Senior Systems Engineer

Luxury Escapes; Sydney; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

20% discount on Luxury Holidays

Breakfast and lunch provided 5-days a‑

Health and Well‑being programs

Annual Hackathons

Half-day birthday leave

Collaborative team culture

Job summary

Luxury Escapes is seeking a Senior Systems Engineer to own corporate systems across our Sydney and Melbourne offices, including identity, devices, Azure and the network. You’ll be the go-to technical expert, collaborating with Information Security to support ISO 27001.

You’ll work in our Sydney office five days a week and contribute to building reliable, secure systems while mentoring teammates and driving improvements.

Qualifications

• Strong experience with Microsoft Entra ID, including CA, PIM, SSO and automated provisioning.
• Hands-on Fortinet FortiGate firewall management across multiple sites.
• Experience managing Windows devices with Intune; macOS management with Jamf Pro a plus.
• Experience securing Microsoft 365 and Azure, including Defender.
• Practical experience implementing ISO 27001, SOC 2 or similar controls.
• Good PowerShell skills; Microsoft Graph knowledge is a bonus.

Responsibilities

• Manage identity and access in Microsoft Entra ID, including SSO, SCIM provisioning, Conditional Access, PIM and user lifecycle automation.
• Look after Fortinet FortiGate firewalls across sites including firmware, policies, VPN, SD-WAN and Wi-Fi.
• Manage Windows devices with Intune and support Macs with Jamf Pro, including patching and vulnerability management.
• Oversee Azure environment and Microsoft 365 security, lead move to Entra cloud authentication.
• Improve security posture by tightening Conditional Access, reducing attack surface and fixing findings.
• Serve as escalation point for security alerts and incidents with the Information Security team.
• Put in place technical controls for ISO 27001:2022 certification.
• Handle service desk tickets, automate onboarding/offboarding/access requests.
• Collaborate with vendors including Fortinet partner for escalations and purchasing.
• Root-cause complex system issues and share knowledge through documentation and mentoring.

Skills

Microsoft Entra ID

SSO

PIM

Conditional Access

Automated provisioning

Fortinet FortiGate

Intune

Jamf Pro

Microsoft 365 & Azure

Microsoft Defender

ISO 27001 controls

PowerShell

Microsoft Graph

Tools

Fortinet FortiGate

Jamf Pro

Intune

Jamf Pro

NinjaOne

Microsoft Defender

Azure

Job description

Be part of the team protecting the experiences our customers love

Luxury Escapes is a fast-growing travel platform with more than 8 million members. Recently winning the award for Most Outstanding Employee Engagement and Recruitment Program at the National Travel Industry Awards!

Working at Luxury Escapes

Our mission is to delight our customers with incredible deals for the world's best holidays. We are a collective of forward-thinking people, driven to challenge the travel industry and ourselves to bring outstanding travel experiences to our customer community.

Our award winning employee experience is king here having been recognised as "One of the Best Places to Work"by the AFR with weekly events, monthly recognition programs and significant professional development opportunities.

We do what we can to make you look forward to waking up every day!

Our Sydney office is located on Kent Street, just a short stroll from Wynyard station and surrounded by great cafés in Barangaroo.

Luxury Escapes is an in-person company. We collaborate face-to-face in our Sydney office, 5 days a week, because we believe the best ideas happen when we’re together.

Job Description

As Luxury Escapes continues to grow, so does the technology that supports it. We’re looking for a Senior Systems Engineer to take technical ownership of our corporate systems, including identity, devices, Azure and the network across our offices and retail stores.

You’ll report to the Associate Director of IT Operations and join a small team split between Sydney and Melbourne. You’ll be solving real problems, building reliable systems, and being the go‑to technical expert in the room, this is a great opportunity to grow your career in a fast-moving travel tech company. We all work the service desk, cover for each other, and you’ll also work closely with our Information Security team on ISO 27001.

What You'll Do

• Manage identity and access in Microsoft Entra ID, including SSO, SCIM provisioning, Conditional Access, PIM and user lifecycle automation, and bring more of our business systems onto SSO.
• Look after our Fortinet network across the Sydney and Melbourne offices and our retail stores. That includes firmware updates, firewall rules and changes, backups, monitoring, VPN, Wi‑Fi and SD‑WAN, and setting up new sites.
• Manage our Windows devices in Intune and help support our Macs in Jamf Pro, including patching and vulnerability management with NinjaOne and Microsoft Defender.
• Look after our Azure environment and Microsoft 365 security settings, and lead the move off AD FS to Entra cloud authentication.
• Improve our security posture hands‑on, for example by tightening Conditional Access policies, rolling out attack surface reduction rules and fixing penetration test findings.
• Be the technical escalation point for security alerts and incidents, working with our Information Security team.
• Put in place and evidence the technical controls for our ISO 27001:2022 certification.
• Pick up service desk requests with the rest of the team, and help automate onboarding, offboarding, and access requests.
• Work with our vendors and partners, including our Fortinet partner for escalations and purchasing.
• Get to the root cause of complex issues across systems and fix them properly.
• Share what you know with the team through documentation and hands‑on mentoring.

Qualifications

• Strong experience with Microsoft Entra ID, including Conditional Access, PIM, SSO and automated provisioning.
• Hands‑on experience running Fortinet FortiGate firewalls across multiple sites (firmware upgrades, policies, VPN, SD‑WAN, Wi‑Fi).
• Experience managing Windows devices with Intune. Some macOS management experience (Jamf Pro or similar) is a plus.
• Experience administering and securing Microsoft 365 and Azure, including Microsoft Defender.
• Practical experience implementing controls for ISO 27001, SOC 2 or a similar framework.
• Good PowerShell skills. Experience with Microsoft Graph is a bonus.

How you work

• You communicate clearly with both technical and non-technical audiences, and you’re comfortable providing recommendations backed by solid analysis.
• You enjoy lifting the people around you, whether that’s mentoring a junior, sharing knowledge, or raising the technical bar through good documentation and review.
• You stay calm and structured under pressure, particularly during incidents when clear thinking matters most.
• You take ownership end‑to‑end. You deliver reliably, flag risks early, and hold yourself to a high standard with minimal oversight.
• You’re proactive about identifying problems before they elevate, and you balance thoroughness with pragmatism.
• You don’t mind picking up service desk tickets when the queue needs it.
• You’re OK with the occasional after‑hours change window or incident call, and the odd trip to our Melbourne office and retail stores.

We value experience and practical know-how over certifications. If you’ve built and run these systems in the real world, we want to hear from you.

Nice to have

• Fortinet (FCP or NSE 4+) or Microsoft certifications such as SC‑300 or MD‑102.
• Experience with AWS or GCP access and security.
• Experience with Microsoft Defender XDR, or working with a SOC or managed security provider.
• Experience with SASE or zero trust network access, such as FortiSASE.
• Experience with identity governance (IGA) or SaaS management tools.
• Familiarity with compliance automation platforms like Vanta.

Additional Information

What's in it for you?

We consider our people one of our most important assets, and we want our team to love their working lives! When you work for Luxury Escapes, you can look forward to:

• 20% discount on Luxury Holidays
• Breakfast and lunch are provided 5‑days a week
• Health and Well‑being programs
• Annual Hackathons!
• 1/2 day birthday bonus leave
• A super collaborative team that enjoys creating great platforms

As a 2026 Circle Back Initiative employer, we're committed to responding to every applicant.

We embrace diversity in our people and make hiring decisions based on your experiences and skills. We do not discriminate based on gender identity, religion, race, national origin, sexual orientation, age, marital status, or disability status. You'll find a collaborative, inclusive, and respectful workplace here at Luxury Escapes, and we are proud to celebrate who you are. Please let us know if you require any reasonable adjustments during the interview.