Enterprise Infrastructure and Cloud Engineer

Honigman is a premier business law firm, based in Michigan with an international practice. Honigman is consistently recognized as one of the 101 Best and Brightest Places to Work, we earned this recognition by recruiting attorneys and staff members with outstanding credentials. Currently, we are looking for a Enterprise Infrastructure and Cloud Engineer in our Detroit or Chicago office. In addition to our Detroit and Chicago offices, we have offices in Grand Rapids, Bloomfield Hills, Ann Arbor, Kalamazoo, Lansing, and Washington D.C. With more than 350 attorneys working in 60 different areas of concentration, Honigman provides timely and cost-effective counsel to clients in numerous industries.

SUMMARY

The Enterprise Infrastructure and Cloud Engineer is responsible for the design, administration, security, reliability, and continuous improvement of the firm’s enterprise infrastructure and identity platforms. This position supports a hybrid technology environment that includes Microsoft Azure, Microsoft Entra , Microsoft 365 identity services, Windows Server, Active Directory, virtualization, storage, monitoring, disaster recovery, and related infrastructure services.

The engineer will administer identity and access management capabilities, including multifactor authentication, single sign-on, enterprise application integrations, authentication methods, Microsoft Entra Conditional Access policies, privileged access, and identity lifecycle controls. The position will work closely with Information Security, application owners, service desk personnel, vendors, and other IT teams to provide secure, reliable, and supportable technology services.

This individual is expected to independently troubleshoot complex technical issues, lead infrastructure initiatives, maintain accurate technical documentation, and apply automation and standardized operational practices wherever practical. Strong communication, customer service, risk awareness, and disciplined change management are essential to success in this role.

RESPONSIBILITIES

Identity and Access Management

• Administer Microsoft Entra  hybrid identity services, including authentication methods, enterprise applications, and synchronization with on-premises Active Directory.
• Design, implement, test, document, and maintain Microsoft Entra Conditional Access policies.
• Administer multifactor authentication, single sign-on, passwordless authentication, authentication strengths, self-service password reset, and related authentication controls.
• Integrate cloud and on-premises applications with Microsoft Entra  supported authentication and federation standards, including SAML, OAuth 2.0, OpenID Connect, and application proxy technologies where applicable.
• Configure and support enterprise application registrations, service principals, certificates, secrets, API permissions, and administrative consent workflows.
• Manage identity assignments using security groups, Microsoft 365 groups, application roles, and role-based access control.
• Periodically review privileged roles, application assignments, authentication methods, inactive identities, guest accounts, service accounts, and policy exclusions.
• Investigate authentication failures, risky sign-ins, access denials, account compromise indicators, and Conditional Access results using Microsoft Entra sign-in and audit logs.
• Maintain emergency-access procedures and ensure that identity-policy changes are tested, documented, and recoverable.
• Work with Information Security and application owners to apply least-privilege, Zero Trust, and separation-of-duties principles.

Cloud and Enterprise Infrastructure

• Administer infrastructure services hosted in Microsoft Azure and the firm’s data centers, including…