Senior Cloud Infrastructure Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Evaluate client environments and requirements to design solutions that align with business and technical goals.

• Lead or take part in Microsoft tenant migrations, including tenant-to-tenant, on-premises-to-cloud, hybrid coexistence, and migrations from third-party platforms.

• Configure and remediate Microsoft Entra ID, focusing on Conditional Access, MFA, Privileged Identity Management, password writeback, B2B/B2C, cross-tenant synchronization, hybrid identity, and the modernization of ADFS to SAML.

• Implement passwordless authentication using Windows Hello for Business, cloud Kerberos trust, and FIDO2 security keys.

• Deploy and modernize endpoint management utilizing Microsoft Intune, Windows Autopilot, Configuration Manager, compliance policies, configuration profiles, update rings, application packaging, and OneDrive Known Folder Move.

• Implement Microsoft Purview data protection, encompassing sensitivity labels, data loss prevention, retention and records management, and eDiscovery.

• Deploy Microsoft Defender for Endpoint, Defender for Cloud, and Defender for Identity, including migrations from third-party EDR solutions.

• Manage and troubleshoot advanced identity, data protection, and device-management challenges.

• Conduct Azure Migrate assessments and facilitate server and workload migrations, including wave planning, cutover scheduling, and validation by application owners.

• Design and implement Azure networking solutions, utilizing VPN Gateway, Application Gateway and WAF, Bastion, and Front Door.

• Implement Azure Backup and Azure Site Recovery solutions.

• Size and deploy Azure compute and storage solutions, including Azure Files and storage accounts.

• Deliver Azure Virtual Desktop and Windows 365 proofs of value, as well as production deployments.

• Create design documents, as-built documentation, runbooks, and migration plans.

• Conduct knowledge-transfer sessions and provide administrator training upon project completion.

• Track time against estimated hours and communicate variances promptly.

• Stay updated on changes to the Microsoft platform and share internal best practices.

⛳️ Requirements

• A minimum of five years of experience delivering Microsoft cloud infrastructure in consulting, managed services, or enterprise engineering environments.

• Proven ownership of at least three end-to-end Microsoft 365 or Azure migration projects, covering planning, execution, and cutover.

• Extensive hands-on experience with Microsoft Entra ID and Microsoft 365 workloads, including Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams.

• Significant practical experience with Microsoft Intune and Windows endpoint management.

• Familiarity with Azure IaaS, including virtual machine sizing, storage, core networking, and backup solutions.

• Practical experience with Microsoft Purview data protection and the Microsoft Defender suite.

• Proficiency in PowerShell and Microsoft Graph for automation, reporting, and bulk operations.

• Capability to manage multiple concurrent client engagements and adapt to changing priorities.

• Strong written and verbal communication skills, with the ability to lead client-facing technical discussions independently.

• Remote-first position based in the United States.

• Preference for candidates located in the Eastern or Central time zones.

• Willingness to work occasional evenings and weekends for migration cutovers and client maintenance windows.

• Target billable utilization of 80%.

• Preferred experience with Azure Virtual Desktop or Windows 365.

• Preferred experience in hypervisor migrations, such as VMware to Hyper-V or VMware to Azure.

• Preferred familiarity with tools like AvePoint Fly, Quest, BitTitan, or ShareGate.

• Preferred experience managing macOS, iOS, and Android devices.

• Preferred experience in regulated or public-sector environments, including HIPAA, CJIS, FERPA, SOC 2, or NERC CIP.

• Exposure to Microsoft Sentinel is preferred.

• Familiarity with Microsoft Copilot, Power Platform, and AI governance concepts is preferred.

• Certifications are preferred but not mandatory; equivalent hands-on experience will be accepted, and certification achievement will be supported post-hire.

🏝️ Benefits

• Remote-first work arrangement.

• BlueAlly supports certification achievement after hire.

• Occasional evening and weekend work to facilitate migration cutovers and client maintenance windows.