Cloud Operational Engineer, Level 3

• Triage and resolve platform alerts across availability, performance, capacity and configuration drift
• Judge which alerts represent genuine service impact and act accordingly
• Turn recurring alert patterns into problem records and automation candidates
• Own operational response for managed file transfer and scheduled job failures, including rerun, validation and client communication
• Operate Entra ID user and guest lifecycle, group membership, cross-tenant collaboration, attribute and licensing changes
• Manage Azure RBAC and PIM role assignments and time-bound privileged access
• Create app registrations and service principals; manage secrets, certificates, API permissions and admin consent
• Proactively rotate and renew secrets and certificates
• Investigate Conditional Access and MFA authentication failures and support security investigations
• Operate Microsoft 365, including Exchange Online mail flow, shared mailboxes, distribution lists, quarantine, anti-spam, SharePoint, OneDrive, Teams policy and governance
• Manage DNS records, domain onboarding, SPF, DKIM and DMARC
• Operate access and permissions across Microsoft Fabric, Databricks, Snowflake and Azure SQL
• Configure and operate enterprise applications, SAML federation and SCIM provisioning
• Manage Intune configuration and application deployment across Windows, macOS, iOS and Android
• Troubleshoot Azure Virtual Desktop and Cloud PC sessions and profiles
• Resolve availability, performance, access and capacity issues across existing virtual machine estates
• Act as technical lead during major incidents and provide client-facing technical communication
• Own root cause analysis and preventive actions for significant and recurring incidents
• Identify systemic risks and convert recurring failure patterns into problem records
• Escalate to Engineering with clear symptoms, diagnostics, hypotheses and specific asks
• Author and maintain runbooks, operational standards, troubleshooting guidance and escalation criteria
• Review and validate Tier 1 and Tier 2 runbooks and identify work that can move down a tier
• Maintain Confluence documentation validated against the live environment
• Record requested, completed and verified work before closure
• Identify and eliminate repetitive operational work through scripting and automation
• Build and maintain safe, idempotent, commented and rerunnable PowerShell automation
• Propose self-service and workflow automation for high-volume, low-complexity requests
• Recommend monitoring and alerting improvements supported by evidence
• Operate consistently across multiple client tenants while maintaining strict tenant isolation
• Work within delegated administration, privileged access and break-glass procedures
• Apply standards uniformly and flag environmental drift
• Handle client data carefully and support SOC 2, ISO 27001 and UK GDPR obligations
• Own operation, troubleshooting, configuration and maintenance of live platforms, access and entitlement work, alert response, runbook execution, problem management, standards, documentation and automation
• Do not own client implementations, onboardings, migrations, infrastructure-as-code builds, network/firewall architecture, monitoring design or first-time integration architecture

• 6 to 10+ years in cloud, identity or workplace engineering, including demonstrable time operating at L3 or subject matter expert level
• Proven experience as a final escalation point in a production environment with real service commitments
• Degree or equivalent practical experience in IT or a related field
• Expert-level Microsoft 365 administration, including Exchange Online mail flow, SharePoint, OneDrive and Teams governance
• Deep, hands-on Entra ID expertise: authentication and authorization, Conditional Access, MFA, SSO, PIM, app registrations, service principals and Microsoft Graph permissions
• Strong Azure operational capability: RBAC, subscription and resource group management, virtual machines, storage, Key Vault and Log Analytics
• Expert Microsoft Intune and endpoint management across Windows, macOS, iOS and Android
• Practical experience with Azure Virtual Desktop and Windows 365 Cloud PC, including profile and session troubleshooting
• Identity integration experience: SAML configuration, SCIM provisioning, and claims and attribute mapping
• DNS administration and mail authentication records
• PowerShell automation to a production standard, including Microsoft Graph PowerShell
• Identity security and Zero Trust principles, with least-privilege applied by default
• Advanced troubleshooting and structured root cause analysis
• Hands-on ServiceNow experience is required
• ITIL-aligned service management understanding across incident, problem, change and knowledge management
• Confluence or an equivalent knowledge platform, as an active author rather than an occasional reader
• Monitoring and alerting platform experience, such as Zabbix or Azure Monitor
• Azure DevOps familiarity, sufficient to manage access, repositories and pipelines at an entitlement level
• Prior experience in an MSP, managed service or multi-tenant environment is required
• Comfort working across multiple client tenants at once, with the discipline to keep them properly separated
• Understanding of delegated administration, privileged and break-glass access models, and their audit implications
• Awareness of the commercial side of managed services: SLAs, contracted scope, and accurate time and ticket records
• Client-facing communication skill
• Preferred certifications: Microsoft 365 Certified: Enterprise Administrator Expert (MS-102); Microsoft Certified: Identity and Access Administrator Associate (SC-300); Microsoft Certified: Azure Administrator Associate (AZ-104); Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Advantageous certifications: Microsoft Certified: Azure Security Engineer Associate (AZ-500); Microsoft Certified: Security Operations Analyst Associate (SC-200); ITIL 4 Foundation
• Experience in a regulated sector such as insurance, financial services or healthcare is advantageous

• Free lunch meal, fruits, snacks, and drinks
• Onsite gym with a free professional instructor
• Weekly fitness activity and an annual fitness challenge where you can win up to 70,000 PHP
• Weekly engagement activities with prizes that are up to 3,000 PHP
• Free upskilling academy to improve your performance and skillset
• State-of-the-art facilities from toilets to your workstation
• Amenities such as sleeping quarters, game area, chat room, shower room