Powershell

SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates. ABOUT THE ROLE: We are seeking a skilled Azure Security Engineer to design, implement, and maintain robust security controls across our Azure Gov Cloud environment (including hybrid and multi-cloud scenarios). In this hands-on role, you will build, strengthen, and maintain our cloud security posture, protect critical workloads, and collaborate with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle. You will develop, implement, and leverage Microsoft’s native security tools to detect threats, respond to incidents, and ensure alignment with industry standards and regulations. Lastly, you will be required to both achieve and maintain compliance with government regulations such as FedRAMP and CMMC.  RESPONSIBILITIES: * Implement, design, and manage security architecture for Azure Government and Commercial deployments (with considerations for DoD IL5\IL6 and FedRAMP High controls) * Configure and optimize Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, and related services for threat detection, vulnerability management, and automated response   * Design and enforce identity & access management using Microsoft Entra ID, Privileged Identity Management (PIM), Conditional Access policies, RBAC, and just-in-time access   * Secure network architectures with Azure Firewall, Network Security Groups (NSGs), DDoS Protection, Web Application Firewall (WAF), Network Watcher, and private endpoints   * Protect data at rest and in transit via Azure Key Vault, encryption strategies, data classification, and information protection controls   * Develop and maintain security policies, initiatives, and blueprints using Azure Policy and Microsoft Purview for compliance (NIST, FedRAMP, CMMC, STIGs, etc.)   * Perform threat hunting, incident response, and forensics using Sentinel playbooks, Log Analytics, and KQL queries   * Conduct security reviews of Infrastructure as Code (IaC), containers, Kubernetes (AKS), and serverless workloads   * Collaborate with developers and architects to implement DevSecOps practices, including secure CI/CD pipelines, code scanning, and secure defaults   * Monitor and remediate security findings, reduce attack surface, and improve overall security posture per the Microsoft Cloud Security Benchmark (MCSB)  * Deploy configurations and compliance policies to Azure AVD endpoints using Intune and other Azure native services.  BASIC QUALIFICATIONS: * Active U.S. security clearance (e.g., Secret, Top Secret) or eligibility to obtain one.  * 3+ years of experience in cloud security, cybersecurity engineering, or related roles (with strong Azure focus)   * Deep hands-on expertise with core Azure security services: Microsoft Defender suite, Sentinel, Intune, Entra ID, Key Vault, Azure Policy, Firewall, Network Watcher, and Purview   * Strong understanding of DLP implementation both in cloud and on endpoints utilizing Purview and other Microsoft native controls * Experience implementing security in hybrid/multi-cloud environments   * Proficiency in scripting/automation (PowerShell, Azure CLI, Bicep/ARM templates, Terraform)   * Strong understanding of identity federation, zero-trust principles, encryption, network security, and vulnerability management   * Familiarity with compliance frameworks (NIST, FedRAMP, CMMC, STIGs, etc.) and regulatory requirements   * Excellent problem-solving, analytical, and communication skills * Strong verbal and written communication skills and the ability to stay composed under pressure. PREFERRED SKILLS AND EXPERIENCE: * Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Cybersecurity Architect (SC-100) * Additional relevant certifications (e.g., CISSP, CCSP, Microsoft Certified: Azure Administrator, AWS Security Specialty, SANS GCPS, SANS GCAD)   * Deep experience with detection and response engineering and SOC operations * Knowledge of container security (Docker, AKS), secure DevOps, or AI/ML workload protection   * Prior experience in government regulations frameworks such as FedRAMP and CMMC.  COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: * To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXAI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Systems Administrator - Platform Migration & Merge Specialist Location: Basingstoke (hybrid) Job Type: Fixed Term Contract (Until 31st March 2027) Salary: £50k - 80k (Pro Rated for period of hire June26-Mar27) Reporting To: The IT Director Key Responsibilities: Google Workspace to M365 and M365 to M365 Migrations Role Overview Reporting to the IT Director, this role provides the technical leadership and hands-on delivery required to continue a multi-phase collaboration platform consolidation programme across the group. The programme is migrating several business units onto a single Microsoft 365 tenant, retiring legacy Google Workspace and standalone Microsoft 365 environments along the way. You will be responsible for overseeing in-flight migrations, planning and executing future migrations, and decommissioning environments that have already been transitioned. The work spans Microsoft 365 tenant-to-tenant migrations, Google Workspace to Microsoft 365 migrations, and the coexistence, cutover and stabilisation activities that surround them. Key Responsibilities Migration Delivery * Take ownership of in-flight and upcoming platform migrations, including both Microsoft 365 to Microsoft 365 (tenant consolidation) and Google Workspace Enterprise to Microsoft 365 transitions. * Design and execute migration approaches for mail, calendars, contacts, files, chat and identity, using the Microsoft Migration Toolset (Exchange Online migration, SharePoint and OneDrive migration tooling) and complementary third-party tooling where appropriate. * Manage coexistence periods where dual systems operate in parallel, including mail flow configuration, calendar interop, free/busy visibility, and delta synchronisation. * Plan and execute cutover activities including domain MX changes, primary SMTP swaps, UPN transitions, and the controlled retirement of source environments. * Write and maintain PowerShell scripts that interact with Exchange Online, Microsoft Graph, Entra ID and SharePoint for bulk operations, validation, reporting and automation. Discovery and Analysis * Develop a thorough understanding of source environments before migration, including users, groups, mail, files, shared drives, calendar resources, chat, third-party integrations and operational workflows. * Use Google Admin tools, GAM, Microsoft Graph, PowerShell, Microsoft Migration Manager and other appropriate tooling to query, analyse and report on source data. * Identify migration risks, edge cases and dependencies, including shared mailboxes, delegations, calendar resource booking, SaaS authentication dependencies, and cross-document references such as Google Sheets IMPORTRANGE. * Document findings and recommend approaches to address them. Identity, Licensing and Coexistence * Plan and implement identity strategies that accommodate Entra ID, Google federation and the broader SaaS application landscape during transitions. * Manage licensing transitions across Microsoft 365 and Google Workspace, including Cloud Identity downgrades for retained identity-only accounts. * Maintain mail flow integrity across domains during coexistence, including accepted domain types, forwarding configurations, primary SMTP and alias management. Tenant Decommissioning * Oversee the controlled decommissioning of source environments after successful migration, covering data retention, identity downgrade, licence release and tenant retirement. * Coordinate retention of legacy native content as a safety net where required. * Manage SaaS application transitions from legacy identity providers to Entra ID single sign-on. Stakeholder Engagement and Proposal Support * Provide the technical analysis and detailed planning required by the IT Director and CTO to build migration proposals for leadership approval. * Communicate progress, risks and decisions through Steering Committee forums. * Translate technical detail for non-technical audiences in user communications, change management materials and service desk guidance. Post-Migration Support * Provide hypercare support during and after migration cutovers. * Engage directly with senior stakeholders and VIP users to triage and resolve complex issues. * Iterate on the support model based on real-world feedback and post-migration metrics. What We're Looking For Essential * Strong administrative expertise in Microsoft Entra ID, Microsoft 365 (Exchange Online, SharePoint Online, OneDrive, Teams) and Google Workspace Enterprise. * Proven experience delivering tenant-to-tenant Microsoft 365 migrations and Google Workspace to Microsoft 365 migrations. * Strong PowerShell skills, including writing scripts that interact with Microsoft Graph, Exchange Online and Entra ID for import, export, validation and automation tasks. * Hands-on experience with the Microsoft Migration Toolset (Exchange Online migration, SharePoint Migration Manager, OneDrive migration) and Google Workspace administration tools including GAM. * Practical understanding of mail flow during migration: accepted domain types, MX cutover, forwarding, primary SMTP and alias strategies, and calendar interop configuration. * Experience decommissioning Google Workspace and Microsoft 365 tenants in a controlled way, including identity-only downgrades to preserve SaaS authentication where needed. * Ability to communicate complex technical concepts to both technical and non-technical stakeholders. * Strong analytical and problem-solving skills, with the patience to work through edge cases methodically. * A proactive, solution-oriented mindset and the ability to manage multiple migration workstreams simultaneously. Desirable * Familiarity with third-party cloud migration tooling such as Movebot, CloudM or BitTitan. * Experience administering Atlassian (Confluence, Jira) and Slack, including merging or consolidating instances. * Experience with Intune and Kandji device management during platform transitions. * Awareness of Microsoft Purview sensitivity labelling and DLP, and the impact these have on migration tooling and post-migration document workflows. * Power Platform familiarity for rebuilding migrated automations. Rewards & Benefits * Annual Leave: 25 days + 8 public holidays * Enhanced Pension Scheme: 5% matching * Flexible Working: Hybrid model (2 days in the office per week) * Wellness: Complimentary Unmind app, onsite gym (Basingstoke) * Exclusive Perks: Access to sporting events and tickets, Sony Group Company discounts Equal Opportunity Employer Hawk-Eye is committed to fostering an inclusive and diverse workplace. We ensure all employees are treated fairly, regardless of gender, marital status, race, nationality, religion, age, disability, or union membership status. We value diversity and strive to create an environment where everyone can reach their full potential. Apply Today! This is a fantastic opportunity to join Hawk-Eye Innovations and make a significant impact in sports technology. If you're looking for a role where you can solve real-world problems at scale, we’d love to hear from you!