Cloud Infrastructure Engineer II

Heartland Technology Group
Position Summary

The Cloud Infrastructure Engineer II role will develop, implement, and support related services and solutions for consulting clients. This position will build a customer-focused relationship with clients to identify business challenges and develop specifications and requirements to arrive at the best solution. The role will develop specializations around technology sets such as platform, infrastructure, and security and around multiple target customer profiles such as K-12, higher education, SMB, enterprise/commercial, and/or government.

• Work as a member of the HBS Cloud Architecture Team (CAT) as an experienced contributor that provides consultative and proactive project support to Heartland Business Systems' (HBS) account base.
• Collaborate across multiple internal teams to ensure successful delivery and timely execution of the scope of work.
• Contribute to product selection, configuration standards, and best practices, and educate team members on these products and services to enhance the sales process.
• Provide support, maintenance, and administration for customer environments and review for other potential concerns or enhancement opportunities.
• Assist with the development and implementation of the Azure cloud security architecture for protecting PHI/PII/PCI data deployed into various cloud, hybrid, HBS Cloud and on-premises systems.
• Implement and manage security architectures for cloud/hybrid systems.
• Assist in the process to assess, develop, implement, optimize, and document security technologies and processes, data protection, cryptography, key management, identity, and access management (IAM) within SaaS, IaaS, PaaS, and other cloud environments.
• Work in and always model a positive team atmosphere between regional and virtual practices while maintaining a professional and respectful demeanor.
• Create and maintain detailed documentation of past projects to potentially provide data for time estimates and project scopes for new related projects.
• Obtain and maintain current vendor/industry specific certifications and stay current on new products and solutions by utilizing networks of resources.
• Minimum of 1,450 hours (billable + presales) per fiscal year prorated based on start date. These charge hour requirements will be balanced against professional development and on-the-job training.

• 3+ years of experience in a technical-related field.
• Experience installing and supporting Microsoft enterprise products, data center networking, or software development / scripting / automation.

• Experience working as a consultant.
• Azure AD (AAD / Entra ), including Azure AD Connect (AADC), SAML SSO and OpenID Connect (OIDC), Conditional Access, Multi‑Factor Authentication (MFA), Self‑Service Password Reset (SSPR), Password Protection, and Privileged Identity Management (PIM).
• Virtual Machines and Azure Virtual Desktop (AVD)
• Networking and DNS, including Network Security Groups (NSGs), VPN Gateways, Traffic Managers, Load Balancers, Private Link, and Express Route.
• Storage
• Azure Backup, Azure Site Recovery
• Pricing & Cost Management
• Experience implementing and designing systems‑based solutions with a focus on the cloud.
• IaaS, PaaS, and SaaS.
• Power Shell, Python, or other scripting and development background.
• Experience with developing and maintaining security architecture for PHI/PII/PCI data in various cloud, hybrid‑cloud, HBS Cloud and on‑premises systems.
• Azure Stack HCI
• Active Directory (AD) Domain Services (ADDS)
• Defender for Office 365 (MDO / M365D)
• Defender for Identity (MDI / AATP)
• Defender for Cloud
• Defender for Cloud Apps (MCAS / MDCA)
• Defender for Endpoint (MDfE / MDATP) / Defender for Severs
• Purview (Data Loss Prevention / DLP, Information Protection / AIP)
• Secure Score
• Intune
• Thycotic / Delinea Secret Server Cloud (SSC) deployment and configuration.
• Microsoft Exchange
• Linux
• Cisco (Hyperflex, Nexus, UCS)
• HPE Nimble, HPE Pro Liant
• Dell Power Edge
• Nutanix
• Software Defined Networking (SDA, SD-WAN)
>

Microsoft 365, Exchange Online, SharePoint, One Drive, and Teams.
• Connect Wise and Hudu.