Cloud Engineering Specialist – Access & Security

Location

This role is based out of our Snowhill, Birmingham digital hub. We have a hybrid working model of 3 days together, 2 days wherever.

Why this job matters

The role is expected to lead & deliver Identity Security using people, process and technologies, and have expertise in the Information Security domain and its counterparts like PAM, AD, Azure AD. The role expects the hired person to be a technical expert in the field while maintaining the ability to lead and inspire a team and be a thinker.

As an Identity Security Specialist, you will play a pivotal role in ensuring the security and integrity of our organization’s digital assets and data through meticulous management of access & security controls. You will collaborate closely with IT security teams, compliance officers, and various stakeholders to maintain Azure Access & Security landscape with key components like DLP, AIP, Defender among others and have the ability to extend help across our Security stakeholders on a variety of topics.
This is an IC role.

What you’ll be doing

• Lead the deployment and management of Microsoft Defender XDR solutions across Identity, Endpoint, Office, and Cloud Apps.
• Implement and maintain phishing-resistant, passwordless authentication methods across all user devices.
• Design and enforce conditional access policies and multifactor authentication strategies using Entra ID.
• Collaborate with stakeholders to align security initiatives with business goals, ensuring licence investments are fully leveraged.
• Conduct risk assessments and mitigation planning for Microsoft 365 services including Entra ID, Defender XDR, and Microsoft Purview.
• Provide technical leadership in the development and rollout of security policies, including labelling and classification standards.
• Drive adoption of secure access practices through user education, documentation, and support.
• Monitor evolving threat landscapes and proactively adapt security controls to counter emerging tactics and techniques.

Skills and Experience

Must have:

• Deep expertise in Microsoft 365 Security and Entra ID.
• Skilled in endpoint and cloud security configuration, policy enforcement, and incident response.
• Strong understanding of regulatory frameworks (e.g., NIST CSF, ISO27002, CIS Controls).
• Deep understanding of Active Directory and directories in general/OUD (Oracle)

 

Desired:

• Understanding and knowledge of key Identity systems like Sailpoint and CyberArk
• Knowledge to create, communicate and implement telemetry data across identity systems and work with the SOC/SIEM team to ensure compliance.

Benefits

• Annual On target bonus 10% (personal and company multipliers)
• BT Pension scheme; minimum 5% employee contribution, BT contribution 10%
• Life Assurance
• Direct share scheme
• Exclusive colleague discounts on our latest and greatest BT broadband packages50% off EE mobile pay monthly or SIM only plans and 50% discount for friends and family on EE SIM only plans
• My Discounts gives colleagues access to unbeatable savings on everyday purchases at hundreds of retailers
• Discounted EE TV including TNT Sport and the NOW Entertainment membership
• Great support for working parents including pay whilst on maternity, adoptive, and paternity leave
• Option to join the Healthcare Cash Plan or other benefits such as dental insurance, gym memberships etc.
• 25 days annual leave (not including bank holidays), increasing with service with buy holiday option
• Volunteering days so you can give back to your local community
• Brand new electric vehicle salary sacrifice arrangement, known as ‘My EV’

Our leadership standards

Looking in:
– Leading inclusively and Safely
I inspire and build trust through self-awareness, honesty and integrity.
– Owning outcomes

I take the right decisions that benefit the broader organisation.

 

Looking out:
– Delivering for the customer
I execute brilliantly on clear priorities that add value to our customers and the wider business.
– Commercially savvy
I demonstrate strong commercial focus, bringing an external perspective to decision-making.

 

Looking to the future:
– Growth mindset
I experiment and identify opportunities for growth for both myself and the organisation.
– Building for the future
I build diverse future-ready teams where all individuals can be at their best.

 

About us

BT Group was the world’s first telco and our heritage in the sector is unrivalled.  As home to several of the UK’s most recognised and cherished brands – BT, EE, Openreach and Plusnet, we have always played a critical role in creating the future, and we have reached an inflection point in the transformation of our business. 
 
Over the next two years, we will complete the UK’s largest and most successful digital infrastructure project – connecting more than 25 million premises to full fibre broadband.  Together with our heavy investment in 5G, we play a central role in revolutionising how people connect with each other. 
 
While we are through the most capital-intensive phase of our fibre investment, meaning we can reward our shareholders for their commitment and patience, we are absolutely focused on how we organise ourselves in the best way to serve our customers in the years to come.  This includes radical simplification of systems, structures, and processes on a huge scale. Together with our application of AI and technology, we are on a path to creating the UK’s best telco, reimagining the customer experience and relationship with one of this country’s biggest infrastructure companies.  
 
Change on the scale we will all experience in the coming years is unprecedented.  BT Group is committed to being the driving force behind improving connectivity for millions and there has never been a more exciting time to join a company and leadership team with the skills, experience, creativity, and passion to take this company into a new era.

A FEW POINTS TO NOTE:

Although these roles are listed as full-time, if you’re a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.

We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.

DON’T MEET EVERY SINGLE REQUIREMENT?

Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We’re committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you’re excited about this role but your past experience doesn’t align perfectly with every requirement on the Job Description, please apply anyway – you may just be the right candidate for this or other roles in our wider team.