Cloud Infrastructure Engineer

About the Position

The Cloud Infrastructure Engineer is responsible for designing, deploying, managing, and optimizing BS&A Software’s hybrid infrastructure across Microsoft Azure and Azure Local (formerly Azure Stack HCI) to ensure high availability, security, resiliency, and operational efficiency. This role is focused on infrastructure engineering across cloud and on‑premises environments, including compute, storage, identity, backup and disaster recovery, network connectivity, and related platform services.

This position serves as the internal owner of Azure governance through Microsoft’s Cloud Adoption Framework (CAF), including management group design, subscription topology, policy assignments, and tagging standards. The Cloud Infrastructure Engineer configures and supports Azure services, Azure Local platforms, and core network and security infrastructure, including Palo Alto firewalls and Cisco network equipment, and supports migration, modernization, and ongoing operation of legacy and current workloads in hybrid environments.

The Cloud Infrastructure Engineer collaborates with security, infrastructure, and IT operations teams to implement secure, scalable, and supportable solutions that align with BS&A’s business objectives, operational requirements, and compliance expectations. This role also serves as the internal technical counterpart to third‑party infrastructure and network partners, ensuring designs, configurations, and handoffs are validated, documented, and supportable in‑house. The position requires strong hands‑on Azure and networking expertise, sound operational judgment, and the ability to work independently on complex technical assignments.

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field preferred.
• Microsoft Azure certifications such as Azure Administrator, Azure Solutions Architect, or other relevant cloud, networking, or security certifications are preferred.
• Equivalent combinations of education, training, and relevant experience may be considered in lieu of a degree.

• Minimum of 4 years of experience in cloud engineering, infrastructure engineering, systems administration, or network engineering, with a strong focus on Microsoft Azure and hybrid infrastructure.
• Hands‑on experience designing, deploying, and supporting Azure infrastructure, including Virtual Machines, Storage, Virtual Networks, backup and disaster recovery, monitoring, and identity services.
• Experience supporting hybrid environments that integrate on‑premises infrastructure with Azure, including Azure Local (formerly Azure Stack HCI), Windows Server, Hyper‑V, hyperconverged infrastructure, or comparable virtualization platforms preferred.
• Experience implementing and managing Microsoft’s Cloud Adoption Framework (CAF), including management groups, subscription structure, Azure Policy, and governance guardrails.
• Strong experience with enterprise networking, including routing, switching, VLANs, VPNs, DNS, load balancing, segmentation, and firewall policy management.
• Hands‑on experience administering and troubleshooting Palo Alto firewalls and Cisco network infrastructure.
• Experience designing and supporting Azure networking components, including Virtual Networks, VPN Gateways, Express Route, Network Security Groups, Azure Firewall, and hybrid connectivity.
• Experience implementing and supporting identity and access controls using Microsoft Entra , Conditional Access, RBAC, Privileged Identity Management, and hybrid identity integration.
• Experience supporting Azure Virtual Desktop (AVD), including host pools, session hosts, scaling, profile management, and security baselines, preferred.
• Working knowledge of Microsoft Intune and Windows Autopilot in enterprise environments, including endpoint compliance architecture, provisioning guardrails, and Conditional Access integration.
• Proficiency in scripting and automation using Power Shell and Azure CLI;
  Python experience is a plus.
• Experience with infrastructure standardization, repeatable deployment methods, and infrastructure‑as‑code (IaC) using tools such as Terraform, Bicep, or ARM…