Senior Infrastructure and Cloud Engineer

Job summary

The Senior Infrastructure and Cloud Engineer builds and operates secure, reliable Microsoft and Azure infrastructure supporting business applications and AI-enabled workflows; application and AI model development remain with other teams. The role covers Azure governance and production operations, infrastructure reviews and handoffs, security controls and incident-response support, cost and license management, and Tier 3 escalation across a multi-site environment.

Qualifications

• At least 7 years of systems or infrastructure engineering in a multi-site Microsoft environment spanning on-premises and cloud.
• Deep hands-on experience with Microsoft Azure and Entra ID.
• Strong administration skills in Entra ID, Microsoft 365, and Intune.
• Experience leading technical initiatives, coordinating work across teams, mentoring colleagues, and communicating priorities and risks.
• Experience with multi-office and job-site connectivity and endpoint management.
• Practical experience implementing security controls and supporting incident response.
• Ability to assess a newly deployed Azure workload and identify what is needed for secure production operations.
• Experience with scripting or repeatable configuration practices, change discipline, documentation, and collaboration with application teams.

Responsibilities

• Build, configure, maintain, and improve Azure, Entra ID, Microsoft 365, Intune, server, virtualization, and storage infrastructure.
• Implement and operate Azure landing-zone components, including resource organization, access controls, networking, policies, logging, and monitoring.
• Establish repeatable infrastructure deployment and configuration practices using the selected infrastructure-as-code approach.
• Monitor availability, performance, capacity, configuration drift, and cost; investigate issues and recommend corrective action.
• Review deployed workloads for compliance with approved security, access, networking, monitoring, and cost standards.
• Prepare production handoffs with monitoring, alerting, runbooks, backup and recovery requirements, dependencies, cost impacts, and rollback plans.
• Implement and maintain approved security controls, including least privilege, MFA, Conditional Access, hardening, vulnerability remediation, and logging.
• Support incident containment, evidence preservation, recovery, and corrective actions under the designated incident or security lead.
• Manage Azure budgets and tagging, and provide monthly cost and utilization reports to IT leadership and Finance.
• Manage Microsoft and security-tool licenses and renewal calendars; provide technical input on vendor quotes, SOWs, and SLAs.
• Maintain configuration records, architecture diagrams, dependency maps, runbooks, and resource ownership information.
• Support backup, restore testing, disaster recovery, and resilience work.
• Serve as a Tier 3 escalation point for infrastructure, identity, Microsoft 365, and Azure issues.
• Coordinate with vendors and application teams, guide support and field teams, and document recurring fixes as standards.

Skills

Certifications

Degrees

Industry

Relocation