Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Senior Cloud Operations & Security Engineer role.
Rezi rewrites your resume against RAM Group's job description. Free.
Tailor your resume to this Senior Cloud Operations & Security Engineer role.
Rezi rewrites your resume against RAM Group's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Cloud Operations & Security Engineer posting at RAM Group — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Cloud Operations & Security Engineer posting at RAM Group — free, in seconds.
About the Role
RAM Group operates a cloud-first technology environment, relying on SaaS platforms like Salesforce, Workday, and Microsoft 365. This role is responsible for operating, securing, and improving this environment across Australian and Asia Pacific offices. The Senior Cloud Operations & Security Engineer will manage the daily health, security, and governance of identity, endpoint, network, cloud, and SaaS systems, serving as the senior technical escalation point for the IT support team. This position involves setting security and configuration baselines, ensuring environmental resilience, compliance, and suitability for a growing, regulated financial services group.
Responsibilities
- Administer Microsoft Entra ID, manage SSO and provisioning (SAML/SCIM) into Salesforce, Workday and Microsoft 365.
- Own MFA and Conditional Access, run joiner/mover/leaver processes and access reviews, and manage privileged accounts.
- Manage the device fleet through Intune and Autopilot, maintain encryption and configuration baselines, and administer Microsoft 365 services.
- Govern the Azure tenant, oversee the security configuration and integration health of core SaaS platforms, and track tenancy settings.
- Maintain office switches, firewalls, Wi-Fi and internet services.
- Deliver secure remote access (SASE/ZTNA/VPN), administer DNS and email authentication (SPF, DKIM, DMARC), and support new office fit-outs.
- Operate endpoint and MDR tooling (e.g. CrowdStrike, Microsoft Defender), run vulnerability and patch management, monitor alerts and lead incident response.
- Resolve complex incidents, drive root-cause fixes, and mentor the IT Systems & Support Engineers.
- Manage technology vendors, licences and renewals.
- Oversee backup and recovery, business continuity, documentation and change management, and support audit and compliance requirements.
Requirements
- 6+ years in IT infrastructure, cloud or security engineering, including a cloud-first/SaaS environment.
- Deep Microsoft cloud expertise: Entra ID, Intune/Endpoint Manager, Microsoft 365 and Azure governance.
- Strong identity and access experience: SSO, SCIM, MFA and Conditional Access across SaaS platforms.
- Hands-on EDR/MDR experience (e.g. CrowdStrike, Microsoft Defender).
- Vulnerability and patch management experience across endpoints and cloud.
- Practical network skills: switch and firewall administration, DNS, email authentication, Wi-Fi and secure remote access.
- PowerShell (or equivalent) scripting for automation and reporting.
- Clear written and verbal communication, with strong documentation skills.
- Microsoft certifications (AZ-104, SC-300, MD-102) are desirable.
- Security certifications (CompTIA Security+, SC-200) are desirable.
- Experience administering or securing Salesforce or Workday is desirable.
- Exposure to SASE/ZTNA, and SIEM/SOAR platforms such as Microsoft Sentinel is desirable.
- Experience in financial services or another regulated environment is desirable.
- Autonomous and outcome-focused.
- Methodical, with a documentation-first approach.
- Security- and risk-aware by instinct.
- Collaborative across time zones, working with colleagues in Sydney and Manila.
- Calm under pressure.
Skills
- Microsoft Entra ID
- SSO
- SCIM
- MFA
- Conditional Access
- Intune
- Autopilot
- Microsoft 365
- Exchange Online
- SharePoint
- OneDrive
- Teams
- Azure governance
- SASE
- ZTNA
- VPN
- DNS
- SPF
- DKIM
- DMARC
- CrowdStrike
- Microsoft Defender
- Vulnerability management
- Patch management
- PowerShell
- Salesforce
- Workday
- Microsoft Sentinel
Location
- Australian offices
- Asia Pacific offices
Work Type
- Cloud-first
- SaaS
Experience Level
- Senior
- 6+ years in IT infrastructure, cloud or security engineering
About the Company
- RAM Group runs a cloud-first technology environment.
- Our business runs on SaaS platforms, including Salesforce, Workday and Microsoft 365, with no on-premise servers.
- We’re a growing, regulated financial services group.