주요업무
Microsoft 365 Platform Engineering
• Exchange Online: Configure mail flow rules, anti-spam policies, mailbox permissions, and hybrid mail setups.
• Microsoft Teams: Manage Teams policies, voice configurations, federation settings, and app permissions.
• SharePoint & OneDrive: Administer site collections, sharing policies, storage quotas, and data governance.
• Intune & Endpoint Manager: Deploy device compliance policies, app protection policies, and manage Windows Autopilot provisioning.
• PowerShell Automation: Develop scripts for bulk user provisioning, license assignment, and reporting across Microsoft 365 services.
• Security & Compliance (Microsoft Purview): Configure DLP policies, sensitivity labels, retention policies, and audit logging.
Palo Alto Prisma Access & Secure Access Management
• Prisma Access SWG: Configure URL filtering, SSL inspection, bandwidth control, and threat protection policies.
• Prisma Access ZTNA: Design application segmentation policies, connector deployments, and access control rules.
• Authentication & Identity Integration: Integrate Strata Cloud Manager with Azure AD to enable SAML-based SSO and enforce conditional access policies.
• Policy Management: Create granular access policies based on user identity, device posture, and location.
• Monitoring & Troubleshooting: Utilize Strata Cloud Manager for troubleshooting, including packet capture analysis and fault isolation across Prisma Access and related network components.
Security & Compliance
• Implement conditional access policies by combining Microsoft 365 and Prisma Access signals to enforce zero-trust principles.
• Monitor Microsoft Defender for Office 365 and Prisma Access Threat Insights for malware, phishing, and data exfiltration attempts.
• Conduct regular security assessments and penetration testing of cloud and VPN configurations.
• Ensure alignment with ISO 27001, NIST, and GDPR/PDPA compliance frameworks.
Operational Support & Documentation
• Provide Tier 2/3 support for escalated incidents related to Microsoft 365 and Prisma Access services.
• Maintain detailed runbooks, architecture diagrams, and change logs for all configurations.
• Collaborate with SOC and NOC teams on incident response and threat hunting activities.
Continuous Improvement
• Identify opportunities to optimize services and enhance the overall user experience.
• Implement automation and self-service solutions where applicable.
Ad hoc Support
• Perform additional tasks assigned by supervisors or management as needed.