Senior Cloud Service Engineer

Senior Cloud Service Engineer

About the Role

We are looking for a motivated Cloud Service Engineer to join the Digital Workplace Services team and support the security, administration and governance of our cloud and SaaS environment. The role will work across platforms including Microsoft 365, Microsoft Entra ID, Google Workspace, Box and other enterprise SaaS applications, supporting operational security, access governance, monitoring, troubleshooting and continuous improvement.

This is an excellent opportunity for someone who wants to build hands-on experience across cloud security, identity, SaaS security, data protection and AI security within a large enterprise environment, working closely with senior engineers, security teams, platform owners, application teams and vendors.

Key Responsibilities

• SaaS & Cloud Security: Support administration, security governance, onboarding, configuration, lifecycle management and periodic reviews for Microsoft 365, Google Workspace, Box, Lucidchart, Smartsheet and other enterprise SaaS platforms.

• Identity & Access Management: Support Microsoft Entra ID and Google Cloud Identity administration, including users, groups, applications, Conditional Access, MFA, authentication methods, guest access and privileged role governance.

• Data Protection & Security Operations: Assist with Microsoft Purview, Defender, DLP alert monitoring, external sharing reviews, security triage, remediation tracking and operational reporting.

• AI & Emerging Technology Security: Support governance and monitoring for enterprise AI services, Copilot, Copilot Studio, GenAI applications, agents, connectors and related data protection controls.

• Security Monitoring & Investigation: Monitor dashboards and alerts across SaaS and cloud platforms, perform initial investigation, use tools such as Defender, Purview, Sentinel and SaaS security platforms, and escalate complex issues where required.

• Platform Operations & Troubleshooting: Provide second-line support for authentication, provisioning, synchronization, SSO, SAML, SCIM, OAuth, API integrations, vendor issues, change implementation and validation.

• Governance, Documentation & Improvement: Maintain inventories, ownership records, runbooks, knowledge articles, configuration records and operational procedures while identifying automation and process improvement opportunities.

• Key Technologies The role will have exposure to the following technology areas:

• Identity & Cloud: Microsoft Entra ID, Microsoft 365, Azure, Google Cloud Identity and Google Workspace.

• Security: Microsoft Purview, Microsoft Defender, Microsoft Sentinel, Defender for Cloud Apps, Conditional Access, DLP and SaaS security/application governance.

• SaaS Platforms: Box, Lucidchart, Smartsheet, Adobe Apps and other enterprise SaaS applications.

• AI Security: Microsoft Copilot, Copilot Studio, Azure AI / AI Foundry, AI governance and data protection controls.

• Automation & Technical Tools: PowerShell, KQL, Power Automate, REST APIs, Microsoft Graph, SAML, SCIM and OAuth.

• Required Skills & Experience

• 5+ years of experience in cloud administration, SaaS administration, IT security, identity management or a related technical role.

• Basic understanding of Microsoft 365 and/or Azure, identity and access management, SSO, MFA and authentication concepts.

• Understanding of security fundamentals, including access control, least privilege, data protection and operational security monitoring.

• Good troubleshooting and analytical skills, including the ability to investigate issues using logs, dashboards and administrative portals.

• Basic PowerShell or scripting knowledge, with willingness to learn KQL and security monitoring tools.

• Good written and verbal communication skills, ability to work with technical teams and vendors, and strong attention to detail in documentation.

• Desirable Skills

• Experience with Microsoft Entra ID, Purview, Defender, Sentinel/KQL, Google Workspace Administration, Google Cloud Identity, Box administration/Box Shield, SaaS security or CASB.

• Experience with OAuth application governance, SAML, SCIM, Microsoft Graph, PowerShell, Power Automate, cloud security, DLP, AI security or AI governance.

• Relevant Microsoft, Google, security or cloud certifications would be advantageous but are not mandatory.

• What Success Looks Like

• Independently handle routine SaaS and cloud security operations.

• Identify and resolve common identity, access, platform configuration and security alert issues.

• Maintain accurate application, access, security governance and remediation records.

• Improve documentation, repeatable processes, automation and operational efficiency.

• Develop deeper expertise across Microsoft, Google, SaaS, cloud, data protection and AI security platforms.

• Working Relationships

• The role will work closely with Digital Workplace Services, Cyber Security/SOC, Identity & Access Management, Microsoft 365/Azure engineering teams, Google Cloud/Google Workspace teams, Data Protection/Privacy, Application and Enterprise Architecture teams, SaaS application owners and external technology vendors.

• Ideal Candidate

• We are looking for someone who is curious, technically hands-on, security-minded and willing to learn. The ideal candidate has a strong foundation in IT, cloud or security and wants to develop into a broader SaaS, Cloud and AI Security Engineer.

• Enjoys troubleshooting complex technical problems and learning new platforms quickly.

• Takes ownership of issues while knowing when to seek guidance.

• Communicates clearly with technical and non-technical stakeholders.

• Has strong attention to detail and follows through on operational tasks.

• Is interested in emerging technologies, particularly cloud and AI security.

• Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

• Job: Engineering

• Job Family: TECHNOLOGY

• Share this job

Who we are:

• At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning opportunity is a chance for a personal breakthrough. We are the world's lifelong learning company. For us, learning isn't just what we do. It's who we are. To learn more: https://plc.pearson.com/ .

• Our Employee Experience