Cloud Operational Engineer (L3)

iSupport Worldwide; Pasig; On-site; PHP 820,000 - 1,400,000; Full time

Job summary

iSupport Worldwide is seeking a Cloud Operational Engineer (L3) to serve as the senior technical authority for a multi-client cloud environment. This hands-on role focuses on complex incidents, identity management, and Microsoft cloud platforms, driving root cause analysis and automation.

You will manage Entra ID, Azure RBAC/PIM, Microsoft 365 services, and endpoint management across tenants, while maintaining strict security and incident-management processes.

Qualifications

• 6–10+ years of experience in cloud, identity, workplace, or related engineering, including L3/SME-level experience.
• Proven experience as a final escalation point in a production environment.
• Hands-on experience with Microsoft 365, Entra ID, Azure, Intune, and endpoint management.
• Hands-on experience with Azure RBAC, PIM, VMs, storage, Key Vault, and Log Analytics.
• Strong knowledge of SAML, SCIM, SSO, identity security, and Zero Trust principles.
• Production-level PowerShell automation experience, including Microsoft Graph PowerShell.
• Hands-on ServiceNow experience is required.
• Experience with Confluence or a similar knowledge-management platform.
• Familiarity with monitoring tools such as Zabbix or Azure Monitor.
• MSP / managed services / multi-tenant experience is required.
• Strong client-facing communication and incident-management skills.

Responsibilities

• Resolve complex cloud, identity, endpoint, and platform incidents across client environments.
• Manage Entra ID, Azure RBAC/PIM, app registrations, service principals, CA, and MFA.
• Administer Microsoft 365, including Exchange Online, SharePoint, OneDrive, and Teams.
• Support Intune, Azure Virtual Desktop, Windows 365 Cloud PC, and endpoint environments.
• Troubleshoot DNS, SSO/SAML, SCIM provisioning, Azure VMs, and cloud platforms.
• Lead major incident response and perform root cause analysis for recurring issues.
• Create and maintain technical runbooks, operational standards, and troubleshooting documentation.
• Develop PowerShell and Microsoft Graph automation to reduce repetitive operational work.
• Monitor and support multiple client tenants while maintaining strict tenant isolation and security standards.
• Work within ITIL-aligned incident, problem, change, and knowledge management processes.

Skills

Microsoft 365

Entra ID

Azure

Intune

Endpoint management

Azure RBAC

PIM

VMs

Storage

Key Vault

Log Analytics

SAML

SCIM

SSO

Zero Trust

PowerShell automation

Microsoft Graph PowerShell

ServiceNow

Confluence

Zabbix

Azure Monitor

MSP / multi-tenant

Client-facing communication

Tools

PowerShell

Microsoft Graph PowerShell

Job description

We are looking for a Cloud Operational Engineer (L3) to serve as the senior technical authority and final escalation point for a multi-client cloud environment. This is a hands-on operations role focused on complex incidents, identity and access, Microsoft cloud platforms, troubleshooting, root cause analysis, automation, and maintaining operational standards.

Key Responsibilities

• Resolve complex cloud, identity, endpoint, and platform incidents across client environments.
• Manage Entra ID, Azure RBAC/PIM, app registrations, service principals, Conditional Access, and MFA.
• Administer Microsoft 365, including Exchange Online, SharePoint, OneDrive, and Teams.
• Support Intune, Azure Virtual Desktop, Windows 365 Cloud PC, and endpoint environments.
• Troubleshoot DNS, SSO/SAML, SCIM provisioning, Azure VMs, and cloud platforms.
• Lead major incident response and perform root cause analysis for recurring issues.
• Create and maintain technical runbooks, operational standards, and troubleshooting documentation.
• Develop PowerShell and Microsoft Graph automation to reduce repetitive operational work.
• Monitor and support multiple client tenants while maintaining strict tenant isolation and security standards.
• Work within ITIL-aligned incident, problem, change, and knowledge management processes.

Requirements

• 6–10+ years of experience in cloud, identity, workplace, or related engineering, including L3/SME-level experience.
• Proven experience as a final escalation point in a production environment.
• Strong expertise in Microsoft 365, Entra ID, Azure, Intune, and endpoint management.
• Hands-on experience with Azure RBAC, PIM, VMs, storage, Key Vault, and Log Analytics.
• Strong knowledge of SAML, SCIM, SSO, identity security, and Zero Trust principles.
• Production-level PowerShell automation experience, including Microsoft Graph PowerShell.
• Advanced troubleshooting and root cause analysis skills.
• Hands-on ServiceNow experience is required.
• Experience with Confluence or a similar knowledge-management platform.
• Familiarity with monitoring tools such as Zabbix or Azure Monitor.
• MSP / managed services / multi-tenant experience is required.
• Strong client-facing communication and incident-management skills.

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Azure Security Engineer (AZ-500), Security Operations Analyst (SC-200), or ITIL 4 Foundation are advantageous.