Senior Systems Engineer

Luxury Escapes; Sydney; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Discount on holidays

Meals provided

Health program

Annual Hackathons

Birthday leave

Collaborative team

Job summary

Luxury Escapes is seeking a Senior Systems Engineer to own corporate systems across identity, devices, Azure and network for Sydney and Melbourne offices. You will be the go-to technical expert, solving problems, building reliable systems, and partnering with Security on ISO 27001.

You will help automate onboarding/offboarding, support service desks, and mentor teammates while collaborating with vendors and the Fortinet partner for escalations.

Qualifications

• Strong experience with Entra ID including CA, PIM, SSO and provisioning.
• Hands-on Fortinet FortiGate firewall administration across multiple sites.
• Experience managing Windows devices with Intune; macOS with Jamf Pro a plus.
• Experience securing Microsoft 365 and Azure, including Defender.
• Practical experience implementing ISO 27001, SOC 2 or similar controls.
• Good PowerShell skills; familiarity with Microsoft Graph is a bonus.

Responsibilities

• Manage identity and access in Entra ID, including SSO, provisioning, CA and lifecycle automation.
• Oversee Fortinet network across offices and retail stores, with CAMs including VPN and SD-WAN.
• Manage Windows devices via Intune and support Jamf Pro for macOS; patching and vulnerability tooling.
• Lead Azure and M365 security settings, migrate from AD FS to Entra cloud authentication.
• Strengthen security posture and apply CA policies, attack surface reductions, and fixes.
• Serve as technical escalation point for security alerts in coordination with IS team.
• Implement controls for ISO 27001:2022 certification and evidence them.
• Handle service desk requests and automate onboarding/offboarding/access requests.
• Collaborate with vendors and Fortinet partner for escalations and purchasing.
• Root-cause complex issues across systems and document/mentor the team.

Skills

Microsoft Entra ID

SSO

PIM

Conditional Access

PowerShell

ISO 27001

Incident response

Documentation

Vendor collaboration

Tools

Fortinet FortiGate

Intune

Jamf Pro

Microsoft 365

Azure

Defender

Microsoft Graph

Job description

Be part of the team protecting the experiences our customers love

Luxury Escapes is a fast-growing travel platform with more than 8 million members. Recently winning the award for Most Outstanding Employee Engagement and Recruitment Program at the National Travel Industry Awards!

Working at Luxury Escapes

Our mission is to delight our customers with incredible deals for the world's best holidays. We are a collective of forward-thinking people, driven to challenge the travel industry and ourselves to bring outstanding travel experiences to our customer community.

Our award winning employee experience is king here having been recognised as "One of the Best Places to Work"by the AFR with weekly events, monthly recognition programs and significant professional development opportunities.

We do what we can to make you look forward to waking up every day!

Our Sydney office is located on Kent Street, just a short stroll from Wynyard station and surrounded by great cafés in Barangaroo.

Luxury Escapes is an in-person company. We collaborate face-to-face in our Sydney office, 5 days a week, because we believe the best ideas happen when we’re together.

Job Description

As Luxury Escapes continues to grow, so does the technology that supports it. We’re looking for a Senior Systems Engineer to take technical ownership of our corporate systems, including identity, devices, Azure and the network across our offices and retail stores.

You’ll report to the Associate Director of IT Operations and join a small team split between Sydney and Melbourne. You’ll be solving real problems, building reliable systems, and being the go-to technical expert in the room, this is a great opportunity to grow your career in a fast-moving travel tech company. We all work the service desk, cover for each other, and you’ll also work closely with our Information Security team on ISO 27001.

What You'll Do

• Manage identity and access in Microsoft Entra ID, including SSO, SCIM provisioning, Conditional Access, PIM and user lifecycle automation, and bring more of our business systems onto SSO.
• Look after our Fortinet network across the Sydney and Melbourne offices and our retail stores. That includes firmware updates, firewall rules and changes, backups, monitoring, VPN, Wi-Fi and SD-WAN, and setting up new sites.
• Manage our Windows devices in Intune and help support our Macs in Jamf Pro, including patching and vulnerability management with NinjaOne and Microsoft Defender.
• Look after our Azure environment and Microsoft 365 security settings, and lead the move off AD FS to Entra cloud authentication.
• Improve our security posture hands-on, for example by tightening Conditional Access policies, rolling out attack surface reduction rules and fixing penetration test findings.
• Be the technical escalation point for security alerts and incidents, working with our Information Security team.
• Put in place and evidence the technical controls for our ISO 27001:2022 certification.
• Pick up service desk requests with the rest of the team, and help automate onboarding, offboarding, and access requests.
• Work with our vendors and partners, including our Fortinet partner for escalations and purchasing.
• Get to the root cause of complex issues across systems and fix them properly.
• Share what you know with the team through documentation and hands‑on mentoring.

Qualifications

• Strong experience with Microsoft Entra ID, including Conditional Access, PIM, SSO and automated provisioning.
• Hands‑on experience running Fortinet FortiGate firewalls across multiple sites (firmware upgrades, policies, VPN, SD‑WAN, Wi‑Fi).
• Experience managing Windows devices with Intune. Some macOS management experience (Jamf Pro or similar) is a plus.
• Experience administering and securing Microsoft 365 and Azure, including Microsoft Defender.
• Practical experience implementing controls for ISO 27001, SOC 2 or a similar framework.
• Good PowerShell skills. Experience with Microsoft Graph is a bonus.

How you work

• You communicate clearly with both technical and non‑technical audiences, and you’re comfortable providing recommendations backed by solid analysis.
• You enjoy lifting the people around you, whether that’s mentoring a junior, sharing knowledge, or raising the technical bar through good documentation and review.
• You stay calm and structured under pressure, particularly during incidents when clear thinking matters most.
• You take ownership end‑to‑end. You deliver reliably, flag risks early, and hold yourself to a high standard with minimal oversight.
• You’re proactive about identifying problems before they escalate, and you balance thoroughness with pragmatism.
• You don’t mind picking up service desk tickets when the queue needs it.
• You’re OK with the occasional after‑hours change window or incident call, and the odd trip to our Melbourne office and retail stores.

We value experience and practical know‑how over certifications. If you’ve built and run these systems in the real world, we want to hear from you.

Nice to have

• Fortinet (FCP or NSE 4+) or Microsoft certifications such as SC-300 or MD‑102.
• Experience with AWS or GCP access and security.
• Experience with Microsoft Defender XDR, or working with a SOC or managed security provider.
• Experience with SASE or zero trust network access, such as FortiSASE.
• Experience with identity governance (IGA) or SaaS management tools.
• Familiarity with compliance automation platforms like Vanta.

Additional Information

What's in it for you?

We consider our people one of our most important assets, and we want our team to love their working lives! When you work for Luxury Escapes, you can look forward to:

• 20% discount on Luxury Holidays
• Breakfast and lunch are provided 5‑days a week
• Health and Well‑being programs
• Annual Hackathons!
• 1/2 day birthday bonus leave
• A super collaborative team that enjoys creating great platforms

If you’re interested in the role but don't check every box, apply anyway, we’d love to hear from you!

We embrace diversity in our people and make hiring decisions based on your experiences and skills. We do not discriminate based on gender identity, religion, race, national origin, sexual orientation, age, marital status, or disability status. You'll find a collaborative, inclusive, and respectful workplace here at Luxury Escapes, and we are proud to celebrate who you are. Please let us know if you require any reasonable adjustments during the interview.

As a 2026 Circle Back Initiative employer, we're committed to responding to every applicant.