Cloud Operational Engineer (L3)

iSupport Worldwide; Pasig; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

iSupport Worldwide is seeking a Cloud Operational Engineer (L3) to act as senior technical authority for multi-client cloud environments. This hands-on role focuses on complex incidents, identity and access, Microsoft cloud platforms, automation, and enforcing operational standards.

You will resolve incidents, manage Entra ID, Azure RBAC/PIM, and Microsoft 365 services while driving automation using PowerShell and Microsoft Graph.

Qualifications

• 6-10+ years of cloud/identity engineering experience.
• Final escalation point in a production environment.
• Strong expertise in Microsoft 365, Entra ID, Azure, Intune, and endpoint management.
• Hands-on ServiceNow experience is required.
• MSP / managed services / multi-tenant experience required.

Responsibilities

• Resolve complex cloud, identity, endpoint, and platform incidents across client environments.
• Manage Entra ID, Azure RBAC/PIM, app registrations, service principals, Conditional Access, and MFA.
• Administer Microsoft 365, including Exchange Online, SharePoint, OneDrive, and Teams.
• Support Intune, Azure Virtual Desktop, Windows 365 Cloud PC, and endpoint environments.
• Troubleshoot DNS, SSO/SAML, SCIM provisioning, Azure VMs, and cloud platforms.
• Lead major incident response and perform root cause analysis for recurring issues.
• Create and maintain technical runbooks, operational standards, and troubleshooting documentation.
• Develop PowerShell and Microsoft Graph automation to reduce repetitive operational work.
• Monitor and support multiple client tenants while maintaining strict tenant isolation and security standards.
• Work within ITIL-aligned incident, problem, change, and knowledge management processes.

Skills

Cloud engineering

Escalation point

Incident management

PowerShell automation

Client communication

Tools

Entra ID

Azure RBAC

Log Analytics

PowerShell

Microsoft Graph PowerShell

ServiceNow

Confluence

Zabbix

Azure Monitor

Job description

We are looking for a Cloud Operational Engineer (L3) to serve as the senior technical authority and final escalation point for a multi-client cloud environment. This is a hands-on operations role focused on complex incidents, identity and access, Microsoft cloud platforms, troubleshooting, root cause analysis, automation, and maintaining operational standards.

Key Responsibilities

• Resolve complex cloud, identity, endpoint, and platform incidents across client environments.
• Manage Entra ID, Azure RBAC/PIM, app registrations, service principals, Conditional Access, and MFA.
• Administer Microsoft 365, including Exchange Online, SharePoint, OneDrive, and Teams.
• Support Intune, Azure Virtual Desktop, Windows 365 Cloud PC, and endpoint environments.
• Troubleshoot DNS, SSO/SAML, SCIM provisioning, Azure VMs, and cloud platforms.
• Lead major incident response and perform root cause analysis for recurring issues.
• Create and maintain technical runbooks, operational standards, and troubleshooting documentation.
• Develop PowerShell and Microsoft Graph automation to reduce repetitive operational work.
• Monitor and support multiple client tenants while maintaining strict tenant isolation and security standards.
• Work within ITIL-aligned incident, problem, change, and knowledge management processes.

Requirements

• 6-10+ years of experience in cloud, identity, workplace, or related engineering, including L3/SME-level experience.
• Proven experience as a final escalation point in a production environment.
• Strong expertise in Microsoft 365, Entra ID, Azure, Intune, and endpoint management.
• Hands-on experience with Azure RBAC, PIM, VMs, storage, Key Vault, and Log Analytics.
• Strong knowledge of SAML, SCIM, SSO, identity security, and Zero Trust principles.
• Production-level PowerShell automation experience, including Microsoft Graph PowerShell.
• Advanced troubleshooting and root cause analysis skills.
• Hands-on ServiceNow experience is required.
• Experience with Confluence or a similar knowledge-management platform.
• Familiarity with monitoring tools such as Zabbix or Azure Monitor.
• MSP / managed services / multi-tenant experience is required.
• Strong client-facing communication and incident-management skills.

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Azure Security Engineer (AZ-500), Security Operations Analyst (SC-200), or ITIL 4 Foundation are advantageous.