Senior Azure & M365 Infrastructure Engineer

Role Overview

• Design, build, and automate the Azure and Microsoft 365 platforms behind our managed cloud service
• Serve as the senior onsite technical lead and trusted advisor to the client's CTO and senior stakeholders
• Design and deploy Azure and Microsoft 365 solutions using infrastructure-as-code (Bicep, ARM, Terraform, PowerShell)
• Build Azure landing zones aligned to the Cloud Adoption Framework
• Lead public cloud migrations: email, files, apps, servers, and identity
• Act as senior escalation for Managed Services, vendors, and Microsoft support
• Administer Microsoft Entra ID: conditional access, PIM, RBAC, and hybrid identity
• Run M365 security: Defender for Endpoint/XDR, Sentinel, Purview, and Intune
• Improve design, security, performance, and cost, and keep documentation current

Requirements

• Proven track record as a senior technical resource in a dedicated or client-facing environment, ideally within an MSP or financial services firm
• 4+ years with Azure and Microsoft 365
• Azure compute: VMs, Availability Sets/Zones, Storage Accounts, Site Recovery
• Azure networking: VNets, Virtual WAN, ExpressRoute, VPN Gateway, NSGs
• Microsoft Entra ID: conditional access and hybrid identity
• M365 admin: Exchange Online, Teams, SharePoint, OneDrive, Intune (MAM/MDM), Defender for Endpoint
• Public cloud migrations and configuration management
• Automation: PowerShell with Bicep/ARM or Terraform
• Strong written documentation
• Azure governance: Policy, RBAC, Management Groups, Landing Zones (Great to Have)
• Azure services: Key Vault, Bastion, Backup, Monitor, Log Analytics (Great to Have)
• Azure security and edge: Application Gateway (WAF), Firewall, DDoS Protection (Great to Have)
• Microsoft Purview, Sentinel, Defender for Cloud (Great to Have)
• Azure SQL, Azure Virtual Desktop, AKS, Azure DevOps/GitHub Actions (Great to Have)
• FinOps and cost optimization (Great to Have)
• Fortinet (FortiGate) firewalls (Networking Nice to Have)
• Cisco Meraki switches and access points (Networking Nice to Have)
• Ubiquiti UniFi switching, access points, and controllers (Networking Nice to Have)
• LAN/WAN, VLANs, routing, DNS, DHCP, and VPN (Networking Nice to Have)
• Certifications (a plus): AZ-104, AZ-305, AZ-700, MS-102 or SC-300, and Fortinet NSE

Tech Stack

• Azure
• Cloud
• DNS
• Firewalls
• SQL
• Switching
• Terraform
• Vault

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Family Leave (Maternity, Paternity)
• Short Term & Long-Term Disability
• Training & Development, including support for cloud and security certifications