Regional IT Operations Officer

Regional IT Operations Officer

MAIN PURPOSE

• Manage service delivery primarily for Microsoft 365, Active Directory, DNS, and VPN across the APAC region.
• Design and implement Microsoft 365, IT infrastructure, VPN solutions, and operational security frameworks.

KEY RESPONSIBILITIES

• Microsoft 365 Platform Engineering
• Exchange Online: Configure mail flow rules, anti-spam policies, mailbox permissions, and hybrid mail setups.
• Microsoft Teams: Manage Teams policies, voice configurations, federation settings, and app permissions.
• SharePoint & OneDrive: Administer site collections, sharing policies, storage quotas, and data governance.
• Intune & Endpoint Manager: Deploy device compliance policies, app protection policies, and manage Windows Autopilot provisioning.
• PowerShell Automation: Develop scripts for bulk user provisioning, license assignment, and reporting across Microsoft 365 services.
• Security & Compliance (Microsoft Purview): Configure DLP policies, sensitivity labels, retention policies, and audit logging.
• Palo Alto Prisma Access & Secure Access Management
• Prisma Access SWG: Configure URL filtering, SSL inspection, bandwidth control, and threat protection policies.
• Prisma Access ZTNA: Design application segmentation policies, connector deployments, and access control rules.
• Authentication & Identity Integration: Integrate Strata Cloud Manager with Azure AD to enable SAML-based SSO and enforce conditional access policies.
• Policy Management: Create granular access policies based on user identity, device posture, and location.
• Monitoring & Troubleshooting: Utilize Strata Cloud Manager for troubleshooting, including packet capture analysis and fault isolation across Prisma Access and related network components.
• Security & Compliance
• Implement conditional access policies by combining Microsoft 365 and Prisma Access signals to enforce zero-trust principles.
• Monitor Microsoft Defender for Office 365 and Prisma Access Threat Insights for malware, phishing, and data exfiltration attempts.
• Conduct regular security assessments and penetration testing of cloud and VPN configurations.
• Ensure alignment with ISO 27001, NIST, and GDPR/PDPA compliance frameworks.
• Operational Support & Documentation
• Provide Tier 2/3 support for escalated incidents related to Microsoft 365 and Prisma Access services.
• Maintain detailed runbooks, architecture diagrams, and change logs for all configurations.
• Collaborate with SOC and NOC teams on incident response and threat hunting activities.
• Continuous Improvement
• Identify opportunities to optimize services and enhance the overall user experience.
• Implement automation and self-service solutions where applicable.
• Ad hoc Support
• Perform additional tasks assigned by supervisors or management as needed.

REQUIREMENTS

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• 3–5 years of hands-on experience with Microsoft 365 and Palo Alto Prisma Access technologies.
• Proficiency in PowerShell, JSON/YAML (for policy scripting), and cloud networking concepts.
• Certifications such as MS-500, SC-300, Prisma Access SASE Administrator (PASA), or PCNSA are preferred but not mandatory.
• Strong analytical, documentation, and communication skills.
• Experience managing services across diverse environments, including corporate offices, warehouses, and manufacturing plants.
• Excellent communication, leadership, and stakeholder management skills.
• Ability to travel within the APAC region as required.