Senior Systems Engineer L3/L4

Role Objectives

The Senior Systems Engineer is responsible for architecting, implementing, and securing Microsoft Azure and Microsoft 365 environments in alignment with ISO27001 and Essential Eight controls. This role plays an important part in enhancing the company's cyber resilience and operational maturity by embedding security by design, automating infrastructure, and mentoring junior IT staff. With a strong emphasis on proactive management and compliance, the Senior Systems Engineer ensures the company's technology stack remains scalable, secure, and audit ready while actively contributing to internal capability uplift, resolving complex tickets, working on projects and reducing reliance on external MSPs.

Key Results and Responsibilities

• Architect, implement, and continuously improve Microsoft Azure and Microsoft 365 environments with a focus on security, scalability, and performance.

• Align all designs and configurations to ISO27001 controls, particularly:

• A.9 Access Control

• A.12 Operations Security
• A.16 Information Security Incident Management
• Manage identity and access lifecycle through Microsoft Entra, including Conditional Access, PIM, RBAC, and governance policies.
• Configure and monitor advanced cloud security tools, including:
• Microsoft Defender (Endpoint, Identity, Office 365, Cloud Apps)
• Microsoft Purview for DLP, data classification, auditing, and compliance
• Microsoft Secure Score & Compliance Manager
• Harden devices and enforce Essential Eight controls via Intune, Autopilot, and compliance baselines.
• Apply Azure governance frameworks including Management Groups, Blueprints, Policies, and cost management strategies.
• Automate infrastructure and compliance workflows using advanced PowerShell scripting.
• Lead incident response efforts for cloud-related security incidents, working closely with the IT Manager.
• Support internal and external audit preparation related to cloud infrastructure, M365, and ISO27001 obligations.
• Act as a senior escalation point for complex issues across Exchange Online, Entra ID, Defender, and Azure configuration.
• Mentor junior IT staff in cloud administration, cyber hygiene, and secure-by-design principles.

Skills and Competencies

Deep hands-on expertise with:

• Microsoft Azure – networking, compute, storage, and security
• Microsoft 365 – Exchange Online, Teams, SharePoint, OneDrive
• Microsoft Entra ID – access reviews, lifecycle workflows, PIM
• Microsoft Defender & Intune – configuration baselines, compliance profiles
• Strong scripting and automation skills using PowerShell
• Excellent understanding of ACSC Essential Eight mitigation strategies
• Proficiency in secure cloud operations tools, including: Azure Firewall, Key Vault, NSGs, Log Analytics
• Strong communication skills, with the ability to translate technical risks into business impacts
• Experience with the Microsoft Power Platform (Power Automate, Power Apps, Dataverse) (desirable)
• Involvement in ISO27001 certification processes or surveillance audits (desirable)
• Familiarity with Remote Management and Maintenance tools (desirable)
• Familiarity with ITSM platforms (desirable)

Experience and Qualifications

• Minimum 5+ years in senior technical roles with a focus on cloud infrastructure and security
• Certification or demonstrated experience related to ISO27001
• Microsoft Certified: Azure Solutions Architect Expert, Identity and Access Administrator Associate and Security, Compliance, and Identity Fundamentals (desirable)

Why join us?

• Work From Home
• Comprehensive HMO coverage
• Exciting learning and career growth opportunities
• Seamless HR experience with Cloud HR (Sprout)
• Above-standard leave benefits

Make your next big career move by applying at KMC Solutions

Recognized as one of the Best Workplaces in the Philippines and certified by the global authority on workplace culture as a Great Place To Work