Lead Engineer - M365 (Inception42)

Inception42, a G42 company, is the region\u2019s leading innovator of AI-powered domain-specific as well as industry-agnostic products, built on a rich heritage of research and development. Within the G42 ecosystem, Inception functions as the core intelligence layer \u2013 transforming data and compute infrastructure into real-world, applied AI solutions. Beyond its commercial endeavors, Inception is committed to creating positive societal impact. For more information, please visit www.inception42.ai Inception42, a G42 company, is the region\u2019s leading innovator of AI-powered domain-specific as well as industry-agnostic products, built on a rich heritage of research and development. Within the G42 ecosystem, Inception42 functions as the core intelligence layer \u2013 transforming data and compute infrastructure into real-world, applied AI solutions. Beyond its commercial endeavors, Inception42 is committed to creating positive societal impact. For more information, please visit www.inceptionai.ai Own the design, security, and operation of the Microsoft 365 estate, Entra ID, and Azure platform. This hands-on Lead Engineer role sets technical standards, leads a small engineering group, and serves as the final technical escalation point. Work with Information Security, Application Support, Product Engineering, and business stakeholders to improve platform reliability, security, cost, and user experience. \u2022 Own the architecture, security and operation of the Microsoft 365 estate, including Exchange Online, SharePoint, OneDrive, Teams, Intune, Defender and Purview. \u2022 Own Entra ID as the organisation's identity platform, covering Conditional Access, Privileged Identity Management, hybrid identity, application integration and identity governance. \u2022 Own Azure platform engineering and governance, including landing zones, subscription and policy design, monitoring, access control and cost management. \u2022 Define the technical standards for the platform and ensure they are applied consistently across the estate. \u2022 Design and maintain the security posture across the estate, including Zero Trust access, device compliance, data protection and retention, and provide the evidence required for audit and customer assurance. \u2022 Automate platform administration and manage configuration as code, with appropriate version control and change management. \u2022 Lead significant platform changes such as migrations, tenant work and new service introductions, from design through to stable operation. \u2022 Act as the senior technical escalation point for platform issues and ensure root causes are addressed permanently. \u2022 Mentor engineers through design review, technical guidance and knowledge sharing. \u2022 Assess the Microsoft roadmap and advise on adoption, including the implications for cost, security and user experience. \u2022 Within six months, assess the estate, agree risks and priorities, close priority identity and privileged-access gaps, publish technical standards, and begin automating repetitive administration. \u2022 Within twelve months, demonstrate improved security, collaboration and identity reliability, auditable configuration as code, effective Azure cost and access governance, and stronger engineering capability. \u2022 Deep hands-on expertise across the Microsoft 365 estate at enterprise scale, including Exchange Online, SharePoint and OneDrive, Teams and Intune. \u2022 Strong Entra ID engineering experience covering Conditional Access design, Privileged Identity Management, hybrid identity and directory synchronisation, application registration and single sign-on, and identity governance. \u2022 Has led large-scale Microsoft 365 platform work such as tenant migration or consolidation, and taken it through to a stable outcome. \u2022 Practical security and compliance capability within Microsoft 365, including Zero Trust principles, Defender, and Purview for data protection, retention and eDiscovery. \u2022 Automation and infrastructure as code, with strong PowerShell and experience of Bicep, Terraform or ARM. \u2022 Azure platform engineering and governance, including subscription and landing zone design, Azure Policy, RBAC, monitoring and cost control. \u2022 Sound technical judgement, and the ability to explain technical decisions clearly to non-technical stakeholders. \u2022 Technical leadership of a small engineering team, or acting as a design authority. \u2022 Microsoft certifications such as Identity and Access Administrator, Microsoft 365 Administrator Expert, or Azure Solutions Architect Expert. \u2022 Experience meeting UAE regulatory or public sector security requirements, and supporting customer security assurance and audit. \u2022 Experience securing and integrating AI services within a Microsoft estate, including Copilot governance and data readiness. \u2022 Exposure to hybrid or multi-cloud environments alongside Azure. \u2022 Experience

Expert-level hands-on experience with Microsoft 365 estate (Exchange Online, SharePoint, OneDrive, Teams, Intune), Entra ID, and Azure platform engineering at enterprise scale. Strong governance, security posture design (Zero Trust, data protection, retention, eDiscovery), and automation/infrastructure as code (PowerShell, Bicep, Terraform, ARM). Proven track record leading large-scale Microsoft 365 platform work (tenant migrations/consolidation) to stable outcomes. Deep knowledge of Conditional Access, Privileged Identity Management, hybrid identity, identity governance, and application registration with SSO. Experience delivering security compliance for UAE regulatory/public sector requirements and audit readiness. Ability to mentor a small engineering team and act as a design authority. Certifications: Microsoft Identity and Access Administrator, Microsoft 365 Administrator Expert, or Azure Solutions Architect Expert. Familiarity with Copilot governance and data readiness for AI services within Microsoft estate. Exposure to hybrid or multi-cloud environments with Azure.

Own the architecture, security and operation of the Microsoft 365 estate, Entra ID, and Azure platform. Define technical standards for the platform and ensure consistent application across the estate. Design and maintain the security posture, enable Zero Trust, device compliance, data protection and retention, and provide evidence for audits. Automate platform administration and manage configuration as code with version control and change management. Lead significant platform changes (migrations, tenant work, new services) from design to stable operation. Serve as senior technical escalation point, address root causes, and mentor engineers through design reviews and knowledge sharing. Assess roadmap and advise on adoption, cost, security, and user experience. Within six months, assess estate, publish standards, close gaps, and begin automating repetitive tasks. Within twelve months, demonstrate improved security, collaboration, identity reliability, auditable configuration as code, and stronger engineering capability.