Senior Infrastructure & Cloud Engineer

As a Senior Infrastructure & Cloud Engineer you will own the systems the company runs on. That means Azure Government and Microsoft 365 GCC High, identity and endpoint management, the network, and a real on-premises estate: Linux servers, a virtualization and ZFS storage platform, GPU compute for AI and simulation work, and the version control and license systems engineering depends on every day. The environment is young enough that you will still be building it and established enough that people depend on it. You will take on the next phase of the buildout, including a second site, while owning reliability for everything already running. This is a hands-on engineering role. You will work directly with IT leadership on architecture, standards and the roadmap, in a company where speed and security both matter and the compliance program is operational rather than aspirational.

• Bachelor’s degree in information technology or a related field, or equivalent practical experience.
• 7+ years in infrastructure, systems or cloud engineering, hands-on rather than purely architectural.
• Deep experience administering and engineering Microsoft Azure and Microsoft 365.
• Strong identity and access engineering with Microsoft Entra ID, including Conditional Access and device compliance.
• Managing Windows and macOS endpoints at scale with Microsoft Intune or a comparable platform.
• Production Linux administration: Ubuntu or Debian, systemd, SSH hardening, storage and network file sharing.
• Microsoft Azure Government, Microsoft 365 GCC High, or another sovereign or regulated cloud.
• Solid networking: routing, VLANs, DNS, TLS, VPN and firewall policy.
• Automation with PowerShell plus at least one of Bash or Python, and the documentation discipline to leave the next person a working system.
• Ability to troubleshoot complex problems across cloud, identity, network and endpoint, and drive them through to resolution
• Environments subject to NIST SP 800-171, CMMC, ITAR or similar requirements.
• On-premises virtualization and ZFS storage: Proxmox, VMware or equivalent, including snapshots and replication.
• GPU compute, HPC scheduling, or container runtimes on Linux.
• Azure Virtual Desktop or another virtual desktop platform serving engineering workloads.
• Infrastructure as code with Terraform, Bicep or similar.
• Cloud-managed networking such as Cisco Meraki, and site-to-site VPN.
• Standing up a new site: network, servers and end-user technology from an empty building.
• Supporting engineering, laboratory or manufacturing environments.
• Relevant Microsoft Azure, security or endpoint management certifications.