Cloud Operational Engineer (L3)

We are looking for a Cloud Operational Engineer (L3) to serve as the senior technical authority and final escalation point for a multi-client cloud environment. This is a hands-on operations role focused on complex incidents, identity and access, Microsoft cloud platforms, troubleshooting, root cause analysis, automation, and maintaining operational standards.
Key Responsibilities
Resolve complex cloud, identity, endpoint, and platform incidents across client environments.
Manage Entra ID, Azure RBAC/PIM, app registrations, service principals, Conditional Access, and MFA.
Administer Microsoft 365, including Exchange Online, SharePoint, OneDrive, and Teams.
Support Intune, Azure Virtual Desktop, Windows 365 Cloud PC, and endpoint environments.
Troubleshoot DNS, SSO/SAML, SCIM provisioning, Azure VMs, and cloud platforms.
Lead major incident response and perform root cause analysis for recurring issues.
Create and maintain technical runbooks, operational standards, and troubleshooting documentation.
Develop PowerShell and Microsoft Graph automation to reduce repetitive operational work.
Monitor and support multiple client tenants while maintaining strict tenant isolation and security standards.
Work within ITIL-aligned incident, problem, change, and knowledge management processes.
Requirements
6–10+ years of experience in cloud, identity, workplace, or related engineering, including L3/SME-level experience.
Proven experience as a final escalation point in a production environment.
Strong expertise in Microsoft 365, Entra ID, Azure, Intune, and endpoint management.
Hands-on experience with Azure RBAC, PIM, VMs, storage, Key Vault, and Log Analytics.
Strong knowledge of SAML, SCIM, SSO, identity security, and Zero Trust principles.
Production-level PowerShell automation experience, including Microsoft Graph PowerShell.
Advanced troubleshooting and root cause analysis skills.
Hands-on ServiceNow experience is required.
Experience with Confluence or a similar knowledge-management platform.
Familiarity with monitoring tools such as Zabbix or Azure Monitor.
MSP / managed services / multi-tenant experience is required.
Strong client-facing communication and incident-management skills.
Preferred Certifications
Microsoft 365 Certified: Enterprise Administrator Expert (MS-102)
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
Microsoft Certified: Azure Administrator Associate (AZ-104)
Microsoft Certified: Endpoint Administrator Associate (MD-102)
Azure Security Engineer (AZ-500), Security Operations Analyst (SC-200), or ITIL 4 Foundation are advantageous.

Work arrangement
Yes