Cloud Operational Engineer

We are looking for a Cloud Operational Engineer (L3) to serve as the senior technical authority and final escalation point for a multi-client cloud environment. This is a hands-on operations role focused on complex incidents, identity and access, Microsoft cloud platforms, troubleshooting, root cause analysis, automation, and maintaining operational standards.

Key Responsibilities

• Resolve complex cloud, identity, endpoint, and platform incidents across client environments.
• Manage Entra ID, Azure RBAC/PIM, app registrations, service principals, Conditional Access, and MFA.
• Administer Microsoft 365, including Exchange Online, SharePoint, OneDrive, and Teams.
• Support Intune, Azure Virtual Desktop, Windows 365 Cloud PC, and endpoint environments.
• Troubleshoot DNS, SSO/SAML, SCIM provisioning, Azure VMs, and cloud platforms.
• Lead major incident response and perform root cause analysis for recurring issues.
• Create and maintain technical runbooks, operational standards, and troubleshooting documentation.
• Develop PowerShell and Microsoft Graph automation to reduce repetitive operational work.
• Monitor and support multiple client tenants while maintaining strict tenant isolation and security standards.
• Work within ITIL-aligned incident, problem, change, and knowledge management processes.

Requirements

• 6–10+ years of experience in cloud, identity, workplace, or related engineering, including L3/SME-level experience.
• Proven experience as a final escalation point in a production environment.
• Strong expertise in Microsoft 365, Entra ID, Azure, Intune, and endpoint management.
• Hands-on experience with Azure RBAC, PIM, VMs, storage, Key Vault, and Log Analytics.
• Strong knowledge of SAML, SCIM, SSO, identity security, and Zero Trust principles.
• Production-level PowerShell automation experience, including Microsoft Graph PowerShell.
• Advanced troubleshooting and root cause analysis skills.
• Hands-on ServiceNow experience is required.
• Experience with Confluence or a similar knowledge-management platform.
• Familiarity with monitoring tools such as Zabbix or Azure Monitor.
• MSP / managed services / multi-tenant experience is required.
• Strong client-facing communication and incident-management skills.

Preferred Certifications

• Microsoft 365 Certified: Enterprise Administrator Expert (MS-102)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Azure Security Engineer (AZ-500), Security Operations Analyst (SC-200), or ITIL 4 Foundation are advantageous.