Who are we?
Look at the latest headlines and you will see something Ki insures. Think space shuttles, world tours, wind farms, and even footballers' legs.
Ki's mission is simple. Digitally disrupt and revolutionise a 335-year-old market. Working with Google and UCL, Ki has created a platform that uses algorithms, machine learning and large language models to give insurance brokers quotes in seconds, rather than days.
Ki is proudly the biggest global algorithmic insurance carrier. It is the fastest growing syndicate in the Lloyd's of London market, and the first ever to make $100m in profit in 3 years.
Ki's teams have varied backgrounds and work together in an agile, cross-functional way to build the very best experience for its customers. Ki has big ambitions but needs more excellent minds to challenge the status-quo and help it reach new horizons.
Where do you come in?
The Microsoft Infrastructure Engineer is the technical authority for the design, build, and continual optimisation of the organisation's Microsoft platforms, spanning Microsoft 365 (Exchange Online, SharePoint, OneDrive, Teams), Entra ID (Azure AD), Intune/Endpoint Management, Windows Server, and core Azure services.
Delivering secure, resilient, and scalable collaboration, identity, and infrastructure foundations for the business. Design and implement Microsoft services end to end, establishing opinionated reference architectures, golden configurations, and repeatable patterns that raise the engineering bar and accelerate delivery across product and platform teams. Operating everything as code (Terraform/Bicep, M365 DSC, GitHub Actions, PowerShell/Graph), standardise and automate configuration, deployment, observability, and recovery, improving auditability, and enabling high‑velocity, low‑risk change.
As a forward-looking specialist, you would scout and validate emerging Microsoft capabilities (including private previews, TAPs, roadmap features), run evidence-based pilots, and translate outcomes into hardened, supportable services, keeping the estate ahead of the technology curve while balancing reliability, security, and cost. Creating a clear road map for our Microsoft and 3rd party SaaS estate.
What you will be doing:
Lead design and implementation of Microsoft 365, Entra ID, Intune, and Windows Server platforms, defining reference architectures, guardrails, and golden configurations
Deliver all platform configuration as code using Terraform/Bicep, M365 DSC, GitHub Actions, automated testing, drift detection, and reusable modules
Engineer identity and access controls in Entra ID, including Conditional Access, PIM, access reviews, entitlement management, and secure external collaboration
Govern and optimise collaboration services across Exchange Online, SharePoint, OneDrive, and Teams, including automation, lifecycle management, and compliance
Design and operate enterprise endpoint management with Intune across Windows, macOS, iOS, and Android, including Autopilot, compliance baselines, and Defender integration
Build and maintain secure Azure IaaS and networking foundations, including VM lifecycle, virtual networks, private endpoints, and DNS
Embed security and compliance using Microsoft Purview, Defender, Sentinel, and support for audits, threat modelling, and incident response
Integrate and manage third‑party SaaS applications via Entra ID (SSO, SCIM), enforce governance, and build API‑driven automation
Drive observability and SRE practices using Azure Monitor, Log Analytics, Application Insights, and AI‑assisted operations
Produce high‑quality documentation, runbooks, and change‑controlled artefacts while optimising cost and licensing across Microsoft services
Ensure platform resilience through backup strategy, disaster recovery planning, RTO/RPO definition, and regular DR testing
Implement AI‑enhanced automation using Model Context Protocol (MCP), enabling LLM‑driven workflows and intelligent operations across Microsoft platforms
Requirements
Expert in Microsoft 365, Entra ID, Intune, Windows Server, and Azure IaaS
Strong automation skills: Terraform/Bicep, M365 DSC, GitHub Actions, advanced PowerShell, Microsoft Graph, and KQL
Solid security background: Zero Trust, Purview, Defender, Sentinel, and disciplined change/audit practices
Hands‑on experience deploying AI/LLM solutions (Azure OpenAI, Copilot, mcp servers)
Knowledge of ISO 27001, SOC 2, and FCA/Lloyd's requirements with ability to produce audit‑ready evidence
Confident communicator and technical leader: designs, workshops, mentoring, and 3rd‑line SME support
Strong cost/licence optimisation across Microsoft 365 and Azure; good vendor/SaaS governance
Desirable certifications: MCSA, SC‑300, MS‑102, MD‑102 (or equivalent)
Benefits
You'll get a highly competitive remuneration and benefits package. This is kept under constant review to make sure it stays relevant. We understand the power of saying thank you and take time to acknowledge and reward extraordinary effort by teams or individuals.
What to expect during the recruitment process:
Initial recruiter screening call
Interview with hiring manager
Technical Interview (this may vary depending on the role)
Values Interview