IT Systems and Cloud Engineer

Job Title: IT Systems and Cloud Engineer
Department: Business Services/IT
Location: Westfield, IN, Hybrid
Employment Type: Full Time

We are looking for a versatile, hands-on IT professional who thrives across a wide operational range — from rolling up their sleeves on Tier 2/3 helpdesk escalations to architecting and maintaining the cloud and SaaS infrastructure that keeps a 270-person organization running. This is a high-impact individual contributor role that sits between day-to-day technical support and strategic systems ownership.

You will partner directly with the Desktop Services Manager (who handles Tier 1-2 support, endpoint hardware/software and related management systems) and report to the Director of IT, acting as the primary technical depth of the team. You will own the cloud platform layer, drive modern workplace initiatives, and be the go-to escalation point for complex issues across a predominantly SaaS-based environment.

• Administer and optimize Microsoft 365 tenant (Exchange Online, SharePoint, One Drive, Teams, Intune, Entra /Azure AD, etc)
• Manage a small Azure infrastructure including virtual machines, networking, storage, and cost optimization (currently only a few machines related to current ERP, likely soon to be retired)
• Own integrations between SaaS platforms, ensuring SSO, SCIM provisioning, and data flow consistency across the application stack
• Evaluate, onboard, and retire SaaS tools in coordination with business stakeholders and the Director of IT
• Maintain licensing inventory, renewals, and cost tracking across all cloud subscriptions
• Oversee backup, DR, and business continuity posture for cloud-hosted workloads

• Design, deploy, and maintain Intune/Endpoint Manager policies for Windows device management, in coordination with the Desktop Services Manager
• Build and manage Autopilot enrollment, compliance policies, conditional access rules, and application deployment (Intune and PatchMyPC)
• Develop and maintain Microsoft 365 governance frameworks (Teams structure, SharePoint architecture, retention policies, DLP) in compliance with IT Policies (NIST CSF 2.0 + small portions of ISO 27001 type compliance / Controls from our parent company in Germany)
• Lead adoption of productivity and collaboration tooling, driving usage and training alongside the Desktop Services Manager
• Manage identity lifecycle — joiners, movers, leavers — with automation via Power Shell, Graph API, Power Automate, and/or workflows within Fresh service.

• Serve as the primary escalation point for complex issues beyond the Desktop Services Manager's scope, including cloud platform errors, identity/access problems, and SaaS integration failures
• Troubleshoot and resolve escalated tickets involving M365, Azure, networking, and cross-platform authentication
• Develop runbooks, knowledge base articles, and SOPs that enable Tier 1 resolution of repeating issues
• Support executive users and high-visibility incidents with urgency and professionalism

• Implement and maintain security controls including MFA/passwordless authentication, Conditional Access, Defender for Endpoint, and Purview/Compliance Center policies
• Monitor security posture through Secure Score, alert triage, and periodic access reviews
• Support audit and compliance activities (SOC 2, cyber insurance questionnaires, vendor assessments) in coordination with the Director of IT
• Manage privileged access, role assignments, and least-privilege principles across cloud platforms

• Partner with the Director of IT to research, scope, and implement technology initiatives
• Work with the Director of IT as a technical translator — documenting system architecture, translating business requirements into technical solutions, and communicating platform decisions clearly
• Drive process improvement through automation, scripting (Power Shell, Graph API, Power Automate), and tooling rationalization
• Mentor and cross-train the Desktop Services Manager on cloud platform fundamentals to increase team resilience