Contract type: Permanent
Hours: 37.5 hours / week
Salary: circa £48,000 depending on experience
Location: Leeds(LS1 4HR) OR Birmingham (B2 5DB)
WFH policy: Employees are required to attend the office 2 days/week
Flexible working: Variety of flexible work patterns subject to line manager discretion e.g. Compressed 9-day fortnight.
Reports to: IT Service Operations Manager
Deadline Note: We reserve the right to close the advert before the advertised deadline if there are a high volume of applications.
Role Summary:
The IT Cloud Productivity Engineer (Microsoft) is responsible for the day-to-day operational management, administration, optimisation, security, and support of the Microsoft 365 environment and integrated productivity services. The role ensures the stability, performance, availability, and security of core collaboration platforms to deliver an optimal and consistent user experience across the organisation.
The role acts as the Microsoft Platform Owner, holding overall accountability for the strategic direction, design authority, and operational integrity of the Microsoft platforms. The Platform Owner defines and enforces platform configuration standards, approved design patterns, and governance controls across collaboration, identity, security, and endpoint services.
The role has end-to-end ownership for the planning and delivery of platform enhancements, ensuring the Microsoft environment remains secure, resilient, scalable, and aligned to organisational priorities. As the final technical decision-maker for the platform, the Platform Owner ensures that all changes are implemented in line with agreed architectural principles, security requirements, and regulatory obligations.
Working in close partnership with the Technical and specialist teams across Security, Infrastructure, and IT Operations, the role provides clear direction and assurance that Microsoft platform decisions, roadmaps, and changes are consistent, compliant, and strategically aligned
-
Own the operational administration, optimisation, and lifecycle management of Microsoft 365 services, including Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft Defender, Copilot, Microsoft Purview (sensitivity, retention, audit), and the Power Platform.
- Design, implement, and govern identity and access management using Azure AD / Entra ID, including Conditional Access, MFA enforcement, SSO integrations, and access governance aligned to Zero Trust principles.
- Own end-to-end endpoint lifecycle management across Windows, macOS, and iOS platforms using Microsoft Intune, including:
a. Definition and enforcement of BYOD vs corporate device strategies.
b. Creation, management, and optimisation of Autopilot profiles for device provisioning and user onboarding.
c.Ongoing configuration, compliance, and lifecycle support of managed devices.
-
Lead application lifecycle management and packaging across all supported device types, including:
a.Application packaging, deployment, update, and retirement strategies
b.Standardisation of deployment methods, detection rules, and user targeting
c. Ensuring secure, scalable, and consistent application delivery via Intune and related tooling
- Own and manage the third-party productivity and identity ecosystem, including JumpCloud, Apple Business Manager, DocuSign, Sage and Exclaimer, ensuring seamless integration with Microsoft 365 and endpoint management platforms.
- Define and enforce Microsoft 365 security and compliance configurations, including anti-spam and malware policies, data protection controls, audit capabilities, and alignment with organisational and regulatory requirements.
- Design and deliver automation and efficiency initiatives using Power Automate and PowerShell, including the creation of AI agents using Microsoft Copilot, reducing business-as-usual workload for the Service Desk and improving operational resilience across the digital workplace.
- Act as the senior escalation point for the Service Desk, Data & Analytics and all other tech hub teams for all Microsoft, endpoint, and cloud productivity issues, providing advanced troubleshooting, root-cause analysis, and knowledge transfer.
- Maintain authoritative technical documentation and reporting, including platform configurations, standards, procedures, and reporting on service performance, security posture, and usage trends.
- Collaborate closely with Security, Infrastructure, Legal/Data Protection, and other technology teams to ensure cohesive service delivery, secure design, and compliance across the Microsoft 365 ecosystem.
- Provide mentorship and technical leadership, upskilling colleagues across the wider IT teams, and supporting the maturity of cloud productivity and endpoint management capabilities.
Essential:
- Proven enterprise experience owning and administering the Microsoft 365 ecosystem, including Exchange Online, Teams, SharePoint Online, OneDrive, Defender, Purview, and Power Platform.
- Proven ability to design, configure, optimise, support, and operate Microsoft 365 services across their full lifecycle.
- Strong hands-on expertise with Azure AD / Entra ID, including Conditional Access, MFA strategy, SSO integrations, Privileged Identity Management and identity lifecycle management.
- Extensive experience managing enterprise endpoints using Microsoft Intune across Windows, macOS, Android, and iOS platforms.
- Demonstrable ownership of end-to-end device lifecycle management, including provisioning, compliance, and retirement.
- Proven capability to manage application lifecycle management, including packaging, deployment, updates, and retirement across supported device types.
- Strong experience configuring Microsoft 365 security and compliance controls, including anti-spam, malware protection, data governance, and audit policies.
- Experience acting as a senior escalation point for Microsoft 365, endpoint, and cloud productivity incidents, providing advanced troubleshooting and root-cause analysis.
- Ability to produce and maintain high-quality technical documentation, standards, and service reporting.
- Strong stakeholder engagement and collaboration skills, working effectively across IT Service Operations, Security, Infrastructure, and technology teams.
- Proactive, ownership-driven approach with a focus on service stability, optimisation, and continuous improvement.
Desirable
- Experience with Microsoft Copilot and advanced use of Purview for information protection and compliance.
- Demonstrable ownership of Autopilot provisioning and strategic approaches to BYOD vs corporate-owned device models.
- SME-level knowledge of Apple Business Manager and macOS management, including integration with Intune and JumpCloud.
- Practical experience collaborating with Security, Legal, and Data Protection teams on eDiscovery, SARs, and regulatory compliance activities.
- Proven ability to design and implement automation using Power Automate and PowerShell to reduce operational workload and improve efficiency.
- Experience mentoring and upskilling colleagues, contributing to service maturity and capability development.
- Demonstrable contribution to digital workplace transformation initiatives beyond day-to-day operational delivery.
As if contributing to and supporting work that makes life better for millions wasn’t rewarding enough, we offer a full range of benefits too. Key benefits that may be available depending on the role include:
- Annual performance based bonus, up to 10%
- 25 days annual leave, plus eight bank holidays
- Up to 8% pension contribution
- Financial support and time off for study relevant to your role, plus a professional membership subscription
- Employee referral scheme (up to £1500), and colleague recognition scheme
- Family friendly policies, including enhanced maternity leave and shared parental leave
- Free, confidential employee assistance, including financial management, family care, mental health, and on-call GP service
- Three paid volunteering days a year
- Season ticket loan and cycle to work schemes
- Family savings on days out and English Heritage, gym discounts, cash back and discounts at selected retailers
- Employee resource groups
The Low Carbon Contracts Company (LCCC) exists to help decarbonise the generation of electricity and make it more affordable for the future. Our work is central to the delivery of the Government’s objective to achieve Net Zero target by 2050.
Discover more about LCCC and what it's like to work with us by watching this video:
https://vimeo.com/1071699533
Please take the time to answer the optional diversity questions
At LCCC, we are powered by curiosity, driven to learn from different perspectives and experiences as we work towards a flexible energy future. We are committed to fostering a diverse and inclusive workplace where everyone can be their authentic selves and feel empowered to own every outcome.
We believe that we are better together – and that diverse teams, reflective of the communities we serve, help us thrive, innovate and deliver greater impact. Your diversity data helps us track how well we're progressing towards our inclusion goals.
Please note that any diversity data you share is completely anonymised and used only in aggregated reports that are not linked to individual candidates.
