Shiseido Regional IT Operations Officer

Role & Responsibilities

• Manage service delivery across the APAC region, primarily for Microsoft 365, Active Directory, DNS, and VPN.
• Design and implement Microsoft 365, IT infrastructure, VPN solutions, and operational security frameworks.
• Configure Exchange Online mail flow rules, anti-spam policies, mailbox permissions, and hybrid mail setups.
• Manage Microsoft Teams policies, voice configurations, federation settings, and app permissions.
• Administer SharePoint and OneDrive site collections, sharing policies, storage quotas, and data governance.
• Deploy Intune and Endpoint Manager device compliance and app protection policies, and manage Windows Autopilot provisioning.
• Develop PowerShell scripts for bulk user provisioning, license assignment, and reporting across Microsoft 365 services.
• Configure Microsoft Purview DLP policies, sensitivity labels, retention policies, and audit logging.
• Configure Prisma Access SWG URL filtering, SSL inspection, bandwidth control, and threat protection policies.
• Design Prisma Access ZTNA application segmentation policies, connector deployments, and access control rules.
• Integrate Strata Cloud Manager with Azure AD for SAML-based SSO and conditional access policies.
• Create granular access policies based on user identity, device posture, and location.
• Use Strata Cloud Manager for troubleshooting, including packet capture analysis and fault isolation across Prisma Access and related network components.
• Combine Microsoft 365 and Prisma Access signals to implement conditional access policies enforcing zero-trust principles.
• Monitor Microsoft Defender for Office 365 and Prisma Access Threat Insights for malware, phishing, and data exfiltration attempts.
• Conduct regular security assessments and penetration testing of cloud and VPN configurations.
• Ensure alignment with ISO 27001, NIST, and GDPR/PDPA compliance frameworks.
• Provide Tier 2/3 support for escalated Microsoft 365 and Prisma Access incidents.
• Maintain detailed runbooks, architecture diagrams, and change logs for all configurations.
• Collaborate with SOC and NOC teams on incident response and threat hunting.
• Identify opportunities to optimize services and enhance the user experience.
• Implement automation and self-service solutions where applicable.
• Perform additional tasks assigned by supervisors or management as needed.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• Proficiency in PowerShell, JSON/YAML for policy scripting, and cloud networking concepts.
• MS-500, SC-300, Prisma Access SASE Administrator (PASA), or PCNSA certifications are preferred but not mandatory.
• Experience managing services across diverse environments, including corporate offices, warehouses, and manufacturing plants.
• Ability to travel within the APAC region as required.

Skills

Experience

3–5 years of hands-on experience with Microsoft 365 and Palo Alto Prisma Access technologies.

Education

Bachelor’s degree in Information Technology, Computer Science, or a related field.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.