WHO WE ARE
AVI-SPL is a digital enablement solutions provider who transforms how people and technology connect to elevate experiences, create new value, and enable organizations to thrive and grow. We are the largest provider of collaboration technology solutions, which include our award-winning managed services.
WHAT YOU’LL DO
The Cloud Applications Engineer will own the design, build, and ongoing evolution of enterprise cloud collaboration environments for an AVI‑SPL client within the legal sector. This includes Microsoft 365, Google Workspace, and associated SaaS platforms. This is a hands‑on technical leadership role for someone who has previously built cloud application ecosystems from the ground up, not just administered existing environments. You will take full ownership of architecture, implementation, security design, and operational optimisation, while also leading delivery across projects and technical workstreams. You will act as a technical authority, driving standards, shaping architecture, and ensuring solutions are secure, scalable, and aligned to enterprise governance requirements.
Day‑To‑Day Responsibilities
- Own the end-to-end design and implementation of cloud application environments (M365, Google Workspace, SaaS ecosystem)
- Lead build‑out and configuration of Microsoft 365 tenants, including Entra ID, Intune, and core identity infrastructure
- Architect and implement SSO, application registrations, and identity integration patterns across enterprise applications
- Own Conditional Access strategy, design, and rollout across user populations and environments
- Manage and evolve Entra ID architecture, including MFA, SSO, B2B/B2C, passwordless authentication, and identity lifecycle design
- Lead Intune design and deployment strategy, including endpoint build standards, MAM, App Protection, Apple Business Manager, and Android Enterprise
- Design and implement RBAC and identity governance models within Entra ID
- Own security configuration across Microsoft Purview, including Information Protection, Retention, Sensitivity Labels, and eDiscovery
- Lead SaaS application integration and lifecycle management across multiple platforms
- Develop and implement Logic Apps, automation workflows, and M365/Azure API integrations
- Identify, design, and deliver automation opportunities across cloud platforms
- Lead technical delivery of cloud transformation and deployment projects from design through to production rollout
- Act as technical lead across multiple concurrent workstreams, ensuring delivery alignment and quality
- Mentor and guide engineers while maintaining ownership of architecture and technical direction
- Work closely with stakeholders to translate requirements into scalable cloud solutions
Items to Consider
- AVI‑SPL reserves the right to alter work hours and work location as necessary. Work hours may vary based on client requirements and may include travel to various locations in support of the account.
- This position will generally work on customer sites and may deal with a construction site type of work environment.
WHAT WE’RE LOOKING FOR
Must‑Haves
- Proven experience designing and building cloud application environments from scratch (not just operating within existing estates)
- Strong hands‑on expertise with Microsoft 365, Entra ID (Azure AD), and enterprise SaaS ecosystems
- Experience acting as a technical lead or architect across cloud application or identity programmes
- Deep understanding of identity, access management, and security architecture (SSO, Conditional Access, RBAC, authentication flows)
- Strong Intune and endpoint management architecture experience in enterprise environments
- Demonstrated ability to lead delivery of technical projects end‑to‑end (design build deployment optimisation)
- Strong PowerShell and automation capability
- Ability to take ownership of technical decisions and drive outcomes without heavy supervision
- Strong stakeholder communication skills with the ability to influence technical and non‑technical audiences
Nice‑To‑Haves
- 5+ years in enterprise cloud engineering/architecture roles
- Experience delivering greenfield M365 / Entra ID / SaaS environments
- Microsoft or cloud security certifications (highly desirable)
- ITIL or structured service delivery experience
- Experience in regulated industries (legal sector advantageous)
- Experience working in global or multi‑region enterprise deployments
Location & Schedule
- One day per week onsite in London or Canary Wharf
- Standard working hours: Monday–Friday, 08:00–17:00 (local time)
- Flexibility required to support project delivery phases and critical deployments
WHY YOU’LL LIKE WORKING HERE
- Medical benefits, including vision and dental
- Paid holidays and PTO
- Enjoyable and dynamic company culture
- Training and professional development opportunities
MORE ABOUT US
AVI‑SPL is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or membership in any other group protected by federal, state, or local law. AVI‑SPL is an AA/Disabled/Veteran Protected Employer VEVRAA Federal Contractor.
