Role: Microsoft 365 Systems &

- Security Administrator

Work Schedule: Part-Time (~20 Hours / Week)

Location: Hybrid (1 Day / Week Onsite at Financial District, Hyderabad | 4 Days Remote)

Employment Type: Part-Time

Company Overview &

- Role Summary our client is a high-growth real estate startup managing over $120 Million in transaction volume. Our operations handle highly confidential financial assets, land acquisition deeds, purchase/sales agreements, and executive communications daily.

We are seeking a hands-on, part-time Microsoft 365 Systems &

- Security Administrator (~20 hours/week) to architect, secure, and manage our cloud infrastructure. In this role, you will build a zero-trust security model around our Managing Director s (MD) office and executive team, enforce strict Role-Based Access Control (RBAC) across OneDrive and SharePoint, and integrate our HRMS (Keka) with Microsoft Entra ID (Azure AD) for automated user onboarding and offboarding.

Work Arrangement &

- Hours

- Weekly Commitment: Approximately 20 hours per week (Flexible distribution across weekdays).

- Work Mode: Hybrid

- Onsite Expectation: 1 day per week at our office in Financial District, Hyderabad for executive alignments, physical device setups, and key security audits.

- Remote: Remaining 4 days handled remotely with on-demand availability for critical security incidents.

Key Responsibilities

- Executive &
- MD Office Security (Zero-Trust Hardening)

- MD Office Protection: Implement strict security baselines, Multi-Factor Authentication (MFA), Conditional Access policies, and anti-impersonation/anti-phishing controls specifically for the Managing Director and executive suite.





- Email &

- Domain Defense: Deploy and manage Microsoft Defender for Office 365 (Secure Links, Safe Attachments, anti-spam/phishing filtering) and enforce strict email domain protections (SPF, DKIM, DMARC).

- Device Security (MDM): Configure Microsoft Intune to enforce device encryption, PIN locks, app-level protection policies, and remote-wipe capabilities for company mobile and desktop devices.

- HRMS (Keka) &

- Microsoft Entra ID Integration

- HR-Driven Automated Provisioning: Connect Keka HRMS with Microsoft Entra ID (Azure AD) to establish Keka as the single source of truth for employee identities.

- Lifecycle Automation: Configure automated account creation, license allocation, and role-based group assignments when current employees are added in Keka.

- Instant Offboarding: Ensure immediate, automated account disabling and active session revocation in Microsoft 365 as soon as an employee is marked as departed in Keka.

- Document Security, SharePoint &

- OneDrive Architecture

- Restricted Document Taxonomy: Structure and govern SharePoint Online and OneDrive for Business specifically for sensitive real estate documentation (land deeds, sales agreements, titles, and bank filings).

- Data Loss Prevention (DLP):



Set up Microsoft Purview DLP policies and Sensitivity Labels (e.g., Confidential / Legal Only / Internal) to block unauthorized downloading, external forwarding, or unauthenticated file-sharing links.

- Granular RBAC: Establish a strict Principle of Least Privilege model ensuring staff outside authorized roles (e.g., non-executive or non-legal staff) cannot view or download restricted land and financial records.

- System Maintenance &

- Onsite Support

- Core Administration: Administer everyday operations across Outlook, Microsoft Teams, OneDrive, and SharePoint Online.

- Onsite Collaboration (1x/week): Visit the Financial District office weekly to conduct hardware/device security checks, onboard leadership devices, and review system logs with executive management.

Qualifications &

- Requirements

- 3 5 years of hands-on experience administering and securing Microsoft 365 / Office 365 environments in a corporate setting.

- Identity &
- Access Management: Deep knowledge of Microsoft Entra ID (Azure AD), Conditional Access, Multi-Factor Authentication (MFA), and Dynamic Security Groups.

- HRMS Integration: Direct experience connecting HR platforms (e.g., Keka, Workday, BambooHR, or similar) to Active Directory/Entra ID for automated user provisioning and deprovisioning.

- Document Architecture &

- Security: Proven track record configuring SharePoint Online, OneDrive for Business, and Microsoft Purview DLP to safeguard high-value legal and financial assets.

- Location Requirement: Based in or near Hyderabad with the ability to commute to the Financial District office once a week.

📌 Microsoft 365 Systems & Security Administrator - Hyderabad (Hybrid - 1day/week)
🏢 HYR Global Source
📍 Hyderabad