Senior IT System Engineer - Microsoft Cloud & Security

About the role

Karbontürk, a company focused on activated carbon products and services for water treatment, air purification and food and beverage processes, is looking for a Senior IT System Engineer. The role manages and optimizes the Microsoft cloud infrastructure, identity and access management, endpoint security and enterprise IT systems, with a focus on Microsoft Intune, Entra ID, Microsoft 365, Purview, Defender XDR and Microsoft Sentinel.

Key responsibilities

• Intune: manage Windows device enrollment, Autopilot, compliance and configuration policies, security baselines, BitLocker, LAPS, Windows Update Rings and app deployments, and troubleshoot enrollment issues.
• Entra ID: manage user lifecycles, dynamic groups, Conditional Access, MFA, Identity Protection, app registrations, enterprise applications and privileged access.
• Microsoft 365: manage Exchange Online mailboxes, SPF/DKIM/DMARC, SharePoint, Teams, licenses and data migrations.
• Purview: monitor USB and removable storage use, insider risk, retention policies and eDiscovery.
• Defender XDR: onboard devices, migrate from the existing antivirus, test ASR and Controlled Folder Access, investigate incidents and coordinate with Intune.
• Sentinel: manage Azure subscriptions and costs, deploy Log Analytics, build KQL queries and workbooks, correlate Purview and insider risk signals, and migrate PowerShell jobs to Azure Automation Runbooks.
• General duties: follow change management, maintain documentation, prepare licensing and Azure cost analyses, deliver security awareness and handle support cases with external vendors.

Required profile

• At least 5 years of total experience in enterprise IT infrastructure.
• At least 3 years of hands-on experience managing Windows devices with Microsoft Intune.
• Experience in manufacturing or industrial plant environments, and in managing a single multi-domain tenant in a multinational structure (Turkey-Germany), is preferred.
• Ability to translate KVKK, GDPR and ISO 27001 requirements into technical controls.

Required skills

• Microsoft Intune, Entra ID, Microsoft 365, Exchange Online, SharePoint, Teams, Purview, Defender XDR and Microsoft Sentinel.
• PowerShell, Microsoft Graph SDK, KQL and Azure Automation Runbooks.
• Windows Server, Active Directory, Group Policy, DNS, TCP/IP, site-to-site VPN, PKI/SAN and basic Linux.
• Preferred certifications: MD-102, SC-300, SC-200, SC-401, MS-102, AZ-104.