{"id":3600741,"url":"https://alion.io/job/karbon-tuerk-senior-it-system-engineer","title":"Senior IT System Engineer","company":{"id":3849060,"name":"Karbon Türk","domain":"karbonturk.com","url":"https://alion.io/company/karbonturk","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Talentics","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Istanbul, Turkey"],"countries":["TR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Microsoft Teams","optional":false},{"name":"OneDrive","optional":false},{"name":"PKI","optional":false},{"name":"Power Automate","optional":false},{"name":"PowerShell","optional":false},{"name":"SharePoint","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-02T08:47:50Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-06T09:14:56Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Who We Are\nKarbontürk is a leading company at the forefront of sustainability and environmental solutions, specializing in the activated carbon market. We provide high-quality activated carbon products and services to global corporate clients, delivering solutions across a wide range of industries, including water treatment and purification, air filtration and purification, and food & beverage processes.\nOur solutions play a vital role in ensuring safe drinking water, managing wastewater, maintaining industrial and commercial air quality, and enhancing the quality of food and beverages through processes such as sugar refining, oil purification, beverage clarification, and alcohol production. By effectively removing contaminants, odors, and impurities, we help clients achieve operational excellence while supporting environmental sustainability.\nAt Karbontürk, our mission is to drive innovation, enhance operational efficiency, and contribute to global sustainability efforts. With cutting-edge solutions, technical expertise, and an international perspective, we are committed to setting new industry standards and creating long-term value for our clients worldwide.\nWe are seeking a Senior IT System Engineer to manage and optimize our Microsoft cloud infrastructure, identity and access management, endpoint security, and enterprise IT systems. The role will focus on Microsoft Intune, Entra ID, Microsoft 365, Purview, Defender XDR, and Microsoft Sentinel, ensuring secure, compliant, and efficient IT operations across the organization. The successful candidate will drive cloud security, digital workplace management, automation, and continuous improvement while supporting the organization's IT infrastructure and cybersecurity requirements.\nQualifications\nMinimum 5 years of total experience in enterprise IT infrastructure.\nMinimum 3 years of hands-on experience managing Windows devices with Microsoft Intune.\nStrong knowledge of Microsoft Entra ID administration, including Dynamic Groups, Conditional Access, Identity Protection, App Registrations, Enterprise Applications, and role-based access control.\nExperience in Microsoft 365 and Exchange Online administration, including active involvement in email migration and cutover projects.\nHands-on experience implementing Microsoft Purview, including DLP, Endpoint DLP, Insider Risk Management, Retention Policies, and eDiscovery.\nExperience onboarding and managing Microsoft Defender XDR, including Defender for Endpoint and Defender for Office 365.\nExperience deploying and operating Microsoft Sentinel / Log Analytics, including data connectors, KQL queries, analytics rules, and workbooks.\nStrong experience with hybrid IT environments, including on-premises Active Directory and Microsoft Entra ID.\nHands-on experience with PowerShell, Microsoft Graph PowerShell SDK, Exchange Online PowerShell, PnP PowerShell, and KQL.\nGood understanding of Zero Trust architecture, Conditional Access, MFA, and modern identity and endpoint security practices.\nKnowledge of Windows Server, Active Directory, Group Policy, DNS, TCP/IP, VLANs, site-to-site VPN, certificate management (PKI/SAN), and basic Linux administration.\nAbility to translate KVKK, GDPR, and ISO 27001 requirements into technical security and compliance controls.\nExperience in manufacturing or industrial plant environments, particularly regarding IT/OT separation, is preferred.\nExperience managing a single multi-domain tenant in a multinational structure, particularly Turkey-Germany, is preferred.\nRelevant Microsoft certifications such as MD-102, SC-300, SC-200, SC-401, MS-102, and AZ-104 are preferred.\nComputer Skills\nMicrosoft Intune: Windows enrollment, Entra Join, Autopilot, Compliance and Configuration Policies, Security Baselines, BitLocker, Windows LAPS, Windows Hello for Business, Windows Update Rings, Win32 and Microsoft 365 Apps deployment, browser management.\nMicrosoft Entra ID: Dynamic Groups, Conditional Access, MFA, Authentication Methods, Identity Protection, Password Protection, App Registrations, Enterprise Applications, Graph permissions, Entra Kerberos, and privileged access management.\nMicrosoft 365: Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Universal Print, email flow management, SPF/DKIM/DMARC, and license management.\nMicrosoft Purview: Endpoint DLP, Device Control, Insider Risk Management, Activity Explorer, Retention Policies, eDiscovery, and Audit.\n Microsoft Defender XDR: Defender for Endpoint, Attack Surface Reduction (ASR), Controlled Folder Access, EDR, Defender for Office 365, Anti-Phishing, Safe Links, Safe Attachments, incident and alert management, and Advanced Hunting.\nAzure & Microsoft Sentinel: Azure subscription and resource management, Log Analytics, data connectors, KQL, analytics rules, workbooks, automation playbooks, Azure Arc, and Azure Automation Runbooks.\nScripting & Automation: PowerShell 7, Microsoft Graph PowerShell SDK, Exchange Online PowerShell, PnP PowerShell, and KQL.\n IT Infrastructure: Windows Server, Active Directory, Group Policy, DNS, TCP/IP, VLANs, site-to-site VPN, certificate (PKI/SAN) management, and basic Linux.\nCompetencies\nStrong analytical and problem-solving skills, with the ability to identify root causes through log, sign-in, and security alert analysis.\nAbility to assess potential impacts before implementing changes, prepare backups, and establish rollback plans.\nA structured and methodical approach to system configuration, testing, verification, and phased deployment.\nAbility to communicate technical topics clearly to management and end users, including multilingual users.\nStrong awareness of KVKK, GDPR, data protection, and privileged access security requirements.\nAbility to manage Microsoft licensing and Azure consumption within budget and evaluate alternative solutions.\nStrong documentation skills, including maintaining technical configurations, procedures, runbooks, decisions, and lessons learned.\nAbility to follow Microsoft platform updates, security developments, and technology deprecation announcements.\nStrong coordination and communication skills when working with internal teams and external service providers.\nResponsibilities\nMicrosoft Intune - Windows Endpoint Management\nManage Windows device enrollment through Entra Join and Intune, including Autopilot configuration and device naming standards.\nCreate, test, and deploy Compliance Policies, Configuration Profiles, and Settings Catalog policies through pilot groups and phased rollouts.\nManage Windows Security Baselines, BitLocker, Windows Firewall, Windows Hello for Business, and local password policies.\nControl local administrator accounts using Windows LAPS and Accounts CSP.\nManage Windows Update Rings and Microsoft 365 / Win32 application deployments.\nConfigure OneDrive Known Folder Move, Edge/Chrome browser policies, and Trusted Certificate profiles.\nManage printer deployment through Universal Print and Intune Printer Provisioning.\nTroubleshoot device enrollment failures and monitor device compliance reports.\nMicrosoft Entra ID - Identity & Access Management\nManage the user lifecycle, including onboarding and offboarding, account deactivation, and session/token revocation.\nDesign and manage license- and service-plan-based Dynamic Groups.\nImplement and manage Conditional Access policies covering legacy authentication, MFA, risky sign-ins, compliant devices, and sign-in frequency.\nTest Conditional Access policies in Report-only mode before production deployment.\nManage MFA, Authentication Methods, Identity Protection, and Password Protection settings.\nProtect break-glass accounts and manage privileged role assignments based on the principle of least privilege.\nManage App Registrations, Enterprise Applications, Graph API permissions, and SSO integrations.\nConfigure Azure Files authentication with Entra Kerberos.\nMicrosoft 365\nManage Exchange Online mailboxes, shared and room mailboxes, distribution lists, and mailbox restoration.\nManage SPF, DKIM, and DMARC configurations for karbonturk.com and carbomax.de, and troubleshoot email delivery issues using Message Trace.\nManage SharePoint Online sites, libraries, permission structures, sharing restrictions, and site lifecycle processes.\nPlan and execute OneDrive-SharePoint data migrations.\nManage Microsoft Teams, Universal Print, email signature solutions, and Microsoft 365 license assignments.\nGovern notifications, Power Automate flows, and integrated applications.\nMicrosoft Purview - Data Security & Compliance\nMonitor USB and removable storage usage through Endpoint DLP and Device Control in Audit mode.\nManage Insider Risk Management policies, Collection Policies, thresholds, and related alerts.\nConfigure retention policies and labels in accordance with KVKK and ISO 27001 requirements.\nConduct eDiscovery (Standard) and Audit searches based on documented and authorized requests.\nPrepare and present data leakage risk reports to management using Activity Explorer and analytics.\nMicrosoft Defender XDR\nOnboard Windows devices to Defender for Endpoint through Intune, GPO, or Security Settings Management.\nExecute the migration from the existing antivirus solution to the Microsoft Defender platform.\nTest Attack Surface Reduction (ASR) rules and Controlled Folder Access in Audit mode before enforcement, ensuring compatibility with industrial software such as CAD/CAM and \nPLC applications.\nManage Defender for Office 365 policies, including Anti-Phishing, Safe Links, and Safe Attachments.\nInvestigate security incidents and alerts and perform incident response activities, including device isolation and account containment.\nEstablish a single source of authority for each security setting between Intune and Defender.\nAzure & Microsoft Sentinel (SIEM)\nManage Azure subscriptions, resource groups, and associated costs.\nDeploy Log Analytics workspaces and onboard Microsoft Sentinel through the Defender portal.\nIntegrate relevant data sources, including Microsoft 365 Audit, Defender XDR alerts, Azure Activity, and Entra ID Protection, while controlling data ingestion costs.\nDevelop analytics rules, hunting queries, and workbooks using KQL.\nCorrelate Purview and Insider Risk Management signals for security monitoring.\nDefine and apply log retention periods in accordance with KVKK and ISO 27001 audit requirements.\nMigrate scheduled PowerShell jobs to Azure Automation Runbooks using Managed Identity.\nIntegrate Linux and server resources into security monitoring through Azure Arc.\nGeneral Responsibilities\nApply system and security changes through appropriate change management procedures, pilot testing, and rollback planning.\nMaintain up-to-date technical documentation, system configurations, decisions, and operational procedures.\nPrepare Microsoft licensing and Azure cost analyses and present budget proposals to management.\nDeliver end-user communications and security awareness activities.\nManage Microsoft support cases and coordinate with external vendors, including DNS/hosting providers and software partners.\nPerform other duties assigned by the IT Manager.\nOpportunity Statement\nThe only criterion evaluated in recruitment and employment is suitability for the job; equal opportunity is provided without any discrimination.","description_format":"text","description_chars":11288,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-11-02T08:47:50Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":36,"reasons":["conf:1","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/karbon-tuerk-senior-it-system-engineer","json_url":"https://alion.io/job/karbon-tuerk-senior-it-system-engineer.json","meta":{"generated_at":"2026-11-06T10:48:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19531,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3849060},"rest":"https://alion.io/mcp/rest/get_company?id=3849060"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkarbon-tuerk-senior-it-system-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkarbon-tuerk-senior-it-system-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkarbon-tuerk-senior-it-system-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/karbon-tuerk-senior-it-system-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkarbon-tuerk-senior-it-system-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3600741}},{"tool":"search_jobs","arguments":{"company":"karbonturk.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3600741},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}