Senior Cloud Operations & Security Engineer

About the role

RAM Group runs a cloud-first technology environment. Our business runs on SaaS platforms, including Salesforce, Workday and Microsoft 365, with no on-premise servers. We’re looking for a Senior Cloud Operations & Security Engineer to operate, secure and continuously improve this estate across our Australian and Asia Pacific offices.

You’ll own the day-to-day health, security and governance of our identity, endpoint, network, cloud and SaaS environment, and act as the senior technical escalation point for the IT support team. You’ll work alongside our IT Systems & Support Engineers and Solutions Architect, setting security and configuration baselines and keeping the environment resilient, compliant and fit for a growing, regulated financial services group.

Why you’ll want this role

• Own the security and reliability of a genuinely cloud-first environment, with no legacy data centre to maintain
• Work across identity, endpoint, cloud and security for a growing financial services group
• Shape our Zero Trust and modern-workplace roadmap, with direct access to senior leadership
• Clear growth path toward cloud or security architecture as the function matures
• High autonomy in a flexible, entrepreneurial culture

What you’ll do

• Identity & access: Administer Microsoft Entra ID. Manage SSO and provisioning (SAML/SCIM) into Salesforce, Workday and Microsoft 365. Own MFA and Conditional Access, run joiner/mover/leaver processes and access reviews, and manage privileged accounts.
• Endpoint & modern workplace: Manage the device fleet through Intune and Autopilot, maintain encryption and configuration baselines, and administer Microsoft 365 services (Exchange Online, SharePoint, OneDrive, Teams).
• Cloud & SaaS operations: Govern our Azure tenant, oversee the security configuration and integration health of core SaaS platforms, and track tenancy settings against vendor best-practice baselines.
• Network & connectivity: Maintain office switches, firewalls, Wi-Fi and internet services. Deliver secure remote access (SASE/ZTNA/VPN), administer DNS and email authentication (SPF, DKIM, DMARC), and support new office fit-outs.
• Security operations: Operate our endpoint and MDR tooling (e.g. CrowdStrike, Microsoft Defender), run vulnerability and patch management, monitor alerts and lead incident response.
• Tier 3 support: Resolve complex incidents, drive root-cause fixes, and mentor the IT Systems & Support Engineers.
• Vendors & governance: Manage technology vendors, licences and renewals. Oversee backup and recovery, business continuity, documentation and change management, and support audit and compliance requirements.

What you’ll bring

Essential

• 6+ years in IT infrastructure, cloud or security engineering, including a cloud-first/SaaS environment
• Deep Microsoft cloud expertise: Entra ID, Intune/Endpoint Manager, Microsoft 365 and Azure governance
• Strong identity and access experience: SSO, SCIM, MFA and Conditional Access across SaaS platforms
• Hands-on EDR/MDR experience (e.g. CrowdStrike, Microsoft Defender)
• Vulnerability and patch management experience across endpoints and cloud
• Practical network skills: switch and firewall administration, DNS, email authentication, Wi-Fi and secure remote access
• PowerShell (or equivalent) scripting for automation and reporting
• Clear written and verbal communication, with strong documentation skills

Desirable

• Microsoft certifications (AZ-104, SC-300, MD-102)
• Security certifications (CompTIA Security+, SC-200)
• Experience administering or securing Salesforce or Workday
• Exposure to SASE/ZTNA, and SIEM/SOAR platforms such as Microsoft Sentinel
• Experience in financial services or another regulated environment

You are

• Autonomous and outcome-focused
• Methodical, with a documentation-first approach
• Security- and risk-aware by instinct
• Collaborative across time zones, working with colleagues in Sydney and Manila
• Calm under pressure