Role: Microsoft 365 Systems & Security Administrator Work Schedule: Part-Time (~20 Hours / Week) Location: Hybrid (1 Day / Week Onsite at Financial District, Hyderabad | 4 Days Remote) Employment Type: Part-Time Company Overview &

Role Summary our client is a high-growth real estate startup managing over $120 Million in transaction volume. Our operations handle highly confidential financial assets, land acquisition deeds, purchase/sales agreements, and executive communications daily. We are seeking a hands-on, part time Microsoft 365 Systems & Security Administrator (~20 hours/week) to architect, secure, and manage our cloud infrastructure. In this role, you will build a zero-trust security model around our Managing Director s (MD) office and executive team, enforce strict Role-Based Access Control (RBAC) across OneDrive and SharePoint, and integrate our HRMS (Keka) with Microsoft Entra ID (Azure AD) for automated user onboarding and offboarding.

Work Arrangement & Hours Weekly Commitment: Approximately 20 hours per week (Flexible distribution across weekdays).

Work Mode: Hybrid Onsite Expectation: 1 day per week at our office in Financial District, Hyderabad for executive alignments, physical device setups, and key security audits.

Remote: Remaining 4 days handled remotely with on-demand availability for critical security incidents.

Key Responsibilities Executive & MD Office Security (Zero-Trust Hardening)

MD Office Protection: Implement strict security baselines, Multi-Factor Authentication (MFA), Conditional Access policies, and anti-impersonation/anti-phishing controls specifically for the Managing Director and executive suite.





Email & Domain Defense: Deploy and manage Microsoft Defender for Office 365 (Safe Links, Safe Attachments, anti-spam/phishing filtering) and enforce strict email domain protections (SPF, DKIM, DMARC).

Device Security (MDM): Configure Microsoft Intune to enforce device encryption, PIN locks, app-level protection policies, and remote-wipe capabilities for company mobile and desktop devices.

HRMS (Keka) & Microsoft Entra ID Integration

HR-Driven Automated Provisioning: Connect Keka HRMS with Microsoft Entra ID (Azure AD) to establish Keka as the single source of truth for employee identities.

Lifecycle Automation: Configure automated account creation, license allocation, and role-based group assignments when new employees are added in Keka.

Instant Offboarding: Ensure immediate, automated account disabling and active session revocation in Microsoft 365 as soon as an employee is marked as departed in Keka.

Document Security, SharePoint & OneDrive Architecture

Restricted Document Taxonomy: Structure and govern SharePoint Online and OneDrive for Business specifically for sensitive real estate documentation (land deeds, sales agreements, titles, and bank filings).

Data Loss Prevention (DLP):



Set up Microsoft Purview DLP policies and Sensitivity Labels (e.g., Confidential / Legal Only / Internal) to block unauthorized downloading, external forwarding, or unauthenticated file-sharing links.

Granular RBAC: Establish a strict Principle of Least Privilege model ensuring staff outside authorized roles (e.g., non-executive or non-legal staff) cannot view or download restricted land and financial records.

System Maintenance & Onsite Support

Core Administration: Administer everyday operations across Outlook, Microsoft Teams, OneDrive, and SharePoint Online.

Onsite Collaboration (1x/week): Visit the Financial District office weekly to conduct hardware/device security checks, onboard leadership devices, and review system logs with executive management.

Qualifications & Requirements 3 5+ years of hands-on experience administering and securing Microsoft 365 / Office 365 environments in a corporate setting.

Identity & Access Management: Deep knowledge of Microsoft Entra ID (Azure AD), Conditional Access, Multi-Factor Authentication (MFA), and Dynamic Security Groups.

HRMS Integration: Direct experience connecting HR platforms (e.g., Keka, Workday, BambooHR, or similar) to Active Directory/Entra ID for automated user provisioning and deprovisioning.

Document Architecture & Security: Proven track record configuring SharePoint Online, OneDrive for Business, and Microsoft Purview DLP to safeguard high-value legal and financial assets.

Location Requirement: Based in or near Hyderabad with the ability to commute to the Financial District office once a week.

📌 Microsoft 365 Systems & Security Administrator - Hyderabad (Hybrid - 1day/week)
🏢 HYR Global Source
📍 Hyderabad