Azure Cloud Engineer

This position is an offshore role, for an Senior Systems Engineer with broad infrastructure technology experience and expertise. This position is responsible for Engineering and supporting an enterprise class hybrid-cloud (Azure) infrastructure, planning and delivery on enterprise-wide IT infrastructure projects and development of technical standards and documentation. The Senior Systems Engineer is responsible for providing Tier 3 technical support for complex projects and for ensuring reliable and consistent technical operational services and outcomes.

Essential Functions:

• Responsible for, with advanced knowledge of, Active Directory, Azure AD, (federation between on-premises & Azure AD), Azure backup, Windows Authentication, Group Policies, DNS, DHCP, Kerberos, VPN, SSH, SFTP, PKI, Microsoft PowerShell, and Windows Server 2016/2019/2022.
• Designing and implementing scalable, secure, and highly available Azure Cloud Solutions.
• Managing and monitoring on-premises and cloud systems ensuring optimal performance and cost-efficiency
• Automating cloud deployments and configuration management using Azure DevOps, PowerShell, and ARM templates
• Ensuring data protection, encryption in-transit and at-rest, and compliance with relevant laws and regulations through Azure security features
• Collaborating with DevOps teams to integrate cloud services into software applications with a focus on how to move Star into Azure Cloud Services and away from Servers/apps.
• Responsible for disaster recovery planning, implementing and Disaster backup strategies (including DR Testing with after action reporting (corrective and preventive measures) to maintain data integrity and 100%.
• Optimizing resource utilization and implementing cost-saving measures
• Staying current with Azure services updates and industry best practices to recommend improvements to existing architectures.
• Providing technical support and guidance to stakeholders on cloud-related issues.
• Developing and maintaining documentation for cloud architectures, procedures, and training materials (including working with minimal supervision and mentor/work with other team members maximizing the value of the operations team members).
• Facilitating the migration of legacy systems to the Azure, including identifying opportunities to leverage cloud-native services to replace legacy server functionality to reduce operational costs, elevate security and deliver consistent outcomes to our users.
• Collaborating with cross-functional teams to ensure seamless integration of cloud services with business processes.
• Must be skilled in the ability to automate routine operational tasks, leveraging powershell and other languages to leverage Microsoft and other Azure cloud native tools to automate tasks and functions.
• Troubleshoot & resolve Azure environment performance issues, connectivity issues, security issues, etc.
• Availability to work night and weekend hours as required. Consistently prompt response to escalations for assistance.
• Plans, conducts, and executes the technical aspects of projects; coordinates the efforts of technical support staff in the performance of assigned projects.
• Responsible for maintaining a list of IT, business applications and hardware and ensures that we maintain a currently supported version of the application or piece of technology.
• Responsible for technical solution and oversight of a patch management solution and keeping systems updated per vulnerability notifications, etc.
• Ensure infrastructure systems are compliant with all security requirements.
• Lead the implementation of a least privileged model for application and data access and share knowledge with ops team.
• Additional duties as assigned.
• Advanced knowledge of Windows Desktop Operating Systems (Apple OS, Windows 10/11), and an expert in Desktop Imaging & Deployment, patch management and creating automated onboarding/offboarding processes
• Monitoring and enhancing the security of current and future Azure and local on-premises environments.

Primary Technologies:

• Microsoft BackOffice (Active Directory/Azure AD, GPO, DHCP, DNS, SSH, SFTP, PKI, Powershell, Certificate Management, Windows Server 2016, 2019, 2022, SQL Server, Azure SQL databases, etc.)
• Virtual Infrastructure - Nutanix PRISM
• Radius Server knowledge is mandatory.
• Understanding of VoIP systems is a positive
• Working knowledge of IPv4/IPv6, OSI Model, Networking (Firewall, Switch, AP’s), Android and iOS mobile devices
• Working knowledge of Fortinet network equipment and software (Firewall, SD-WAN, AP’s, FortiEDR, FortiEMS, etc.)
• Ability to troubleshoot difficult technology problems and independently learn new software.