Senior Cloud & Identity Engineer (Level 3) - Microsoft 365, Entra ID & Azure

FUJIFILM MicroChannel; North Sydney; Presencial; AUD 130.000 - 156.000; Jornada completa

Descripción de la vacante

FUJIFILM MicroChannel is seeking a Senior Cloud & Identity Engineer (Level 3) to design, secure and operate Microsoft Entra ID, Microsoft 365, Intune and Azure across APAC tenants. You will act as senior escalation for complex incidents and drive engineering improvements in identity, collaboration, endpoint management, governance and automation.

You will lead cross-tenant configurations, automation using PowerShell and Graph, and deliver lifecycle management with a strong focus on security and

Formación

• Extensive hands‑on senior cloud/identity engineering across Microsoft stack.
• Experience in cross‑tenant environments and multi‑tenancy governance.
• Strong incident management and RCA capability at Level 3.
• Automation using scripting and APIs to reduce toil.

Responsabilidades

• Provide Level 3 engineering and troubleshooting for Entra ID, M365, Intune and Azure.
• Lead root cause analysis for complex incidents and implement permanent fixes.
• Mentor Level 1/2 support and set engineering standards and runbooks.
• Automate provisioning, reporting and configuration with scripts and APIs.

Conocimientos

Microsoft Entra ID

Microsoft 365

Intune

Azure

PowerShell

Graph API

Herramientas

PowerShell

Microsoft Graph API

Azure CLI

Descripción del empleo

Senior Cloud & Identity Engineer (Level 3) - Microsoft 365, Entra ID & Azure

Join FUJIFILM MicroChannel as a technically proficient Cloud and Identity Engineer supporting Microsoft cloud services across the Asia Pacific region. You will design, secure and operate Microsoft Entra ID, Microsoft 365, Intune and Azure across multiple corporate and customer tenancies, act as the senior escalation point for complex incidents, and deliver engineering improvements across identity, collaboration, endpoint management, cloud governance and automation. This is a hands-on role with accountability for platform reliability, security, supportability and lifecycle management.

What Will be Involved

Technical Leadership

• Provide Level 3 engineering and troubleshooting across Microsoft Entra ID, Microsoft 365, Intune, Azure and integrated cloud services.
• Lead root cause analysis for complex and recurring faults, implement permanent corrective actions, and maintain engineering standards, design documentation and operational procedures.
• Act as the senior technical escalation point for identity, Microsoft 365, Azure, cross-tenant incidents, problems and high-risk changes.
• Provide technical guidance, peer review and mentoring to Level 1 and Level 2 support teams.

• Provide Level 3 engineering and troubleshooting across Microsoft Entra ID, Microsoft 365, Intune, Azure and integrated cloud services.
• Lead root cause analysis for complex and recurring faults, implement permanent corrective actions, and maintain engineering standards, design documentation and operational procedures.
• Act as the senior technical escalation point for identity, Microsoft 365, Azure, cross-tenant incidents, problems and high-risk changes.
• Provide technical guidance, peer review and mentoring to Level 1 and Level 2 support teams.

Cloud, Identity & Multi‑Tenant Engineering

• Engineer, administer and continuously improve Microsoft Entra ID across multiple tenancies, including users, groups, roles, enterprise applications, app registrations, service principals and managed identities.
• Own Conditional Access, authentication methods, Identity Protection, Privileged Identity Management, emergency access and identity lifecycle controls.
• Implement and support Entra B2B collaboration, cross-tenant access settings, cross-tenant synchronisation and multitenant organisation capabilities where appropriate.
• Administer Microsoft 365 services including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business and Microsoft 365 Groups.
• Engineer secure external collaboration, guest access, mail flow, domain, retention, coexistence and tenant-to-tenant migration solutions.
• Engineer and operate Azure subscriptions, management groups, resource groups, RBAC, Azure Policy, networking, monitoring and shared platform services.
• Administer Microsoft Intune, Windows Autopilot, device compliance, configuration profiles, application deployment and Conditional Access integration.
• Support Azure Virtual Desktop, virtual networks, private endpoints, DNS, storage accounts, Key Vault, App Service, Azure Monitor and Log Analytics where used.
• Use PowerShell, Microsoft Graph PowerShell, Microsoft Graph API, Azure CLI and REST APIs to automate administration, reporting and configuration.

• Engineer and operate Azure subscriptions, management groups, resource groups, RBAC, Azure Policy, networking, monitoring and shared platform services.
• Administer Microsoft Intune, Windows Autopilot, device compliance, configuration profiles, application deployment and Conditional Access integration.
• Support Azure Virtual Desktop, virtual networks, private endpoints, DNS, storage accounts, Key Vault, App Service, Azure Monitor and Log Analytics where used.
• Use PowerShell, Microsoft Graph PowerShell, Microsoft Graph API, Azure CLI and REST APIs to automate administration, reporting and configuration.

Cyber Security

• Support ISO 27001 control operation and Microsoft cloud security compliance requirements.
• Apply Zero Trust, least privilege, Microsoft security baselines and CIS guidance across identity, Microsoft 365, endpoints and Azure.
• Own technical remediation of identity and cloud security findings, including assessment, remediation planning, testing, implementation and evidence capture.
• Provide analysis, containment, evidence capture, eradication and recovery support during incidents involving identities, applications, data or Azure resources.

• Support ISO 27001 control operation and Microsoft cloud security compliance requirements.
• Apply Zero Trust, least privilege, Microsoft security baselines and CIS guidance across identity, Microsoft 365, endpoints and Azure.
• Own technical remediation of identity and cloud security findings, including assessment, remediation planning, testing, implementation and evidence capture.
• Provide analysis, containment, evidence capture, eradication and recovery support during incidents involving identities, applications, data or Azure resources.

Project Delivery

• Lead technical delivery for tenant integrations, Microsoft 365 migrations, identity consolidation, Azure deployments, endpoint-management uplift and security improvement initiatives.
• Produce solution designs, implementation plans, test plans, change records, rollback plans, migration runbooks and operational handover documentation.
• Plan and execute platform lifecycle activities including tenant changes, authentication uplift, application integration, licensing changes and technology refreshes.
• Provide hands‑on engineering support for mergers, acquisitions and business integrations, including identity, tenant, data, application and service transition activities.

• Lead technical delivery for tenant integrations, Microsoft 365 migrations, identity consolidation, Azure deployments, endpoint-management uplift and security improvement initiatives.
• Produce solution designs, implementation plans, test plans, change records, rollback plans, migration runbooks and operational handover documentation.
• Plan and execute platform lifecycle activities including tenant changes, authentication uplift, application integration, licensing changes and technology refreshes.
• Provide hands‑on engineering support for mergers, acquisitions and business integrations, including identity, tenant, data, application and service transition activities.

Operational Excellence

• Operate within ITIL-aligned incident, problem, change and configuration management practices while keeping asset, tenant and technical records accurate.
• Automate repeatable engineering and operational tasks using PowerShell, Microsoft Graph, APIs and infrastructure-as-code tooling.
• Define and track service health, Secure Score, privileged access, policy compliance, availability and operational improvements.
• Take a lead engineering role in major incidents and post-incident reviews, ensuring corrective actions are technically sound and completed.
• Work with Microsoft and cloud vendors to resolve complex faults, review product roadmaps and manage technical escalations.
• Partner with security, network, service desk, applications and business teams to deliver stable end-to-end services.
• Translate business and operational requirements into secure, supportable cloud and identity designs.
• Provide clear technical recommendations, options, dependencies and risk assessments to IT leadership.
• Demonstrated experience designing and implementing secure Windows Server configurations and hardening baselines, with working knowledge of CIS benchmarks and Microsoft security baselines.
• What You Will Need
• Extensive hands‑on experience in senior Microsoft cloud, identity or platform engineering, including substantial Level 3 support and project delivery responsibility.
• Advanced Microsoft Entra ID experience across Conditional Access, authentication, privileged access, enterprise applications, app registrations, B2B collaboration and tenant troubleshooting.
• Strong Microsoft 365 engineering experience across Exchange Online, Teams, SharePoint Online and OneDrive for Business.
• Demonstrated experience working across multiple Microsoft 365 and Azure tenancies, including cross-tenant collaboration, coexistence, migration or delegated administration.
• Strong Microsoft Intune experience across enrolment, compliance, configuration, application deployment, Windows Autopilot and Conditional Access integration.
• Practical Azure engineering experience across governance, RBAC, networking, monitoring, Key Vault, storage and common IaaS or PaaS services.
• Strong PowerShell and Microsoft Graph capability, including reusable automation, secure authentication, error handling, logging and controlled deployment.
• Working knowledge of SAML, OAuth 2.0, OpenID Connect and SCIM, with advanced diagnostic skills using Entra, Microsoft 365, Azure and endpoint logs.
• Microsoft certifications such as Identity and Access Administrator Associate, Microsoft 365 Administrator Expert or Azure Administrator Associate.
• Experience with Microsoft Defender XDR, Microsoft Sentinel, Defender for Cloud Apps, Microsoft Purview, Azure Arc or Azure Update Manager.
• Experience with tenant-to-tenant migrations, CSP environments, Granular Delegated Admin Privileges, Azure Virtual Desktop, Bicep or Terraform.
• Working knowledge of Windows Server, Active Directory, DNS and PKI in hybrid environments; ISO 27001, ITIL or managed-service-provider experience.

• Microsoft certifications such as Identity and Access Administrator Associate, Microsoft 365 Administrator Expert or Azure Administrator Associate.
• Experience with Microsoft Defender XDR, Microsoft Sentinel, Defender for Cloud Apps, Microsoft Purview, Azure Arc or Azure Update Manager.
• Experience with tenant-to-tenant migrations, CSP environments, Granular Delegated Admin Privileges, Azure Virtual Desktop, Bicep or Terraform.
• Working knowledge of Windows Server, Active Directory, DNS and PKI in hybrid environments; ISO 27001, ITIL or managed-service-provider experience.

A Little Bit About Us

FUJIFILM MicroChannel is a leading business technology company founded in 1995, offering a diverse solutions portfolio across ERP, CRM, Marketing, Retail, eCommerce, Hosting, and Managed Services. We partner with world-leading software vendors, primarily Microsoft, SAP, and Sage, to implement and support these solutions. With more than 100 awards and offices across Australia, New Zealand, Singapore, Fiji and Thailand, FUJIFILM MicroChannel provides a rich environment for career growth.

Sound Interesting? Join us in a hands‑on Level 3 engineering role where you will strengthen the security, reliability and supportability of Microsoft cloud services across multiple tenancies while helping shape practical engineering standards and automation.

Employment is dependent on unrestricted working rights, and a national police criminal history check that is acceptable to FUJIFILM MicroChannel. Additional security clearances may be required as requested by FUJIFILM MicroChannel or its clients.