Senior Systems Engineer

Job Description

As Luxury Escapes continues to grow, so does the technology that supports it. We’re looking for a Senior Systems Engineer to take technical ownership of our corporate systems, including identity, devices, Azure and the network across our offices and retail stores. 

You’ll report to the Associate Director of IT Operations and join a small team split between Sydney and Melbourne. You’ll be solving real problems, building reliable systems, and being the go-to technical expert in the room, this is a great opportunity to grow your career in a fast-moving travel tech company. We all work the service desk, cover for each other, and you’ll also work closely with our Information Security team on ISO 27001. 

What You'll Do

• Manage identity and access in Microsoft Entra ID, including SSO, SCIM provisioning, Conditional Access, PIM and user lifecycle automation, and bring more of our business systems onto SSO. 
• Look after our Fortinet network across the Sydney and Melbourne offices and our retail stores. That includes firmware updates, firewall rules and changes, backups, monitoring, VPN, Wi-Fi and SD-WAN, and setting up new sites. 
• Manage our Windows devices in Intune and help support our Macs in Jamf Pro, including patching and vulnerability management with NinjaOne and Microsoft Defender. 
• Look after our Azure environment and Microsoft 365 security settings, and lead the move off AD FS to Entra cloud authentication. 
• Improve our security posture hands-on, for example by tightening Conditional Access policies, rolling out attack surface reduction rules and fixing penetration test findings. 
• Be the technical escalation point for security alerts and incidents, working with our Information Security team. 
• Put in place and evidence the technical controls for our ISO 27001:2022 certification. 
• Pick up service desk requests with the rest of the team, and help automate onboarding, offboarding, and access requests. 
• Work with our vendors and partners, including our Fortinet partner for escalations and purchasing. 
• Get to the root cause of complex issues across systems and fix them properly. 
• Share what you know with the team through documentation and hands-on mentoring. 

Qualifications

Technical depth 

• Strong experience with Microsoft Entra ID, including Conditional Access, PIM, SSO and automated provisioning. 
• Hands-on experience running Fortinet FortiGate firewalls across multiple sites (firmware upgrades, policies, VPN, SD-WAN, Wi-Fi). 
• Experience managing Windows devices with Intune. Some macOS management experience (Jamf Pro or similar) is a plus. 
• Experience administering and securing Microsoft 365 and Azure, including Microsoft Defender. 
• Practical experience implementing controls for ISO 27001, SOC 2 or a similar framework. 
• Good PowerShell skills. Experience with Microsoft Graph is a bonus. 

How you work 

• You communicate clearly with both technical and non-technical audiences, and you’re comfortable providing recommendations backed by solid analysis. 
• You enjoy lifting the people around you, whether that’s mentoring a junior, sharing knowledge, or raising the technical bar through good documentation and review. 
• You stay calm and structured under pressure, particularly during incidents when clear thinking matters most. 
• You take ownership end-to-end. You deliver reliably, flag risks early, and hold yourself to a high standard with minimal oversight. 
• You’re proactive about identifying problems before they escalate, and you balance thoroughness with pragmatism. 
• You don’t mind picking up service desk tickets when the queue needs it. 
• You’re OK with the occasional after-hours change window or incident call, and the odd trip to our Melbourne office and retail stores. 

We value experience and practical know-how over certifications. If you’ve built and run these systems in the real world, we want to hear from you. 

Nice to have 

• Fortinet (FCP or NSE 4+) or Microsoft certifications such as SC-300 or MD-102. 
• Experience with AWS or GCP access and security. 
• Experience with Microsoft Defender XDR, or working with a SOC or managed security provider. 
• Experience with SASE or zero trust network access, such as FortiSASE. 
• Experience with identity governance (IGA) or SaaS management tools. 
• Familiarity with compliance automation platforms like Vanta. 

Additional Information

What's in it for you?

We consider our people one of our most important assets, and we want our team to love their working lives! When you work for Luxury Escapes, you can look forward to:

• Excellent Remuneration package
• 20% discount on Luxury Holidays
• Breakfast and lunch are provided 5-days a week
• Health and Well-being programs
• Annual Hackathons!
• 1/2 day birthday bonus leave
• A super collaborative team that enjoys creating great platforms

If you’re interested in the role but don't check every box, apply anyway, we’d love to hear from you!

We embrace diversity in our people and make hiring decisions based on your experiences and skills. We do not discriminate based on gender identity, religion, race, national origin, sexual orientation, age, marital status, or disability status. You'll find a collaborative, inclusive, and respectful workplace here at Luxury Escapes, and we are proud to celebrate who you are. Please let us know if you require any reasonable adjustments during the interview.

As a 2026 Circle Back Initiative employer, we're committed to responding to every applicant.