilege mindset. You stay current on the latest technologies, security best practices, and cloud innovations.

Duties and responsibilities:

What you’ll be doing

Monitoring and ensuring the management and security of CoreData's digital infrastructure, systems, and data as an independent subject-matter expert. This involves:

Microsoft 365 & Cloud Administration

• Administering the Microsoft 365 tenant end-to-end (Exchange Online, SharePoint, Teams, OneDrive), including service health and configuration
• Onboarding/offboarding users and managing the end-to-end user lifecycle
• Managing licensing, provisioning, and day-to-day operations via the Microsoft 365 admin center.

Identity & Access Management

• Administering Microsoft Entra ID (Azure AD): enforcing MFA, Conditional Access, and SSO; monitoring login security.
• Applying RBAC and least-privilege principles, and managing privileged/just-in-time access.

Security, Compliance & Threat Management

• Centralized security logging and incident response: aggregating logs, triaging events, and maintaining a rehearsed incident-response runbook.
• Operating the Microsoft Defender suite (Office 365, Endpoint, Cloud Apps) and improving Microsoft Secure Score.
• Immediately notifying the Cloud Infrastructure Engineer and CTO of malicious attacks or Defender anomalies.
• Data protection and compliance via Microsoft Purview (DLP, retention, audit, eDiscovery) to safeguard sensitive client and research data.
• Active threat detection, perimeter scanning, and vulnerability management across the estate.

Network & Infrastructure Security

• Configuring and maintaining firewall rules and secure remote access (VPN).
• Managing Ubiquiti firewalls, switches, access points, and VPN; applying network segmentation and secure configuration.
• Patch management and system hardening across servers, endpoints, and network devices.
• Owning tested backups and a documented DR/BCP plan with defined RPO/RTO.

Endpoint Management & Support

• Managing and securing company devices via Microsoft Intune/MDM with compliance and configuration policies.
• Providing end-user and service-desk support with a helpful, customer-service mindset.

Documentation & Operations

• Maintaining clear, up-to-date documentation: runbooks, network diagrams, asset register, and change records.

What you’ll bring to the role

• 5+ years of experience in IT security, cybersecurity, or cloud security.
• Bachelor's degree or equivalent experience in IT/Cybersecurity.
• An understanding of Cybersecurity
• Experience managing firewalls, intrusion prevention systems (IPS), and SIEM solutions.
• Familiarity with Ubiquiti security devices and network management.
• Knowledge of penetration testing methodologies and vulnerability management tools.
• Hands-on experience with patch management, system hardening, and security policy enforcement.

One of the following relevant certifications on the following:

• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Information Security Administrator Associate (SC-401)
• Microsoft Certified: Administrator Expert (MS-102)