Cloud Infrastructure Engineer

Lowenstein Sandler • Roseland, NJ

1d • Hybrid

About The Position

Lowenstein Sandler is a law firm with more than 400 lawyers and 300 business services professionals. The firm emphasizes a collaborative, entrepreneurial culture, career development, and an inclusive workplace. It seeks business services professionals who share its commitment to clients, colleagues, and the communities where it works.

The Cloud Infrastructure Engineer is responsible for the day-to-day design, administration, and optimization of the firm’s cloud and hybrid infrastructure, primarily using Microsoft Azure. The role responds to platform alerts and incidents, troubleshoots issues, and helps maintain essential systems. It partners with security, endpoint, network, and application teams to deploy and maintain production services in accordance with operational standards, governance, and compliance requirements.

This position is based in Roseland, New Jersey, on a hybrid schedule. It is full-time, Monday through Friday, 9:00 AM–5:00 PM ET, and participates in an on-call rotation once a month. Travel is required for at least one annual visit to the firm’s multiple offices, as needed. The stated salary range is $165,000–$175,000, with exact compensation based on individual qualifications and location.

Requirements

• Minimum 5 years of experience designing cloud architecture and contributing to cloud strategy and standards.
• Experience designing and supporting Azure infrastructure, including IaaS, PaaS, networking, and identity.
• Experience using Azure Monitor, Log Analytics, and related tools to monitor and troubleshoot platform health.
• Experience implementing governance and compliance controls using Azure Policy and related standards.
• Familiarity with best practices for securing cloud infrastructure and applications.
• Experience administering Entra ID, including Conditional Access, Privileged Identity Management (PIM), and passwordless authentication such as FIDO2/YubiKey.
• Experience delivering infrastructure as code using Bicep, Terraform, or equivalent tools.
• Proficiency with PowerShell scripting and automation, including Microsoft Graph SDK.
• Strong Windows Server administration skills and experience supporting hybrid environments.
• Experience administering Active Directory and Group Policy in an enterprise environment.
• Experience supporting Microsoft 365 services such as Exchange Online, Teams, SharePoint, and Intune.
• Strong knowledge of security best practices and ability to apply standards in a production environment.
• Experience optimizing cloud environments for cost, performance, and reliability.
• Experience supporting backup, disaster recovery, and business continuity practices.
• BS degree or equivalent experience and IT certifications.

Responsibilities

• Design and architect end-to-end Azure infrastructure solutions aligned with business, security, and technical requirements.
• Lead cloud deployment initiatives and work with the Director of Information Security to secure applications on Azure and other cloud platforms.
• Assist in developing and enforcing cloud architecture standards, governance frameworks, and best practices.
• Collaborate with infrastructure, endpoint, security, and software engineering teams on scalable, secure infrastructure design and cloud infrastructure compliance.
• Optimize cloud environments for cost, performance, scalability, and reliability.
• Work with infrastructure engineers to implement and secure cloud networking, including VNets, VPNs, ExpressRoute, and hybrid connectivity.
• Implement and maintain Azure monitoring and observability using Azure Monitor, Log Analytics, diagnostic settings, workbooks, and action groups; tune alerts for platform health, performance, capacity, and cost.
• Work with the Director of Security to define and deploy Azure Policy and other governance initiatives for security baselines, resource tagging, and regulatory compliance; author custom policies and remediation tasks when built-in definitions are insufficient.
• Administer Entra ID at scale, including Conditional Access, Privileged Identity Management (PIM), named locations, passwordless authentication, FIDO2/YubiKey, administrative units, and Graph API automation.
• Automate routine tasks and workflows using PowerShell, including modules, error handling, REST API consumption, and Microsoft Graph SDK.
• Deliver infrastructure as code using Bicep, Terraform, or equivalent tooling.
• Support and enhance Microsoft 365 services, including Exchange Online, Teams, SharePoint, and Intune.
• Implement and maintain hybrid environments that integrate on-premises systems with Azure AD.
• Troubleshoot complex infrastructure issues and provide root cause analysis.
• Collaborate with the security team to enforce compliance, patching, and vulnerability management.
• Support backup, disaster recovery, and business continuity strategies.
• Evaluate emerging technologies and recommend improvements to cloud architecture strategy.
• Participate in infrastructure projects, upgrades, and migrations.
• Respond to system and security alerts as required to maintain uptime and system performance.
• Participate in an on-call rotation once a month.

Benefits

• Medical coverage options
• Dental coverage options
• Vision coverage options
• Prescription drug coverage options
• Life insurance
• Disability coverage
• Flexible spending accounts (FSAs)
• 401(k)
• Paid time off

What This Job Offers

• Job Type: Full-time
• Career Level: Senior