Senior Cloud Engineer

The Senior Cloud Engineer is a technical individual contributor responsible for designing, implementing, and supporting the organization's cloud infrastructure, modern workplace technologies, and identity management solutions. This role ensures the security, scalability, reliability, and compliance of enterprise platforms while driving automation, operational excellence, and continuous improvement initiatives. Working closely with the Information Technology team and external service providers, the Senior Cloud Engineer serves as a key technical partner, providing advanced expertise, and escalation support to enable business operations.

The Senior Cloud Engineer is a technical individual contributor responsible for designing, implementing, and supporting the organization's cloud infrastructure, modern workplace technologies, and identity management solutions. This role ensures the security, scalability, reliability, and compliance of enterprise platforms while driving automation, operational excellence, and continuous improvement initiatives. Working closely with the Information Technology team and external service providers, the Senior Cloud Engineer serves as a key technical partner, providing advanced expertise, and escalation support to enable business operations.

The Senior Cloud Engineer will report to the Senior Director, Information Technology Services and Security Management.

• Design, deploy, administer, and optimize Microsoft Azure infrastructure, including virtual machines, storage, networking, DNS, access controls, monitoring, patching, and cost management
• Administer Microsoft Entra  Active Directory, including identity lifecycle, groups, licensing, MFA, SSO integrations, Conditional Access, RBAC, and privileged access in partnership with Information Security
• Design and maintain Azure Virtual Desktop (AVD), including host pools, session hosts, image management, user profiles, scaling, application delivery, monitoring, and integration with Entra  Intune
• Engineer and administer Microsoft Intune, including configuration and compliance policies, Windows Autopilot, application deployment, update management, security baselines, device enrollment, and endpoint automation
• Design and maintain Azure backup and disaster recovery solutions, including Azure Backup and Azure Site Recovery; maintain recovery runbooks and execute periodic DR testing against established RTO/RPO requirements
• Administer and optimize Microsoft 365 platforms, including Teams, SharePoint Online, One Drive, and Exchange Online, and evaluate new Microsoft capabilities and service changes
• Develop automation and scripts using Power Shell, Microsoft Graph, Intune Remediations, Power Automate, and Infrastructure as Code where appropriate to improve reliability, security, and operational efficiency
• Implement and maintain Azure governance, including subscription and resource organization, RBAC, Azure Policy, tagging, monitoring, security configuration, and cost optimization
• Serve as the Tier 3 engineering escalation point for complex Azure, identity, AVD, endpoint, and Microsoft 365 issues; lead root-cause analysis and resolution of major technical incidents
• Lead cloud and infrastructure initiatives from technical design through implementation, testing, documentation, and operational handoff to the IT Service Delivery team and MSP
• Support GxP, SOX, audit, and inspection readiness by maintaining required technical controls, documentation, change records, infrastructure qualification evidence, backup/DR evidence, and configuration baselines
• Maintain architecture diagrams, technical standards, runbooks, and knowledge documentation; manage technical work and escalations through the Company’s IT ticketing system and provide technical direction to MSP and technology partners

• Advanced hands-on expertise with Microsoft Azure infrastructure, including virtual machines, virtual networks, storage, Azure Monitor, RBAC, Azure Policy, backup, disaster recovery, and cost optimization
• Advanced expertise with Azure Virtual Desktop, including host pools, session hosts, image management, FSLogix profiles, application delivery, monitoring, and scaling
• Strong expertise with Microsoft Entra  Active Directory, including MFA, Conditional Access, SSO, RBAC, privileged access, group-based licensing, and identity lifecycle management
• Advanced scripting and automation skills using Power Shell, Microsoft Graph, Intune…