Sr. Cloud Systems Administrator

Senior Cloud Systems Administrator

New York, NY

• Design, deploy, maintain, and continuously improve Cipriani’s Microsoft Azure cloud infrastructure across corporate and property environments
• Support enterprise-scale Azure architecture aligned with Microsoft Cloud Adoption Framework and Well-Architected principles, including Management Groups, subscriptions, Azure Policy, RBAC, naming standards, tagging, resource organization, and platform automation
• Manage and optimize Azure services including Azure App Services, Azure Functions, Azure SQL, Azure Storage, Azure Redis, Azure Service Bus, Azure Key Vault, Azure Monitor, Application Insights, Log Analytics, and related services
• Define and support compute and platform patterns including virtual machines, VM scale sets, App Services, Functions, Azure Container Registry, and AKS/Kubernetes where applicable
• Design, configure, and maintain Azure networking, including Virtual Networks, Private Endpoints, Network Security Groups, DNS, peering, routing, gateways, firewalls, VPNs, and hybrid connectivity
• Support secure network topologies such as hub-and-spoke or Virtual WAN, including Azure Firewall, Application Gateway/WAF, Private Link, Express Route/VPN, and DDoS Protection where needed
• Implement scalable, resilient, secure, and cost-effective cloud architectures aligned with business, security, and operational requirements
• Maintain clear architecture documentation, cloud diagrams, technical standards, support runbooks, and knowledge base materials

• Support cloud migration and modernization efforts across on-premises-to-Azure, cloud-to-cloud, hybrid, and legacy application environments
• Participate in discovery and assessment activities including workload inventory, dependency mapping, application readiness, rehost/replatform/refactor recommendations, and migration wave planning
• Support cutover execution and post-migration hypercare, including replication monitoring, test migrations, rollback planning, stakeholder communication, and stabilization
• Support Azure data and analytics workloads, including Azure Data Factory, Azure Databricks, Azure SQL, and related data movement or processing platforms
• Support emerging Microsoft cloud initiatives, including Azure OpenAI, Copilot readiness/governance, automation, analytics, and business intelligence workloads where applicable

• Implement and maintain cloud security best practices, least-privilege access, secure infrastructure patterns, and identity-based access models
• Administer Microsoft Entra /Azure AD, including Conditional Access, Privileged Identity Management, RBAC, app registrations, enterprise applications, hybrid identity, Entra Connect/Cloud Sync, and access governance
• Support Zero Trust models and security baselines across users, devices, applications, and cloud resources
• Configure and support Azure security services such as Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, Defender XDR integrations, Key Vault, and secure score improvement initiatives
• Support vulnerability remediation, security monitoring, patching, access reviews, audit evidence collection, and compliance initiatives
• Support compliance requirements related to hospitality, payments, privacy, and enterprise technology, including PCI-DSS, SOC 2, ISO 27001, NIST, GDPR, HIPAA, HITRUST, or similar standards where applicable

• Build, maintain, and improve Infrastructure as Code using Terraform, Bicep, ARM templates, or similar tools;
  Terraform experience is preferred
• Create reusable modules, policy-as-code, deployment standards, and coding practices that improve consistency and reduce manual work
• Build, maintain, and enhance CI/CD pipelines using Azure Dev Ops and/or Git Hub Actions, including environment gates, drift detection, rollback support, and pre-deployment compliance checks
• Automate recurring operational tasks through Power Shell, Azure CLI, Bash, Python, Azure Automation, or similar tools
• Partner with technology teams to improve deployment…