Role: Microsoft 365 Systems & Security Administrator

Work Schedule: Part-Time (~20 Hours / Week)

Location: Hybrid (1 Day / Week Onsite at Financial District, Hyderabad | 4 Days Remote)

Employment Type: Part time

Company Overview & Role Summary

our client is a high-growth real estate startup managing over $120 Million in transaction volume. Our operations handle highly confidential financial assets, land acquisition deeds, purchase/sales agreements, and executive communications daily.

We are seeking a hands-on, part-time Microsoft 365 Systems & Security Administrator (~20 hours/week) to architect, secure, and manage our cloud infrastructure. In this role, you will build a zero-trust security model around our Managing Director's (MD) office and executive team, enforce strict Role-Based Access Control (RBAC) across One Drive and Share Point, and integrate our HRMS (Keka) with Microsoft Entra ID (Azure AD) for automated user onboarding and offboarding.

Work Arrangement & Hours

- Weekly Commitment: Approximately 20 hours per week (Flexible distribution across weekdays).

- Work Mode: Hybrid

- Onsite Expectation: 1 day per week at our office in Financial District, Hyderabad for executive alignments, physical device setups, and key security audits.

- Remote: Remaining 4 days handled remotely with on-demand availability for critical security incidents.

Key Responsibilities

1. Executive & MD Office Security (Zero-Trust Hardening)

- MD Office Protection: Implement strict security baselines, Multi-Factor Authentication (MFA), Conditional Access policies, and anti-impersonation/anti-phishing controls specifically for the Managing Director and executive suite.




- Email & Domain Defense: Deploy and manage Microsoft Defender for Office 365 (Safe Links, Safe Attachments, anti-spam/phishing filtering) and enforce strict email domain protections (SPF, DKIM, DMARC).
- Device Security (MDM): Configure Microsoft Intune to enforce device encryption, PIN locks, app-level protection policies, and remote-wipe capabilities for company mobile and desktop devices.

2. HRMS (Keka) & Microsoft Entra ID Integration

- HR-Driven Automated Provisioning: Connect Keka HRMS with Microsoft Entra ID (Azure AD) to establish Keka as the single source of truth for employee identities.
- Lifecycle Automation: Configure automated account creation, license allocation, and role-based group assignments when new employees are added in Keka.
- Instant Offboarding: Ensure immediate, automated account disabling and active session revocation in Microsoft 365 as soon as an employee is marked as departed in Keka.

3. Document Security, Share Point & One Drive Architecture

- Restricted Document Taxonomy: Structure and govern Share Point Online and One Drive for Business specifically for sensitive real estate documentation (land deeds, sales agreements, titles, and bank filings).
- Data Loss Prevention (DLP):



Set up Microsoft Purview DLP policies and Sensitivity Labels (e.g., Confidential / Legal Only / Internal) to block unauthorized downloading, external forwarding, or unauthenticated file-sharing links.
- Granular RBAC: Establish a strict Principle of Least Privilege model-ensuring staff outside authorized roles (e.g., non-executive or non-legal staff) cannot view or download restricted land and financial records.

4. System Maintenance & Onsite Support

- Core Administration: Administer everyday operations across Outlook, Microsoft Teams, One Drive, and Share Point Online.
- Onsite Collaboration (1x/week): Visit the Financial District office weekly to conduct hardware/device security checks, onboard leadership devices, and review system logs with executive management.

Qualifications & Requirements

- 3 5+ years of hands-on experience administering and securing Microsoft 365 / Office 365 environments in a corporate setting.
- Identity & Access Management: Deep knowledge of Microsoft Entra ID (Azure AD), Conditional Access, Multi-Factor Authentication (MFA), and Dynamic Security Groups.
- HRMS Integration: Direct experience connecting HR platforms (e.g., Keka, Workday, BambooHR, or similar) to Active Directory/Entra ID for automated user provisioning and deprovisioning.
- Document Architecture & Security: Proven track record configuring Share Point Online, One Drive for Business, and Microsoft Purview DLP to safeguard high-value legal and financial assets.
- Location Requirement: Based in or near Hyderabad with the ability to commute to the Financial District office once a week.

#LI-SS3

📌 Microsoft 365 Systems & Security Administrator - Hyderabad (Hybrid - 1day/week) (India)
🏢 HYR Global Source
📍 India