Azure Cloud Engineer / Associate

Our Client is looking for Sr. Azure Cloud Engineer in New York (NYC) or California (Los Angeles). You will be working closely with the Network and Information Security Team to deliver infrastructure solutions to the organization. You will also own the solutions architecture, engineering, and operations for Microsoft Azure and Microsoft 365, ensuring the delivery of a high-quality end-user experience while maintaining security and compliance. Responsibilities

• Lead the design, configuration, implementation, and support of the Firm's Microsoft Azure and Microsoft 365 platforms
• Develop, define, and maintain architectural standards and supporting documentation while adhering to best practices
• Work both independently and collaboratively with other IT teams, vendors, technology leaders, as well as end-users when necessary
• Demonstrate strong problem-solving skills, excellent judgement, and possess a passion for continuous learning
• Deliver innovative solutions in diverse environment with shifting priorities, wearing many hats all while driving projects and tasks to completion
• Transition existing workloads to the cloud where possible
• Serve as a technical escalation point and SME for cloud-based technologies, providing education and transfer of knowledge
• Evaluate existing systems, processes, and vendors, identifying any design gaps or risks
• Research emerging technologies and concepts and make recommendations
• Participate in on-call rotation and be flexible to work extra hours and weekends as required
• This role has no direct reports

• At least 8 years of experience in systems infrastructure design, support, and administration
• At least 4 years years of experience working with Microsoft Azure and Microsoft 365 in a hybrid environment
• Azure AD, storage, and compute including Application Proxy (NDES), Storage Account, Virtual Machines, Virtual Desktop, Backup, Automation, and Functions
• Azure identity management including SSO (SAML), OAuth, MFA, RBAC, PIM, conditional access, monitoring / alerting, device registration, identity protection, and hybrid identity management / AD connect
• Azure networking including ExpressRoute, VNet, Virtual WAN, VPN, NSG, Load Balancer, BGP, routing, and firewall concepts (Palo Alto)
• Microsoft Endpoint Manager (Intune & Autopilot)
• Microsoft Defender for Endpoint
• Microsoft Exchange Online & On-Prem
• Microsoft 365 Security & Compliance
• Microsoft Information Protection
• Mimecast, Tessian, EOP, and Defender for 365