Senior Cloud Service Engineer

Job title: Senior Cloud Service Engineer

About the Role

We are looking for a motivated Cloud Service Engineer to join the Digital Workplace Services team and support the security administration and governance of our cloud and SaaS environment. The role will work across platforms including Microsoft 365 Microsoft Entra ID Google Workspace Box and other enterprise SaaS applications supporting operational security access governance monitoring troubleshooting and continuous improvement.

This is an excellent opportunity for someone who wants to build hands-on experience across cloud security identity SaaS security data protection and AI security within a large enterprise environment working closely with senior engineers security teams platform owners application teams and vendors.

Key Responsibilities

• SaaS & Cloud Security: Support administration security governance onboarding configuration lifecycle management and periodic reviews for Microsoft 365 Google Workspace Box Lucidchart Smartsheet and other enterprise SaaS platforms.
• Identity & Access Management: Support Microsoft Entra ID and Google Cloud Identity administration including users groups applications Conditional Access MFA authentication methods guest access and privileged role governance.
• Data Protection & Security Operations: Assist with Microsoft Purview Defender DLP alert monitoring external sharing reviews security triage remediation tracking and operational reporting.
• AI & Emerging Technology Security: Support governance and monitoring for enterprise AI services Copilot Copilot Studio GenAI applications agents connectors and related data protection controls.
• Security Monitoring & Investigation: Monitor dashboards and alerts across SaaS and cloud platforms perform initial investigation use tools such as Defender Purview Sentinel and SaaS security platforms and escalate complex issues where required.
• Platform Operations & Troubleshooting: Provide second-line support for authentication provisioning synchronization SSO SAML SCIM OAuth API integrations vendor issues change implementation and validation.
• Governance Documentation & Improvement: Maintain inventories ownership records runbooks knowledge articles configuration records and operational procedures while identifying automation and process improvement opportunities.

Key Technologies

The role will have exposure to the following technology areas:

• Identity & Cloud: Microsoft Entra ID Microsoft 365 Azure Google Cloud Identity and Google Workspace.
• Security: Microsoft Purview Microsoft Defender Microsoft Sentinel Defender for Cloud Apps Conditional Access DLP and SaaS security/application governance.
• SaaS Platforms: Box Lucidchart Smartsheet Adobe Apps and other enterprise SaaS applications.
• AI Security: Microsoft Copilot Copilot Studio Azure AI / AI Foundry AI governance and data protection controls.
• Automation & Technical Tools: PowerShell KQL Power Automate REST APIs Microsoft Graph SAML SCIM and OAuth.

Required Skills & Experience

• 5 years of experience in cloud administration SaaS administration IT security identity management or a related technical role.
• Basic understanding of Microsoft 365 and/or Azure identity and access management SSO MFA and authentication concepts.
• Understanding of security fundamentals including access control least privilege data protection and operational security monitoring.
• Good troubleshooting and analytical skills including the ability to investigate issues using logs dashboards and administrative portals.
• Basic PowerShell or scripting knowledge with willingness to learn KQL and security monitoring tools.
• Good written and verbal communication skills ability to work with technical teams and vendors and strong attention to detail in documentation.

Desirable Skills

• Experience with Microsoft Entra ID Purview Defender Sentinel/KQL Google Workspace Administration Google Cloud Identity Box administration/Box Shield SaaS security or CASB.
• Experience with OAuth application governance SAML SCIM Microsoft Graph PowerShell Power Automate cloud security DLP AI security or AI governance.

Relevant Microsoft Google security or cloud certifications would be advantageous but are not mandatory.

What Success Looks Like

• Independently handle routine SaaS and cloud security operations.
• Identify and resolve common identity access platform configuration and security alert issues.
• Maintain accurate application access security governance and remediation records.
• Improve documentation repeatable processes automation and operational efficiency.
• Develop deeper expertise across Microsoft Google SaaS cloud data protection and AI security platforms.

Working Relationships

The role will work closely with Digital Workplace Services Cyber Security/SOC Identity & Access Management Microsoft 365/Azure engineering teams Google Cloud/Google Workspace teams Data Protection/Privacy Application and Enterprise Architecture teams SaaS application owners and external technology vendors.

Ideal Candidate

We are looking for someone who is curious technically hands-on security-minded and willing to learn. The ideal candidate has a strong foundation in IT cloud or security and wants to develop into a broader SaaS Cloud and AI Security Engineer.

• Enjoys troubleshooting complex technical problems and learning new platforms quickly.
• Takes ownership of issues while knowing when to seek guidance.
• Communicates clearly with technical and non-technical stakeholders.
• Has strong attention to detail and follows through on operational tasks.
• Is interested in emerging technologies particularly cloud and AI security.