Opportunity at
NebiusMicrosoft 365 Engineer
Nebius operates as a cloud infrastructure provider focused on the global AI economy, delivering a full-stack AI cloud platform that helps enterprises and developers handle data,…
Career Tools
About This Role
Nebius operates as a cloud infrastructure provider focused on the global AI economy, delivering a full-stack AI cloud platform that helps enterprises and developers handle data, model training, and production deployment. Headquartered in Amsterdam and traded on Nasdaq, the company maintains research and development hubs across Europe, the United Kingdom, Israel, and North America, supported by a workforce exceeding 1,500 personnel. As a Microsoft 365 Engineer at Nebius, you will…
Job Description
Nebius operates as a cloud infrastructure provider focused on the global AI economy, delivering a full-stack AI cloud platform that helps enterprises and developers handle data, model training, and production deployment. Headquartered in Amsterdam and traded on Nasdaq, the company maintains research and development hubs across Europe, the United Kingdom, Israel, and North America, supported by a workforce exceeding 1,500 personnel.
As a Microsoft 365 Engineer at Nebius, you will take full ownership of the corporate identity provider ecosystem, managing sign-in controls, user access governance, and authorization policies. Operating primarily within Microsoft Entra ID and Microsoft 365, you will also handle secondary domains like Google Workspace and Google Cloud IAM. You will serve as the principal escalation contact for all identity-related incidents originating from operations, security, application groups, and the service desk.
This role suits professionals with deep technical expertise in directory management, identity governance, and process automation who enjoy operating without intermediaries in problem resolution. Responsibilities span conditional access architecture, application onboarding, SCIM provisioning pipelines, least-privilege administrative models, and custom scripting via the Microsoft Graph SDK and PowerShell. Ideal candidates bring a solid production background in administering Microsoft cloud environments, combined with strong analytical skills to independently troubleshoot authentication failures and automated workflow errors.
Responsibilities
- Manage Microsoft Entra ID and Microsoft 365 directories, including user accounts, dynamic and assigned groups, administrative units, and service principals
- Design and deploy Conditional Access policies encompassing named locations, session controls, sign-in frequency, and break-glass exclusions
- Onboard applications via SAML 2.0 and OIDC or OAuth 2.0 while overseeing app registrations, consent workflows, and secret lifecycles
- Maintain automated joiner-mover-leaver pipelines for provisioning, licensing, and session revocation
- Administer Microsoft 365 tenant configurations, licenses, and service health across Exchange Online, SharePoint Online, and Power Platform
- Build automation tools utilizing PowerShell, the Microsoft Graph SDK, Azure Automation Runbooks, and Logic Apps
- Investigate and resolve identity incidents, sign-in anomalies, and synchronization failures escalated from operations and security teams
Requirements
- Minimum of three years of hands-on experience administering Microsoft Entra ID in production environments
- Practical knowledge of Microsoft 365 tenant management, licensing, administrative roles, and Service Health
- Direct experience with Exchange Online mail flow, mailbox permissions, and security configurations like SPF, DKIM, and DMARC
- Familiarity with Microsoft Defender threat policies, quarantine functions, and message trace tools
- Experience managing Power Platform environments, data loss prevention connector policies, and maker access
- Proficiency in PowerShell scripting using the Exchange Online module and Microsoft Graph SDK
- Familiarity with enterprise applications, app registrations, permission models, and automated provisioning systems
- Experience using Azure Automation Runbooks, Azure Logic Apps, or Power Automate
- Proficiency in written and spoken English at a B2 level or higher
Qualifications
- Hold certifications such as SC-300, MS-102, SC-401, or possess equivalent verifiable expertise
- Experience with Microsoft Entra ID Governance features including entitlement management and Privileged Identity Management
- Familiarity with Microsoft Purview, Microsoft Defender for Cloud Apps, or Microsoft Sentinel
- Knowledge of Google Cloud IAM projects, roles, policies, service accounts, and OAuth credentials
- Experience with Google Cloud workload identity federation and custom roles
- Familiarity with Git, CI/CD practices, Pester, Bicep, or Terraform
- Prior involvement in gathering access evidence for SOC 2, ISO 27001, or comparable audit cycles
Core Skills
Benefits
- Competitive compensation package
- Opportunities for career growth and ongoing learning
- Flexibility and ownership in daily work
- Collaborative and innovative working culture
- Involvement in impactful AI projects
- International environment with talented teams
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the location of this role?
The specific work location is not stated in the job posting, though Nebius is headquartered in Amsterdam with global R&D hubs across Europe, the UK, North America, and Israel.
What employment type is this position?
The posting specifies that this is a full-time position.
What salary is offered for the Microsoft 365 Engineer position?
The posting does not specify a salary figure, noting only that compensation is competitive.
What are the core technical requirements for applicants?
Applicants must have at least three years of production experience administering Microsoft Entra ID, alongside expertise in Microsoft 365 tenants, Exchange Online, PowerShell scripting, and enterprise application provisioning.
How can candidates apply for this job?
The job posting does not provide application instructions.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
