Senior Cloud Engineer

Summary 

The Senior Cloud Engineer is responsible for the design, implementation, migration, and support of cloud infrastructure for XPERTECHS clients, with a primary focus on Microsoft Azure and the Microsoft 365 platform. This individual works with clients to architect and deliver new cloud solutions, lead on-premises to cloud migrations, troubleshoot escalated critical issues, and maintain secure, well-governed cloud configurations. The Senior Cloud Engineer is skilled in a broad range of technology and technical concepts related to Azure compute, storage, networking, identity, security, backup and disaster recovery, hybrid connectivity, and infrastructure automation. 

This role serves as the senior technical resource for cloud projects, leading complex engagements from requirements gathering through design, implementation, and thorough close-out. The Senior Cloud Engineer is expected to provide expert-level consultation on cloud architecture, cost optimization, and security best practices, and to mentor other engineers while helping define and improve XPERTECHS cloud standards. 

Responsibilities 

• Design and implement enterprise-class Azure solutions for small to mid-sized businesses, with a focus on security, scalability, resiliency, and cost efficiency. 
• Lead cloud migration projects, including assessment, planning, and execution of on-premises server, application, and data workloads to Azure and Microsoft 365. 
• Plan and execute on-premises file server migrations to SharePoint Online, OneDrive, and Microsoft Teams, including content assessment, permissions mapping, information architecture design, migration tooling (SharePoint Migration Tool, Migration Manager, or third-party platforms), OneDrive sync and Known Folder Move deployment, and end-user cutover support. 
• Architect, configure, and support Azure compute, storage, virtual networking, Azure Virtual Desktop, and hybrid connectivity (VPN, ExpressRoute, Azure Arc). 
• Design, configure, and troubleshoot Azure site-to-site and point-to-site VPN connectivity, including VPN Gateway sizing and SKUs, local network gateways, IPsec/IKE policies, BGP and static routing, route tables, and name resolution between on-premises networks and Azure virtual networks. 
• Design and manage identity and access using Microsoft Entra ID, including Conditional Access, privileged identity management, and hybrid identity scenarios. 
• Design, configure, and support Microsoft Intune device management, Windows Autopilot deployment, endpoint compliance policies, and application protection controls for Microsoft 365 client environments. 
• Implement and maintain cloud security and governance controls, including Microsoft Defender for Cloud, Azure Policy, role-based access control, and landing zone standards. 
• Design, implement, and test backup, business continuity, and disaster recovery solutions using Azure Backup, Azure Site Recovery, and third-party platforms. 
• Build and maintain infrastructure automation and scripting using PowerShell and Azure CLI to deliver consistent, repeatable deployments. 
• Monitor, analyze, and optimize Azure consumption and provide clients with cost management recommendations and right-sizing guidance. 
• Provide Tier III escalation support to internal teams and assist with diagnosing and resolving critical cloud infrastructure issues. 
• Collaborate with project leads and project managers to deliver solutions within scope, budget, and defined milestones. 
• Create and maintain technical documentation, including architecture diagrams, low-level designs, test plans, runbooks, and client cloud documentation. 
• Work with vCIO and Client Technology Advisors to ensure clients are meeting XPERTECHS baseline cloud standards and to develop technology roadmaps. 
• Define, adhere to, and improve XPERTECHS cloud design and implementation standards; mentor engineers and share knowledge across the team. 
• Participate in training and certification programs to stay current with emerging cloud technologies and industry trends. 
• Other duties as assigned. 

Supervisory Responsibilities 

None. This role provides technical leadership and mentoring to other engineers but has no direct reports. 

Minimum Qualifications 

• Minimum of 7 years of hands-on experience designing, implementing, and supporting Microsoft Cloud infrastructure. 
• Minimum of 5 years of MSP or consulting experience in a managed services environment. 
• Proven experience leading end-to-end cloud migrations of servers, applications, and data from on-premises environments to Azure. 
• Demonstrated experience migrating on-premises file servers and shared data to SharePoint Online and OneDrive, including permissions remapping, SharePoint/Teams information architecture, migration tooling, and OneDrive sync client deployment via Intune or Group Policy. 
• Expert-level knowledge of Azure compute, storage, virtual networking, network security groups, Azure Firewall, load balancing, and hybrid connectivity. 
• Hands-on experience implementing and supporting Azure site-to-site VPN and hybrid networking, including VPN Gateway, IPsec/IKE configuration against third-party firewalls (Fortinet, SonicWall, Meraki, or similar), BGP, VNet peering, and hybrid DNS resolution. 
• In-depth experience with Microsoft Entra ID, Conditional Access, hybrid identity (Entra Connect), and privileged access management. 
• Minimum of 4 years of PowerShell experience required; hands-on experience with infrastructure as code (Bicep, ARM, or Terraform) and Azure CLI. 
• Strong background in cloud security and governance, including Microsoft Defender for Cloud, Azure Policy, Microsoft Purview, and Zero Trust principles. 
• Hands-on experience with Microsoft Intune, Windows Autopilot, endpoint compliance, device configuration profiles, application deployment, and mobile application management. 
• Experience with Azure Backup, Azure Site Recovery, and business continuity and disaster recovery planning and testing. 
• Experience with Azure Virtual Desktop and/or Windows 365 is strongly desired. 
• Expert knowledge of Windows Server 2016-2022, Active Directory, DHCP, DNS, and Hyper-V or VMware virtualization platforms. 
• Strong working knowledge of Microsoft 365 services (Exchange Online, SharePoint Online, OneDrive, Teams, Intune) as they relate to cloud architecture and migration of on-premises workloads. 
• Familiarity with Azure Cost Management and experience delivering cloud cost optimization recommendations to clients. 
• Familiarity with Microsoft Office and Visio for documentation. 
• Strong verbal and written communication skills with the ability to interact professionally with clients, executives, and internal teams. 
• Ability to manage multiple priorities, meet deadlines, work in a small team environment, and contribute to a collaborative team culture. 
• Shares information and communicates clearly with team members to improve team effectiveness. 

Education/Certifications 

• University degree and/or related technical diploma preferred. 
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or Azure Administrator Associate (AZ-104) required. 
• Azure Security Engineer Associate (AZ-500), Azure Network Engineer Associate (AZ-700), and Microsoft 365 certifications strongly encouraged. 

Work Environment 

XPERTECHS has an interactive, fast-paced work environment. Responsibilities may occasionally require an adjusted work schedule and/or evening/weekend hours in order to satisfy customer needs, position requirements, project timelines, and emergency response scenarios. Engineering functions and processes commonly involve after-hours scheduled and planned projects and tasks, including cloud migrations and cutovers. Capability to work from home or a remote location is required by this position. Remote work and work from home arrangements are made at the discretion of the Engineering Manager. 

All job requirements are subject to possible modifications. This job description in no way states or implies that these are the only duties to be performed by the employee occupying this position. Requirements are representative of minimum levels of knowledge, skills, and/or abilities to perform this job successfully; the employee must possess the abilities or aptitudes to perform each duty proficiently. Continued employment is on an “at-will” basis. 

Employee must be able to relate to other people beyond giving and receiving instructions: (a) can get along with other co-workers or peers without exhibiting behavioral extremes; (b) perform work activities requiring negotiating, instructing, supervising, persuading or speaking to others; and (c) respond appropriately to constructive criticism from a supervisor. 

XPERTECHS is committed to a team-based culture that supports both personal and professional growth.