About
*The role in one line*
We're a small, specialist Microsoft-aligned MSP looking for a capable Field M365 Engineer to join a two-person team and help us do more of the work we're good at — delivering support, Microsoft 365 security, migrations, and tenant hardening for SME clients who take their IT seriously.
*About us*
We're a small MSP working primarily with clients on Microsoft 365 Business Premium and E5-equivalent security stacks across Hertfordshire, Essex, and North East London. Our work is heavily Microsoft 365 — Entra ID, Intune, Exchange Online, SharePoint, Teams, Defender, and Purview — with the occasional hardware or on-premises piece still in the mix.
We're not a ticket factory. Our clients are small and mid-size organisations where the IT relationship actually matters, and our edge is doing proper security and migration work rather than keeping the lights on at volume..
The team today is a senior engineer who owns architecture, security design, and delivery leadership, and a 1st line engineer handling day-to-day support. This role sits between — the person who makes the day-to-day run properly so the business can keep growing into more interesting project work.
*What you'll actually be doing*
About 80% of your time will be on-site at client locations across Herts, Essex, and NE London. This is a genuinely client-facing, hands-on role — not a remote service desk seat.
The on-site work is a mix of two things:
*Project delivery.* Executing M365 migration and tenant hardening projects under senior direction — mailbox moves, Intune rollouts, Conditional Access implementation, Defender for Endpoint onboarding, SharePoint migrations and Teams provisioning. You'll be the hands carrying out the plan while working closely with the senior engineer who's leading the engagement.
*Escalated support visits.* When our 1st line engineer hits something they can't resolve remotely, or when a client needs physical presence — a desktop that won't cooperate, a printer or networking issue, a user who needs proper in-person help with a tricky config — you'll be the person going on-site to sort it. These are the 2nd line reactive jobs where being there in person is what makes the difference.
Alongside the on-site work, a typical week also includes:
* Running BAU changes across the M365 stack: Intune policies, Exchange mail flow, Teams and SharePoint admin, Entra user and group management
* Taking remote escalations from 1st line — anything past password resets, group changes, and standard build work
* Triaging Defender for Endpoint and Defender for Office 365 alerts, with senior support on complex incidents
* Being the visible face of Diamond IT at client sites — this role is as much about being credible and calm with people as it is about being good with PowerShell
You'll work closely with the senior engineer on larger project workstreams, with scope to take increasing ownership as your M365 depth grows.
What we're looking for
*Experience.* 3+ years in an MSP or multi-tenant M365 environment. You've worked across multiple clients, context-switched between environments, and you know the difference between the textbook answer and the one that actually works at 4pm on a Friday.
*Technical.* Confident across the Microsoft 365 admin stack:
* *Intune* — device enrolment, compliance policies, app deployment, troubleshooting
* *Exchange Online* — mailbox administration, mail flow, shared mailboxes, migration execution
* *Entra ID* — user and group management, Conditional Access implementation (you don't need to design it, but you can implement policies we've designed), MFA and SSPR
* *Teams and SharePoint* — admin-level, not just end-user support
* *Defender for Endpoint* — alert triage, device onboarding, basic policy work
* *PowerShell* — comfortable running and lightly modifying scripts; we don't expect you to write modules from scratch
* *Windows desktop, networking, and hardware troubleshooting* — you'll be the person on-site fixing what the 1st line engineer can't resolve remotely, so solid general troubleshooting across Windows, basic networking (DNS, DHCP, routing, Wi-Fi), and hardware (laptops, printers, peripherals) matters as much as the cloud stack
*Attitude.* You take ownership of client work. You escalate properly — with the context needed to resolve things, not just "this is broken." You're comfortable being the Diamond IT presence on a client site without someone looking over your shoulder, and you know when to ask for help versus when to push through.
*Practical.* Full UK driving licence and your own car are essential — your place of work is our client sites, and you'll be travelling between them regularly. You should be comfortable with this as part of the role.
Nice to have, not essential
* Microsoft certifications — MS-102, SC-300, MD-102, or similar
* Exposure to Purview (DLP, IRM, sensitivity labels)
* Defender for Office 365 or Defender for Cloud Apps experience
* PIM and Access Review work in Entra ID P2 environments
* Hybrid identity experience (Entra Connect, on-prem AD integration)
* Any prior security operations or SOC-adjacent work
None of these are gating. We'll support the right person through certification and give you exposure to the advanced work as you're ready for it.
*What you get*
* £38,000–£42,000 depending on experience
* Genuine project exposure — you won't be stuck on ticket queues
* A clear progression path to Senior M365 Engineer, with defined competency milestones and pay progression at around the 18-month mark
* Workplace pension
* Small team, no bureaucracy — your ideas land directly with the people who can action them
*Logistics*
* Home-based when not on client site; approximately 80% of time will be spent at client locations
* Full UK driving licence and own car essential
* Client base is concentrated across Hertfordshire, Essex, and North East London — you should be reasonably placed to cover this geography
* Occasional evening or weekend project work (migrations, cutovers), compensated with time off in lieu
* Right to work in the UK required; sponsorship not available
*Our process is:*
* 30-minute informal call with the senior engineer to talk through your experience and ours
* Technical interview — scenario-based, focused on how you think and work, not trick questions
* A short meet-the-team conversation with the wider team before any offer
Pay: £38,000.00-£42,000.00 per year
Work Location: On the road
Languages
- English
Notice for Users
This job comes from a TieTalent partner platform. Click "Apply Now" to submit your application directly on their site.