Senior Systems Engineer

As Luxury Escapes continues to grow, so does the technology that supports it. We’re looking for a Senior Systems Engineer to take technical ownership of our corporate systems, including identity, devices, Azure and the network across our offices and retail stores.
You’ll report to the Associate Director of IT Operations and join a small team split between Sydney and Melbourne. You’ll be solving real problems, building reliable systems, and being the go-to technical expert in the room, this is a great opportunity to grow your career in a fast-moving travel tech company. We all work the service desk, cover for each other, and you’ll also work closely with our Information Security team on ISO 27001.
What You'll Do
Manage identity and access in Microsoft Entra ID, including SSO, SCIM provisioning, Conditional Access, PIM and user lifecycle automation, and bring more of our business systems onto SSO.
Look after our Fortinet network across the Sydney and Melbourne offices and our retail stores. That includes firmware updates, firewall rules and changes, backups, monitoring, VPN, Wi-Fi and SD-WAN, and setting up new sites.
Manage our Windows devices in Intune and help support our Macs in Jamf Pro, including patching and vulnerability management with NinjaOne and Microsoft Defender.
Look after our Azure environment and Microsoft 365 security settings, and lead the move off AD FS to Entra cloud authentication.
Improve our security posture hands-on, for example by tightening Conditional Access policies, rolling out attack surface reduction rules and fixing penetration test findings.
Be the technical escalation point for security alerts and incidents, working with our Information Security team.
Put in place and evidence the technical controls for our ISO 27001:2022 certification.
Pick up service desk requests with the rest of the team, and help automate onboarding, offboarding, and access requests.
Work with our vendors and partners, including our Fortinet partner for escalations and purchasing.
Get to the root cause of complex issues across systems and fix them properly.
Share what you know with the team through documentation and hands-on mentoring.
Technical depth
Strong experience with Microsoft Entra ID, including Conditional Access, PIM, SSO and automated provisioning.
Hands-on experience running Fortinet FortiGate firewalls across multiple sites (firmware upgrades, policies, VPN, SD-WAN, Wi-Fi).
Experience managing Windows devices with Intune. Some macOS management experience (Jamf Pro or similar) is a plus.
Experience administering and securing Microsoft 365 and Azure, including Microsoft Defender.
Practical experience implementing controls for ISO 27001, SOC 2 or a similar framework.
Good PowerShell skills. Experience with Microsoft Graph is a bonus.
How you work
You communicate clearly with both technical and non-technical audiences, and you’re comfortable providing recommendations backed by solid analysis.
You enjoy lifting the people around you, whether that’s mentoring a junior, sharing knowledge, or raising the technical bar through good documentation and review.
You stay calm and structured under pressure, particularly during incidents when clear thinking matters most.
You take ownership end-to-end. You deliver reliably, flag risks early, and hold yourself to a high standard with minimal oversight.
You’re proactive about identifying problems before they escalate, and you balance thoroughness with pragmatism.
You don’t mind picking up service desk tickets when the queue needs it.
You’re OK with the occasional after-hours change window or incident call, and the odd trip to our Melbourne office and retail stores.
We value experience and practical know-how over certifications. If you’ve built and run these systems in the real world, we want to hear from you.
Nice to have
Fortinet (FCP or NSE 4+) or Microsoft certifications such as SC-300 or MD-102.
Experience with AWS or GCP access and security.
Experience with Microsoft Defender XDR, or working with a SOC or managed security provider.
Experience with SASE or zero trust network access, such as FortiSASE.
Experience with identity governance (IGA) or SaaS management tools.
Familiarity with compliance automation platforms like Vanta.

Employment type
Full-time

Work arrangement
No