> Markdown version of [/jobs/ext/198010-senior-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/198010-senior-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Engineer - **Company:** Cravath, Swaine & Moore LLP - **Location:** New York, NY, United States - **Experience:** Expert - **Salary:** $180,000.0 - $220,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Active Directory Federation Services, Domain Controllers, Application Programming Interfaces (APIs), User Authentication, Microsoft Azure, Cloud Computing, Cloud Engineering, Cyber Security, Dynamic Host Configuration Protocol, Distributed File Systems, Domain Name System (DNS), NetApp Applications, OpenID, Public Key Infrastructure, Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Single Sign-On, Software Engineering, Enterprise Software Applications, Microsoft InTune, Vmware - **Published:** May 31, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=eb557bfe02251ddf ## About the Role Do you have experience in SSO?, Do you have a Bachelor's degree?, * Bachelor's degree or equivalent practical experience; * 10+ years of experience supporting Microsoft-based enterprise environments, with a strong focus on identity, authentication, and directory services; * Strong hands-on experience with Azure, Microsoft Entra ID, hybrid identity, Conditional Access, SSO, Intune, and Active Directory; * Hands-on experience with PowerShell, Microsoft Graph API, and Azure-based identity and hybrid connectivity services; * Experience leading complex infrastructure, identity, or modernization initiatives in production environments; * Solid understanding of identity security, privileged access, and Zero Trust concepts; * Ability to work through ambiguity, manage competing priorities, and make sound technical decisions in a fast-paced environment; * Experience with VMware and NetApp is a plus; * Microsoft Azure Administrator (AZ-104) and other relevant Microsoft identity or security certifications are preferred; * Strong communication skills and the ability to work effectively across technical and non-technical teams; and * Ability to work additional hours as needed, including nights and weekends. ## Description We are seeking a Senior Cloud Engineer to take ownership of the Firm's Microsoft identity, access, and hybrid infrastructure platforms. This is a hands-on role for an engineer who is very comfortable working with Entra ID, Azure and hybrid infrastructure, while leading complex initiatives from design through implementation. This role is best suited for someone who enjoys solving difficult technical problems, improving how identity and access are managed across the environment, and balancing modernization work with the realities of a high-availability production environment. RESPONSIBILITIES: Identity & Authentication * Owns and evolves the Firm's Microsoft Entra ID and hybrid identity environment, including Conditional Access, Enterprise Applications, and SSO across SAML and OIDC-integrated applications; * Designs and maintains authentication and access controls, including MFA, passwordless authentication, Windows Hello for Business, certificate-based authentication, and administrative account segmentation; * Manages privileged access controls, including role-based access, PIM, and related administrative security standards; * Leads the transition from legacy authentication models to cloud-first identity, including migration of ADFS-integrated applications, adoption of Password Hash Sync where appropriate, and significant reduction of legacy authentication dependencies; and * Improves visibility, monitoring, and security controls across the identity platform, in partnership with IT Security. Cloud & Core Infrastructure * Leads Active Directory upgrades and improvements, including domain and forest planning, domain controller lifecycle management, replication health, and related directory services; * Maintains and optimizes core infrastructure services including Active Directory, PKI, DNS, DHCP, and DFS/DFSR; and * Contributes to broader infrastructure initiatives, including NetApp storage optimization and NFS modernization, and supports VMware-based hybrid infrastructure where needed. Automation & Engineering * Builds and maintains PowerShell automation for identity, infrastructure, and operational workflows; * Develops scripts and integrations using Microsoft Graph API for provisioning, reporting, and administrative tasks; and * Maintains clear technical documentation, standards, and runbooks to support operations and project delivery. Technical Leadership & Operations * Acts as a technical lead on identity and infrastructure projects from design through post-implementation review; * Partners with Security, Application Development, and Operations teams to deliver secure, practical solutions; * Troubleshoots complex authentication, access, and hybrid identity issues in a 24/7 production environment; * Takes ownership of high-priority and unplanned work and drives issues through to resolution with minimal oversight; * Participates in an on-call rotation and provide after-hours support when needed; and * Performs additional duties as assigned. ## Related Videos - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)