Infrastructure & Cloud Systems Engineer

Courser accelerates the growth of IT service provider companies. We forge dynamic partnerships, leveraging our values of Teamwork, Service, Growth-Mindedness, Trust, and Innovation to deliver impactful solutions and phenomenal customer experiences. If you thrive in a fast-paced IT environment, join our rapidly expanding team and contribute to our ongoing success.

We are looking for an Infrastructure & Cloud Systems Engineer at Courser to serve as the core technical anchor and guardian of our enterprise cloud-native ecosystem. In this role, you will own the day-to-day engineering, scaling, and operational reliability of our Microsoft 365, Microsoft Entra , and Azure environments. Reporting directly to the Director of IT & Security Operations, you will bridge the gap between front-line helpdesk operations and architectural strategy, acting as our Tier 3/4 escalation lead and working closely with our Security & Compliance and Automation pods to ensure seamless, secure service delivery.

• Cloud Architecture & Infrastructure Engineering:
  Design, implement, and maintain core Azure infrastructure, virtual networks, storage, and resource groups. Manage session host pools, golden image updates, and auto‑scaling within Azure Virtual Desktop (AVD) using Nerdio Manager to optimize platform performance and cost efficiency.
• Identity & Zero Trust Governance:
  Administer Microsoft Entra , managing directory hygiene, Conditional Access policies, Privileged Identity Management (PIM), and phishing-resistant authentication (FIDO2 passkeys). Maintain Group Delegated Access Permissions (GDAP) to eliminate standing admin accounts and enforce least-privilege partner access.
• Tier 3/4 Technical Escalations:
  Serve as the internal Tier 3/4 escalation authority for advanced identity, messaging (Exchange Online), virtualization, and cloud infrastructure issues. Perform deep root cause analysis and lead complex troubleshooting efforts.
• Front-Line Support Alignment & Guardrails:
  Interface directly with our outsourced Tier 1/2 helpdesk partner to validate escalation workflows, enforce ticket routing boundaries, and monitor SLA performance. Author and maintain standard operating procedures (SOPs) enabling helpdesk technicians to resolve tier-1/2 issues independently.
• Security & Compliance
  
  Collaboration:
  
  Partner with the Security & Compliance Engineer to enforce system hardening baselines, maintain SOC 2 Type II compliance controls, and configure automated evidence gathering. Act as a secondary technical responder within the Incident Response lifecycle to execute containment actions (e.g., session revocation, network isolation).
• Infrastructure Automation:
  Drive process efficiency by writing robust Power Shell scripts and leveraging Microsoft Graph API to automate recurring tenant administrative tasks, reporting, and bulk identity actions.

• 6+ years of hands-on experience in enterprise systems engineering, cloud administration, or infrastructure delivery, ideally within an MSP or high-growth multi-tenant environment.
• Deep proficiency in Microsoft Entra  & Microsoft 365, including hands-on experience with Conditional Access, PIM, Intune endpoint compliance (Windows 11 / macOS), and Exchange Online.
• Demonstrated experience with Microsoft Azure & Virtualization, including virtual networking (VNets, VPNs, NSGs), resource groups, and Azure Virtual Desktop (AVD) administration (experience with Nerdio Manager strongly preferred).
• Strong scripting and automation capabilities using Power Shell and Microsoft Graph API to manage cloud environments.
• Experience in tiered support and escalation structures, specifically collaborating with…