Cambio is a software research and development center for Cambio Healthcare Systems AB, Sweden, currently with over 300 software engineering professionals in Sri Lanka designing and developing cutting edge Healthcare Solutions using state of the art of technologies to cater to our prestigious clientele.

We are seeking a skilled and proactive System Engineer (Enterprise Applications and Azure Identity Administrator) to manage and support our enterprise applications and identity configurations within Microsoft Azure. This role is responsible for overseeing application registrations, implementing secure authentication mechanisms, and ensuring consistent access controls across the organization. You will collaborate with cross-functional teams to deploy new applications, automate workflows, and maintain compliance with organizational policies.

Key Responsibilities:

• Manage existing enterprise applications and app registrations within Microsoft Azure.
• Research, deploy, and maintain new enterprise applications to align with evolving business requirements.
• Configure and oversee app settings including access control, SSO, user assignment, API permissions, and security settings.
• Monitor, troubleshoot, and update app configurations to ensure adherence to organizational policies and best practices.
• Develop and maintain automation scripts and runbooks using PowerShell and PnP.PowerShell.
• Leverage Microsoft Graph API for querying, reporting, and integration purposes.
• Design and maintain workflows using Power Automate and Logic Apps to streamline processes.
• Administer and enforce policies using Entra ID, including Conditional Access and Microsoft Purview.
• Provide support and maintenance for Microsoft 365 services including Exchange Online and the M365 Admin Portal.
• Collaborate with security, compliance, and IT teams to ensure systems meet organizational governance standards.

Qualifications:

Required:

• 3+ years of experience with Azure App Registrations and Enterprise Applications.
• Proficiency in PowerShell and PnP.PowerShell scripting.
• Hands-on experience with Microsoft Graph API.
• Knowledge of Power Automate and Logic Apps.
• Solid understanding of Entra ID (formerly Azure AD), including Conditional Access and Microsoft Purview.
• Experience with Microsoft 365 administration, especially Exchange Online and M365 Admin Portal.
• Strong analytical, troubleshooting, and documentation skills.

Preferred:

• Microsoft certifications such as AZ-104, SC-300, or MS-100.
• Experience with ITSM tools or automation platforms.
• Familiarity with identity governance frameworks and security best practices.