Senior Infrastructure and Cloud Engineer

SENIOR INFRASTRUCTURE AND CLOUD ENGINEER

Pogue Construction is strengthening its technology foundation as teams build new applications, introduce AI-enabled workflows, and evaluate where custom solutions can improve existing software processes. We are hiring a hands‑on engineer to build and operate the secure, reliable infrastructure those solutions depend on.

The Senior Infrastructure and Cloud Engineer works within the Infrastructure & Security team, not the AI development team. This role does not develop applications or AI models. It engineers and maintains Pogue’s Azure and Microsoft environment, applies approved infrastructure and security standards, and works with application teams to move new solutions into supportable production operation.

The engineer also provides hands‑on security implementation and incident‑response support. Security strategy, risk acceptance, and application decisions remain with their designated owners.

B achelor’s degree in computer science, Information Technology, or similar experience

7+ years of systems/infrastructure engineering in a multi‑site Microsoft environment spanning on‑premises and cloud, with deep Microsoft Azure and Entra .

• Build, configure, maintain, and improve Azure resources, Entra , Microsoft 365, Intune, servers, virtualization, storage, and related infrastructure to approved standards.
• Help implement and operate Azure landing‑zone components, including subscription and resource organization, access controls, network connectivity, policies, logging, and monitoring.
• Establish repeatable infrastructure deployment and configuration practices using the infrastructure‑as‑code approach selected by Pogue.
• Monitor availability, performance, capacity, configuration drift, and cost; investigate issues and recommend corrective action.
• Execute changes through documented change control, testing, and rollback practices.

• Partner with the AI and application teams to translate approved workload needs into infrastructure requirements without taking ownership of application development.
• Review infrastructure created by people, pipelines, or AI‑assisted tools for compliance with approved configuration, access, network, security, monitoring, and cost standards.
• Identify unowned, over privileged, publicly exposed, poorly documented, or unnecessary resources; remediate them or escape exceptions through the appropriate approval path.
• Support separate development and production environments and maintain clear ownership and lifecycle records for deployed resources.
• Complete the infrastructure and operations portion of production handoffs, including monitoring, alerting, support runbooks, backup and recovery requirements, dependencies, and a rollback or disablement path.

• Implement and maintain least privilege, MFA, Conditional Access, hardening, vulnerability remediation, logging, and other approved controls across the infrastructure estate.
• Operate assigned components of Pogue’s security stack, including Defendify, Crowd Strike, Netwrix, and applicable Microsoft Defender and Purview controls.
• Assist with incident containment, evidence preservation, recovery, and corrective actions under the direction of the designated incident or security lead.
• Maintain technical evidence needed for audits, insurance requests, and customer requirements.

• Maintain configuration records, architecture diagrams, dependency maps, runbooks, and resource ownership information.
• Support backup, restore testing, disaster recovery, and resilience work…