Cloud Infrastructure Engineer

We are seeking a Senior Cloud Infrastructure Engineer to own and evolve a predominantly Azure-based infrastructure environment. This is a hands-on, senior-level individual contributor role with high autonomy and responsibility across cloud infrastructure, identity, endpoint management, and security.

The right person serves as a technical authority across the Microsoft ecosystem, responsible for designing, operating, and continuously improving a cloud-first environment that supports a distributed workforce and field operations at scale. This role requires ownership, proactive communication, and the judgment to prioritize without constant direction.

Environment Overview

Cloud: Azure IaaS (primary platform) - VMs, Networking, Storage Accounts, Key Vaults, Azure Virtual Desktop

Identity & Access: Microsoft Entra ID, Active Directory, RBAC, Conditional Access, MFA

Data: SQL Server, Azure SQL Managed Instances

Endpoints: ~2,000 Windows 11 field devices + ~800 Zebra Android handhelds

Productivity: Microsoft 365 E5 - Exchange Online, Teams, SharePoint, Defender suite

Network: All-Fortinet; day-to-day management handled by third-party vendor

Security: Microsoft Defender for Endpoint, EDR, Vulnerability Management via M365 E5 stack

Core Responsibilities

Own day-to-day administration of Azure IaaS infrastructure - virtual machines, networking, storage, Key Vaults, and Azure Virtual Desktop

Manage Entra ID and Active Directory: user lifecycle, RBAC, Conditional Access policies, MFA, and SSO integrations

Administer SQL Server and Azure SQL Managed Instances including patching, performance monitoring, and availability

Lead endpoint management across Windows 11 and Android (Zebra) devices via Microsoft Intune - policy configuration, compliance, app deployment, and the ongoing Zebra rollout

Maintain and optimize Microsoft 365 E5 services: Exchange Online, Teams, SharePoint, and the Defender security suite

Perform patch management, vulnerability remediation, and security baseline enforcement across the server and endpoint fleet

Execute and maintain disaster recovery and backup procedures; participate in DR testing and unplanned outage response

Develop and maintain PowerShell automation to reduce manual operational overhead for the team

Document system configurations, architecture decisions, and change history; maintain operational runbooks

Participate in on-call rotation; support planned maintenance windows and off-hours patching

Act as escalation point for infrastructure issues from the broader IT team

Requirements

Required Qualifications

5+ years of hands-on Windows Server administration in production environments

4+ years of Azure IaaS experience - VMs, VNets, NSGs, Storage, Key Vaults, Azure Virtual Desktop

Strong Entra ID (Azure AD) expertise: RBAC, Conditional Access, identity governance, hybrid identity

Production experience with SQL Server and/or Azure SQL Managed Instances

Proficiency in PowerShell scripting for infrastructure automation and operational tooling

Experience with Microsoft 365 administration - Exchange Online, Teams, SharePoint

Familiarity with Microsoft Defender suite and endpoint security operations within M365 E5

Solid understanding of networking fundamentals (TCP/IP, DNS, firewall concepts, VPN, routing)

Demonstrated ability to work autonomously - self-direct priorities, manage workload without daily oversight

Strong written and verbal English communication skills; comfortable in vendor and stakeholder calls

Preferred Qualifications

Fortinet experience - hands-on FortiGate administration or FortiManager familiarity is a strong differentiator

Microsoft Intune & endpoint management - Intune policy authoring, compliance baselines, app deployment across Windows and Android devices

Vulnerability management - experience with Defender Vulnerability Management or equivalent within the M365 E5 stack

Android / mobile device management - prior Zebra or ruggedized Android device deployment experience a plus given the active rollout

Relevant certifications - AZ-104 (Azure Administrator), AZ-305 (Azure Solutions Architect), SC-300 (Identity & Access), MS-102 (M365 Administrator) or equivalent

On-call expectations

Participation in a shared on-call rotation (~1 week every few weeks)

Occasional off-hours maintenance windows for patching and upgrades

Low-to-moderate incident volume, with a focus on proactive stability

What Makes a Great Fit

You treat infrastructure as a product - documented, repeatable, and improvable over time

You proactively identify gaps and surface them with proposed solutions, not just problem reports

You can context-switch between strategic architecture discussions and hands-on troubleshooting in the same day

You communicate clearly with non-technical stakeholders and hold your ground constructively in vendor conversations

You are comfortable owning work streams end-to-end with minimal hand-holding

Why This Role Matters

Own and shape a 99% Azure IaaS environment with minimal on-prem footprint

Drive improvements across identity, endpoint management, and security posture

Operate in a high-autonomy environment with direct impact on infrastructure direction

Work with enterprise-scale systems supporting thousands of endpoints and users

Influence standards, automation, and long-term infrastructure strategy

About Us

Established in 2011, Trinetix is a dynamic tech service provider supporting enterprise clients around the world.

Headquartered in Nashville, Tennessee, we have a global team of over 1,000 professionals and delivery centers across Europe, the United States, and Argentina. We partner with leading global brands, delivering innovative digital solutions across Fintech, Professional Services, Logistics, Healthcare, and Agriculture.

Our operations are driven by a strong business vision, a people-first culture, and a commitment to responsible growth. We actively give back to the community through various CSR activities and adhere to international principles for sustainable development and business ethics.

To learn more about how we collect, process, and store your personal data, please review our Privacy Notice: https://www.trinetix.com/corporate-policies/privacy-notice