Senior Infrastructure (Azure & M365) Engineer - New York - Hybrid

You will design, build, and automate the Azure and Microsoft 365 platforms behind our managed cloud service, with a focus on repeatable, infrastructure-as-code delivery for new and existing clients. You will be a senior escalation point for Managed Services, vendors, and Microsoft support, and partner with architects and Cybersecurity to modernize client estates., * Serve as the senior onsite technical lead and trusted advisor to the client’s CTO and senior stakeholders

• Design and deploy Azure and Microsoft 365 solutions using infrastructure-as-code (Bicep, ARM, Terraform, PowerShell)
• Build Azure landing zones aligned to the Cloud Adoption Framework
• Lead public cloud migrations: email, files, apps, servers, and identity
• Act as senior escalation for Managed Services, vendors, and Microsoft support
• Administer Microsoft Entra ID: conditional access, PIM, RBAC, and hybrid identity
• Run M365 security: Defender for Endpoint/XDR, Sentinel, Purview, and Intune
• Improve design, security, performance, and cost, and keep documentation current

Do you have experience in Virtual Private Clouds?, Essential (Azure & Microsoft)

• Demonstrated experience operating as a senior technical resource in a dedicated client-facing environment, preferably supporting hedge funds or alternative investment firms.
• 4+ years with Azure and Microsoft 365 infrastructure
• Azure compute: VMs, Availability Sets/Zones, Storage Accounts, Site Recovery
• Azure networking: VNets, Virtual WAN, ExpressRoute, VPN Gateway, NSGs
• Microsoft Entra ID: conditional access and hybrid identity
• M365 admin: Exchange Online, Teams, SharePoint, OneDrive, Intune (MAM/MDM), Defender for Endpoint
• Public cloud migrations and configuration management
• Automation: PowerShell with Bicep/ARM or Terraform
• Strong written documentation for infrastructure or cloud environments
• Eligible to work in the United States

Great to Have

• Azure governance: Policy, RBAC, Management Groups, and Landing Zones aligned to the Cloud Adoption Framework
• Azure security and edge: Application Gateway (WAF), Firewall, DDoS Protection
• Microsoft security and compliance tools: Purview, Sentinel, Defender for Cloud

Networking (Nice to Have)

• Fortinet (FortiGate) firewalls
• Cisco Meraki switches and access points
• Ubiquiti UniFi switching, access points, and controllers
• LAN/WAN, VLANs, routing, DNS, DHCP, and VPN, * Consultative, solution-focused, and proactive
• Hands-on, accountable, and versatile
• Always learning, and shares knowledge across the team

Pulled from the full job description

• AD&D insurance
• 401(k)
• Health insurance
• Paid time off
• Vision insurance
• Dental insurance
• Family leave, This is a full time role with the following employment benefits:
• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Family Leave (Maternity, Paternity)
• Short Term & Long-Term Disability
• Training & Development, including support for cloud and security certifications

Portfolio BI is a platform-centric data and managed services company built for alternative asset managers. From New York, London, and Belgrade we support 175+ hedge funds and asset managers with integrated cloud, cybersecurity, and data infrastructure under a single SLA. Our PBI Stratus platform runs a true follow-the-sun model across three time zones.