A senior hands-on systems & cloud engineer working two days per week (permanent part-time) to finish, run and harden DMA Global's internal Microsoft estate — Entra ID, Intune, Conditional Access, PIM, Defender, Autopilot/Apple Business Manager — plus AWS workforce access via IAM Identity Center, with strong documentation and audit obligations.
DMA Global is seeking a senior, hands-on Systems & Cloud Engineer to complete and operate the internal technology environment on a Permanent part-time basis, initially two days per week, with flexibility for additional hours during rollout, major changes or incidents.. This is a separate internal-systems role focused on the secure environment through which people work. The environment is small in endpoint count but carries serious identity, access, security and audit requirements. You will take a substantially designed Microsoft estate, finish outstanding deployment work, validate and improve the controls, document the environment properly and provide reliable senior ownership. This is a permanent part-time position, initially two days per week. The successful candidate will have a regular working pattern, with agreed flexibility for additional hours during device rollout, material system changes or significant incidents.
Key responsibilities
Complete Windows Autopilot and Apple Business Manager enrolment, UAT and issue of the remaining corporate devices
Review and operate Entra ID, Intune, Conditional Access, PIM, Microsoft Defender and Microsoft 365 administration
Validate Owner / Administrator / User access, break-glass, privileged elevation, joiner-mover-leaver and recovery controls
Finalise role-based endpoint, web-filtering and application-control policies for Windows and macOS
Support AWS workforce-access governance through IAM Identity Center, including permission sets, logs and retirement of superseded human IAM access
Maintain the as-built design, runbooks, control evidence, exception register and remediation backlog
Triage and escalate security or operational events during the agreed service window and help define any required MSP/MDR/SOC support
Provide senior escalation and clear advice to the Owner, CTO, COO, Risk and Compliance and the development team
About you
Strong hands-on experience with Entra ID, Intune, Conditional Access, PIM and Microsoft 365
Microsoft Defender for Endpoint and secure Windows/macOS management
Windows Autopilot and Apple Business Manager experience
AWS Organizations and IAM Identity Center experience, including least-privilege permission design
Working knowledge of SAML, OIDC and SCIM
Experience with the ASD Essential Eight or an equivalent security-control framework
Clear documentation skills across runbooks, as-built records, test evidence and executive reporting
Sound judgement, low ego and the confidence to work directly with senior leadership in a regulated environment
National police check, Australian work rights and appropriate professional insurance required