Microsoft Infrastructure Engineer in London

Who are we? Look at the latest headlines and you will see something Ki insures. Think space shuttles, world tours, wind farms, and even footballers' legs. Ki's mission is simple: Digitally disrupt and revolutionise a 335-year-old market. Working with Google and UCL, Ki has created a platform that uses algorithms, machine learning and large language models to give insurance brokers quotes in seconds, rather than days. Ki is proudly the biggest global algorithmic insurance carrier. It is the fastest growing syndicate in the Lloyd's of London market, and the first ever to make $100m in profit in 3 years. Ki's teams have varied backgrounds and work together in an agile, cross-functional way to build the very best experience for its customers. Ki has big ambitions but needs more excellent minds to challenge the status-quo and help it reach new horizons.

Where do you come in? The Microsoft Infrastructure Engineer is the technical authority for the design, build, and continual optimisation of the organisation's Microsoft platforms, spanning Microsoft 365 (Exchange Online, SharePoint, OneDrive, Teams), Entra ID (Azure AD), Intune/Endpoint Management, Windows Server, and core Azure services. Delivering secure, resilient, and scalable collaboration, identity, and infrastructure foundations for the business. Design and implement Microsoft services end to end, establishing opinionated reference architectures, golden configurations, and repeatable patterns that raise the engineering bar and accelerate delivery across product and platform teams. Operating everything as code (Terraform/Bicep, M365 DSC, GitHub Actions, PowerShell/Graph), standardise and automate configuration, deployment, observability, and recovery, improving auditability, and enabling high‑velocity, low‑risk change.

As a forward-looking specialist, you would scout and validate emerging Microsoft capabilities (including private previews, TAPs, roadmap features), run evidence-based pilots, and translate outcomes into hardened, supportable services, keeping the estate ahead of the technology curve while balancing reliability, security, and cost. Creating a clear road map for our Microsoft and 3rd party SaaS estate.

What you will be doing:

• Lead design and implementation of Microsoft 365, Entra ID, Intune, and Windows Server platforms, defining reference architectures, guardrails, and golden configurations.
• Deliver all platform configuration as code using Terraform/Bicep, M365 DSC, GitHub Actions, automated testing, drift detection, and reusable modules.
• Engineer identity and access controls in Entra ID, including Conditional Access, PIM, access reviews, entitlement management, and secure external collaboration.
• Govern and optimise collaboration services across Exchange Online, SharePoint, OneDrive, and Teams, including automation, lifecycle management, and compliance.
• Design and operate enterprise endpoint management with Intune across Windows, macOS, iOS, and Android, including Autopilot, compliance baselines, and Defender integration.
• Build and maintain secure Azure IaaS and networking foundations, including VM lifecycle, virtual networks, private endpoints, and DNS.
• Embed security and compliance using Microsoft Purview, Defender, Sentinel, and support for audits, threat modelling, and incident response.
• Integrate and manage third‑party SaaS applications via Entra ID (SSO, SCIM), enforce governance, and build API‑driven automation.
• Drive observability and SRE practices using Azure Monitor, Log Analytics, Application Insights, and AI‑assisted operations.
• Produce high‑quality documentation, runbooks, and change‑controlled artefacts while optimising cost and licensing across Microsoft services.
• Ensure platform resilience through backup strategy, disaster recovery planning, RTO/RPO definition, and regular DR testing.
• Implement AI‑enhanced automation using Model Context Protocol (MCP), enabling LLM‑driven workflows and intelligent operations across Microsoft platforms.

Requirements:

• Expert in Microsoft 365, Entra ID, Intune, Windows Server, and Azure IaaS.
• Strong automation skills: Terraform/Bicep, M365 DSC, GitHub Actions, advanced PowerShell, Microsoft Graph, and KQL.
• Solid security background: Zero Trust, Purview, Defender, Sentinel, and disciplined change/audit practices.
• Hands‑on experience deploying AI/LLM solutions (Azure OpenAI, Copilot, mcp servers).
• Knowledge of ISO 27001, SOC 2, and FCA/Lloyd's requirements with ability to produce audit‑ready evidence.
• Confident communicator and technical leader: designs, workshops, mentoring, and 3rd‑line SME support.
• Strong cost/licence optimisation across Microsoft 365 and Azure; good vendor/SaaS governance.
• Desirable certifications: MCSA, SC‑300, MS‑102, MD‑102 (or equivalent).

Benefits:

You’ll get a highly competitive remuneration and benefits package. This is kept under constant review to make sure it stays relevant. We understand the power of saying thank you and take time to acknowledge and reward extraordinary effort by teams or individuals.

What to expect during the recruitment process:

• Initial recruiter screening call
• Interview with hiring manager
• Technical Interview (this may vary depending on the role)
• Values Interview