Key Skills

Job Description

Reporting to the Group Director Security & IT Operations, the Group Azure Cloud and Workplace Operations Engineer supports the operation, maintenance and continuous improvement of BME’s Azure cloud, Microsoft 365 and hybrid IT services. The role combines Azure cloud operations, tenant-level administration, Microsoft 365 workplace engineering and support for strategic Group technology initiatives. It is focused on ensuring that BME’s cloud and workplace platforms are secure, reliable, scalable and cost-effective across the Group, while supporting infrastructure harmonisation and consolidation across BME. The role supports the BME Cloud Center of Excellence and works closely with Group IT, Security, Architecture, local OpCo IT teams and external partners. It contributes to the development, operation and ongoing improvement of Azure-based platforms, including the BME AI platform and associated Azure services. The role provides technical support for operational issues across the Group’s Azure and Microsoft 365 tenants and acts as an escalation point for complex cloud, endpoint, collaboration and identity-related issues. It also supports the delivery of Group strategic projects, platform improvements and cloud modernisation initiatives. Key Tasks and Responsibilities Operate and improve Azure and hybrid infrastructure to deliver reliable, secure, scalable and high-performing services at controlled cost. Manage Azure tenant resources, networking, identity, policies, monitoring and costs to maintain consistent governance and effective resource control across the Group. Support the cloud roadmap, Azure Landing Zones, harmonisation, migration and modernisation to create a consistent cloud foundation and reduce legacy risks. Build and operate Azure-based Group services, including the BME AI platform, with security, monitoring, access controls and documented support so that the business can innovate reliably. Administer and improve Exchange Online, Intune, Teams and SharePoint Online, including governance, security, lifecycle management and troubleshooting, to enable secure and effective collaboration. Develop automation and deployment processes using Azure DevOps, CI/CD and Infrastructure as Code, preferably Bicep, to reduce manual effort and deployment errors. Improve monitoring, automation, FinOps, AIOps, incident and problem management, disaster recovery and business continuity to minimise disruption and strengthen service efficiency and resilience. Collaborate with Group IT, Security, Architecture, OpCo teams and partners on cloud and workplace projects to deliver coordinated improvements aligned with shared standards and local needs. Maintain security, identity, endpoint, data-protection and compliance controls across Azure and Microsoft 365 with Information Security teams, applying zero-trust principles to protect services and reduce risk. Provide second- and third-level support for Azure, Microsoft 365, identity, endpoint and collaboration incidents, addressing root causes and technical debt and maintaining runbooks and knowledge articles to restore services and prevent recurrence. Key Functional Competencies Solid technical expertise in Microsoft Azure, hybrid cloud operations, Microsoft 365 administration, endpoint management, identity, networking and IT security. Practical ability to troubleshoot and resolve complex operational issues across Azure, Microsoft 365, identity, endpoint and collaboration services. Good understanding of Azure governance, security controls, monitoring, automation, backup, disaster recovery, cost management and operational best practices. Practical experience with Microsoft 365 administration, particularly Exchange Online, Intune, Teams and SharePoint Online. Working knowledge of Azure DevOps, CI/CD pipelines, Infrastructure as Code and automated deployment practices, preferably including Bicep. Ability to support and operate Azure-based platforms and services used for data, automation, AI and business applications. Strong communication, analytical and problem-solving skills, with the ability to explain technical issues clearly to Group IT, OpCo IT teams and business stakeholders. Ability to collaborate effectively across a federated, multi-OpCo and multi-national IT environment. A pragmatic, collaborative and continuous-improvement mindset, with a strong focus on quality, security, reliability, customer service and knowledge sharing. Education and Experience At least three years of hands-on experience in Azure cloud engineering, cloud operations, Microsoft 365 administration, infrastructure engineering or IT operations within an international or multi-site environment. Demonstrable experience operating Azure cloud infrastructure and hybrid-cloud services in a production environment. Practical experience administering Microsoft 365 services, particularly Exchange Online, Microsoft Intune, Microsoft Teams and SharePoint Online. Experience with Entra ID, identity and access management, Conditional Access, role-based access control, privileged access and security controls is highly desirable. Practical experience with Azure monitoring, logging, security, backup, disaster recovery, networking, governance and cost-management capabilities. Experience with Azure DevOps, CI/CD pipelines, Infrastructure as Code and automated deployment practices; Bicep experience is desirable. Experience supporting endpoint-management services, including Intune device configuration, compliance, application deployment and Windows management. Experience supporting cloud migration, infrastructure consolidation, Microsoft 365 modernisation, digital workplace transformation or AI-platform initiatives is an advantage. Microsoft Azure and Microsoft 365 certifications are desirable, particularly certifications relating to Azure administration, security, Microsoft 365 administration, endpoint administration or identity. Strong knowledge of IT service-management practices, incident management, change management and operational documentation. Proficient in English; additional relevant language skills are a plus. Location Schiphol and home-office (BME Policy: three days at Schiphol office). Please note that this vacancy is only open for candidates living already in the Netherlands. BME does not provide visa sponsorship or relocation. BME has an exclusive partnership for this vacancy. Unsolicited approaches, CV submissions or candidate introductions by recruitment agencies or third parties will not be be accepted and no fees will be payable.

Core Responsibilities

Operate and improve Azure, hybrid infrastructure, and Microsoft 365 services, including tenant governance, security, monitoring, cost management, and workplace administration. Support cloud modernization and strategic initiatives, provide advanced technical incident support, and strengthen automation, resilience, documentation, and collaboration across Group and local IT teams.

Requirements

Requires at least three years of hands-on experience in Azure engineering or operations, Microsoft 365 administration, infrastructure engineering, or IT operations, including production cloud and hybrid services. Candidates should have practical experience with Microsoft 365, identity, endpoint management, Azure security and governance, and preferably Azure DevOps, CI/CD, and Infrastructure as Code; relevant certifications are desirable.