The Systems Engineer – Cloud is responsible for the design, deployment, and ongoing management of cloud and hybrid IT environments for our managed services clients. With a primary focus on Microsoft 365 and Microsoft Azure, and supported experience in Amazon Web Services (AWS), this individual ensures the availability, security, scalability, and cost-efficiency of cloud infrastructure across a diverse client portfolio. The successful candidate will combine deep technical expertise in cloud platforms with strong documentation and communication skills, working closely with Technical Account Managers, Security Advisors, and client stakeholders to deliver exceptional cloud services.
Responsibilities:
● Design, deploy, and manage Microsoft 365 environments including Exchange Online, SharePoint Online, Teams, OneDrive, Intune, and related M365 services for assigned clients.
● Architect, implement, and administer Microsoft Azure infrastructure including virtual machines, virtual networks, storage accounts, Azure Active Directory (Entra ID), Azure AD Connect, and related IaaS/PaaS services.
● Build Site-to-Site tunnels, Point-to-Site tunnels, add Private Endpoints to resources, Routing, virtual firewalls.
● Build, deploy and maintain app services (including WAF)
● Support and maintain AWS environments including EC2, S3, IAM, VPC, and other core services as required by client deployments.
● Serve as the primary escalation point for the Remote Services team on cloud-related incidents, service requests, and advanced troubleshooting across Microsoft 365, Azure, and AWS platforms.
● Collaborate with Technical Account Managers, Security Advisors, and client IT stakeholders to assess cloud needs, develop migration roadmaps, and deliver cloud transformation projects.
● Develop and maintain thorough documentation for cloud configurations, tenant policies, runbooks, and service records for all managed client environments.
● In collaboration with Security Advisors, implement and manage cloud security controls including Conditional Access, Multi-Factor Authentication (MFA), Microsoft Defender for Cloud, Defender for Microsoft 365, and related security frameworks.
● Monitor cloud environment health, performance, and cost utilization; proactively identify and remediate issues, and optimize resource consumption and licensing.
● Plan and execute cloud migrations including on-premises to Azure/M365, tenant-to-tenant migrations, and hybrid identity and infrastructure deployments.
● Conduct regular cloud assessments and audits to identify security gaps, optimization opportunities, and project opportunities for assigned clients.
● Remain current with the latest Microsoft 365, Azure, and AWS platform updates, features, and best practices to ensure client environments remain secure, efficient, and modern.
● Provide technical guidance and mentorship to other team members on cloud technologies and best practices.
● Accurately manage time and maintain detailed documentation of all activities, configurations, and client interactions.
● Deliver successful cloud-focused client projects such as M365 tenant deployments, Azure migrations, hybrid identity rollouts, and professional services engagements.
Qualifications:
● Minimum of 4 years of experience in systems engineering, cloud administration, or a related IT role. Experience working in a Managed Services Organization supporting multiple clients preferred.
● Bachelor’s degree in Computer Science, Information Technology, or a related field desirable. Or 5+ years of hands-on experience in a cloud or IT infrastructure role.
● Deep, hands-on expertise with Microsoft 365 administration including Exchange Online, SharePoint, Teams, OneDrive, Intune/Endpoint Manager, and Microsoft Defender for M365.
● Strong proficiency in Microsoft Azure services including Entra ID (Azure AD), Azure Virtual Machines, Azure Networking, Azure Storage, Azure Backup, Azure Monitor, and Azure Policy.
● Working knowledge of Amazon Web Services (AWS) including EC2, S3, IAM, VPC, Route 53, and core AWS management tooling.
● Experience with hybrid identity and directory services including Entra ID Connect (AAD Connect), Active Directory Domain Services, and single sign-on (SSO) configurations.
● Proficiency in Microsoft 365 and Azure security tools including Conditional Access, MFA/SSPR, Microsoft Defender for Cloud, Microsoft Defender for Endpoint, and Purview compliance solutions.
● Experience planning and executing cloud migrations including on-premises to Azure/M365 and tenant-to-tenant migration scenarios.
● Proficiency in scripting and automation tools including PowerShell, Azure CLI, and ARM/Bicep templates.
● Understanding of networking fundamentals as they apply to cloud environments including DNS, VPNs, ExpressRoute, Azure Virtual WAN, and hybrid networking topologies.
● Demonstrated problem-solving and analytical skills with a proactive approach to monitoring and capacity planning.
● Excellent written and verbal communication skills; able to create clear technical documentation and present recommendations to both technical and non-technical audiences.
● Strong customer service orientation with experience supporting diverse client organizations.
● Knowledge of cloud security principles, frameworks (e.g., Zero Trust, CIS Benchmarks), and compliance standards (e.g., HIPAA, SOC 2, NIST).
Relevant certifications are desirable:
● Microsoft Certified: Azure Administrator Associate (AZ-104).
● Microsoft Certified: Azure Solutions Architect Expert (AZ-305).
● Microsoft 365 Certified: Enterprise Administrator Expert (MS-102).
● Microsoft Certified: Azure Active Directory/Identity and Access Administrator (SC-300).
● AWS Certified Solutions Architect – Associate or AWS Certified SysOps Administrator.
● CompTIA Cloud+ or equivalent cloud certification.
Great, just keep talking to your recruiter.
Apply for this position
If you are already talking to a recruiter from CONEXIONHR, DON'T FILL THE FORM.
