Cloud Infrastructure Engineer

Job Scope

Architects, deploys, and manages Sunward’s hybrid cloud environments with a focus on operational excellence, security, and automation. Responsible for maintaining critical on-premises infrastructure while leading the strategic migration of workloads to AWS. Administers Microsoft 365 services via Azure, manages identity integrations with Entra ID, and implements modern DevOps practices to ensure resilient, compliant, and scalable systems.

Essential Functions

• Design, deploy, and manage AWS cloud infrastructure, including networking, computer, storage, databases, and security controls.
• Manage and support on-premises infrastructure, including VMware environments, Windows/Linux servers, storage systems, backup solutions, and networking hardware.
• Plan and execute migration strategies for moving applications, servers, and services from on-premises data centers to AWS.
• Develop and maintain Infrastructure as Code (IaC) templates and automation scripts using Terraform, AWS CloudFormation, or Azure Bicep/ARM templates.
• Support and enhance CI/CD pipelines to automate provisioning, deployment, and configuration of cloud and hybrid resources.
• Administer Microsoft 365 and Azure services, including Exchange Online, SharePoint, Teams, Entra ID (Azure AD), and identity synchronization (e.g., Azure AD Connect).
• Implement and maintain hybrid cloud integrations, including VPNs, Direct Connect, hybrid file systems, identity federation, and secure networking.
• Drive cloud adoption following well-architected frameworks, security best practices, and compliance guidelines (NCUA, FFIEC, NIST).
• Build and manage monitoring, alerting, and logging solutions across both on-premises and cloud systems to ensure operational visibility and proactive issue resolution.
• Develop and test disaster recovery and business continuity plans encompassing both cloud and on-premises assets.
• Maintain detailed documentation of system architectures, migration plans, standard operating procedures, and recovery workflows.
• Provide operational support and participate in a rotating on-call schedule for critical infrastructure incidents.
• Continuously evaluate emerging cloud and hybrid technologies to improve system performance, cost efficiency, and security posture.
• Perform other duties as assigned.

Qualifications

Experience and Education

• Minimum four years of experience in cloud infrastructure engineering, DevOps, or systems administration roles, demonstrating an increasing level of responsibility in hybrid environments.
• Practical experience designing and managing AWS infrastructure components such as EC2, VPC, S3, IAM, RDS, Lambda, and CloudWatch, with an emphasis on performance, security, and resilience.
• Proven success supporting and optimizing on-premises virtualization platforms (VMware preferred) and related infrastructure, in alignment with business continuity requirements.
• Led or contributed to structured on-premises-to-cloud workload migrations, applying best practices for data integrity, service availability, and cost-efficiency.
• Bachelor’s degree in computer science, information systems, or related field, or equivalent practical experience in lieu of a degree.

Knowledge

• In-depth understanding of Microsoft 365 administration and Azure Active Directory (Entra ID), including identity synchronization, security configuration, and role-based access management.
• Strong proficiency with Infrastructure as Code tools (Terraform strongly preferred), with an understanding of modular, reusable templates that support consistent and scalable deployments.
• Solid knowledge of modern CI/CD practices, infrastructure automation, and source control tools/workflows (e.g., Azure DevOps, GitHub) to support efficient and reliable deployments.
• Strong knowledge of security and compliance principles related to cloud and hybrid environments and how they inform infrastructure design, operational processes, and access controls.

Skills/Abilities

• Applies sound reasoning and a strong operational mindset to troubleshoot and resolve complex infrastructure issues, minimizing downtime and supporting continuous system availability.
• Collaborates effectively across infrastructure, security, and application teams to deliver integrated cloud and hybrid solutions that meet evolving business needs.
• Communicates technical concepts clearly to both technical and non-technical audiences and maintains thorough, accurate documentation to support compliance and resilience.
• Demonstrates a continuous improvement mindset by proactively sharing expertise, mentoring peers, and contributing to team knowledge through documentation and collaboration.
• Maintains up-to-date knowledge of evolving cloud and hybrid technologies, regularly identifying opportunities to enhance infrastructure performance, scalability, or security.
• Leverages automation tools and infrastructure as Code practices to standardize deployments, reduce manual errors, and support rapid, secure provisioning of resources.
• Balances daily operational tasks with long-term migration or modernization projects, ensuring high-quality execution aligned with infrastructure strategies.
• Prioritizes and organizes work effectively across multiple systems and projects, responding to incidents quickly while maintaining progress on scheduled improvements.
• Adheres to structured change processes and implements infrastructure updates in line with organizational risk, compliance, and audit requirements.

Physical Requirements/Work Environment

• Ability to sit or work at a desk and use a computer for extended periods (up to 8 hours/day).
• Manual dexterity to operate standard office equipment such as a keyboard, mouse, and telephone.
• Occasional lifting or moving of equipment up to 25 pounds (e.g., laptops, servers, or networking hardware during rack-and-stack or troubleshooting tasks).
• Visual acuity to view computer monitors, read technical documentation, and identify hardware components.
• May require occasional off-hours or on-call work, including evenings, weekends, or holidays, to support infrastructure maintenance, incident response, or system upgrades.