Cloud Engineer L3 (Palo Alto&Azure)

SUMMARY:
-

POSITION INFO:

The Cloud Engineer L3 is a technical expert responsible for building, securing, and maintaining cloud and identity platforms across a global enterprise environment. This role is pivotal in delivering robust, scalable, and secure Azure services, managing modern identity systems, and supporting the strategic cloud transformation journey. The specialist will contribute to solution design, operations, governance, incident response, and continuous improvement efforts across all assigned platforms.

Responsibilities:

• Support configuration, deployment, and day-to-day operations of Azure services including:
• Virtual Machines, Scale Sets, App Services, Function Apps, Azure SQL, Storage, Key Vaults, Front Door, API Management
• Azure Virtual WAN, ExpressRoute, and Palo Alto Cloud NGFW integration
• Assist in implementing infrastructure changes through GitLab pipelines or templates (e.g., Terraform/ARM/Bicep).
• Support backup, recovery, and business continuity configurations across Azure workloads.
• Troubleshoot and resolve Azure infrastructure incidents and service disruptions.
• Support hybrid identity infrastructure (Active Directory + Entra ID), including:
• User and group management
• Synchronization and lifecycle changes
• Conditional access policies and multifactor authentication
• Assist with implementation and support of Silverfort identity protections.
• Apply least privilege principles and support server access configuration through RBAC and group assignments.
• Assist with management of privileged identity access and just-in-time controls.
• Assist with configuration and support of Exchange Online, on-prem Exchange, and hybrid setups.
• Provide Tier 2/3 support for O365 services including Teams, SharePoint, and OneDrive.
• Support AvePoint-based Office 365 backup configuration, monitoring, and testing.
• Maintain DNS entries across internal and external zones; assist with zone file hygiene and updates.
• Assist with management of internal PKI and external SSL certificates, including lifecycle management.
• Participate in configuring and tuning monitoring tools across identity and cloud platforms.
• Respond to alerts and support tickets/requests and participate in incident troubleshooting.
• Assist in disaster recovery testing, documentation, and backup validation activities.
• Contribute to M&A integration efforts including:
• Office 365 tenant-to-tenant migrations
• Work to integrate acquired systems securely and consistently into the global architecture.
• Support CoreView configuration, workflows, and policy enforcement.

Requirements:

• Strong written and verbal communication
• Comfortable in a fast-paced environment
• General knowledge of software development lifecycle
• 3–5 years of technical experience with Microsoft cloud and identity technologies
• Solid working knowledge of Azure, Microsoft Entra ID, and Active Directory
• Experience supporting Exchange Online, on-prem Exchange, and mail routing
• Familiarity with DNS, SSL certificate management, and hybrid identity scenarios
• Experience with scripting (PowerShell or Python preferred)
• Comfortable supporting CI/CD workflows
• Awareness of enterprise backup, monitoring, and DR strategies
• Hands-on participation in O365 or AD migrations
• BSC IT, BTech, or equivalent
• An understanding of SQL Databases (advantageous)
• Exposure to Silverfort, CoreView, AvePoint, or Palo Alto Cloud NGFW (advantageous)
• Understanding of GDPR / ISO27001 / POPI advantageous 

Please consider your application unsuccessful if you have not received a response within two weeks of applying.