Cloud Infrastructure Engineer

ORION•Federal Way, WA

15h•Onsite

About The Position

The primary purpose of this position is to Design, build, migrate, and operate Azure-based infrastructure services that support business applications and data platforms while enabling the reduction and eventual exit of on-premises data center dependencies. This role is responsible for reliable cloud operations, standardized configurations, and disciplined delivery of migration and modernization initiatives. The incumbent must support the guiding beliefs and core values of Orion, which are centered on Safety, Quality, Delivery, and Teamwork most importantly, with each built upon the all-important foundation of Integrity.

Requirements

A Bachelor’s Degree in Computer Science, Information Technology, Engineering, or a related field (or equivalent practical experience and/or certifications) and a minimum of five (5) years of experience in infrastructure engineering, including at least three (3) years of hands-on experience supporting Microsoft Azure in a production environment.
The incumbent must have strong technical expertise with Azure infrastructure services (compute, storage, networking), hybrid connectivity concepts (VPN/connectivity, DNS, routing), and server administration (Windows Server and/or Linux), including troubleshooting, performance tuning, and operational support.
The position requires experience supporting structured change control processes, documentation standards, and working within established security practices such as least privilege access, role-based access control, and secure remote access methods.
Experience migrating workloads from on-premises environments to Azure and supporting cloud operational practices such as monitoring, alerting, backup, and recovery is required.
The incumbent must possess strong interpersonal and communication skills with the ability to work effectively with IT teams, business stakeholders, and third-party vendors.
The ability to translate business needs into practical technical recommendations—including risks, costs, and benefits—is essential.
Discretion and trustworthiness, and the ability to keep all company information and materials strictly confidential (both internally and externally), are required.
The incumbent must be well organized, diligent, and self-motivated, with the ability to work with minimal supervision and independently identify, prioritize, and complete work.
The position requires flexibility and the ability to adjust to changing priorities, including support during off-hours as needed for high-impact incidents or scheduled maintenance activities.
Attention to detail and care in performing tasks accurately, documenting changes, and maintaining stable operations are essential elements of this position.
The Company expects and requires the incumbent, and each of its other employees, to observe and fulfill the above and all other safety responsibilities and actively work toward maintaining a safe workplace. Failure to do so can result in disciplinary action, up to and including termination of employment.

Nice To Haves

Experience supporting data platform services and environments (including Microsoft Fabric and/or related Azure data services) is preferred.

Responsibilities

Azure platform engineering and governance
Build and maintain Azure foundations, including subscriptions/resource groups, role-based access (RBAC), policies, naming/tagging standards, and environment separation (prod/test/dev as applicable).
Implement and maintain cost controls (budgets, alerts, usage reporting) and support chargeback/showback practices where required.
Ensure Azure configurations align to security standards and operational governance expectations.
Cloud infrastructure operations and reliability
Operate and maintain Azure-hosted infrastructure services, including compute, storage, networking, and core platform tooling.
Manage monitoring, alerting, and troubleshooting practices to support availability, performance, and operational reliability.
Maintain and test backup and recovery capabilities (as applicable) to support business continuity and disaster recovery readiness.
Server migration and modernization execution
Assess on-prem workloads and support migration planning using practical migration patterns (rehost, refactor, replace, retire).
Execute migration waves, validate post-migration performance and stability, and transition services into steady-state support.
Identify legacy systems suitable for retirement or replacement as part of the data center exit strategy.
Network connectivity and hybrid integration support
Support connectivity between Azure, corporate offices, and jobsites through standard network patterns (VPN/ExpressRoute where applicable), DNS, routing, and secure remote access practices.
Partner with Network and Security teams to ensure hybrid connectivity and access models are secure, reliable, and supportable.
Security and control alignment (infrastructure scope)
Implement infrastructure security controls such as configuration baselines, patching posture, secure access, logging/telemetry, and least-privilege access practices.
Support vulnerability remediation and infrastructure-related security incidents/tickets in coordination with Information Security.
Ensure required evidence/artifacts are captured for audit/control support (e.g., access approvals, change records, configuration standards).
Automation, standardization, and documentation
Develop and maintain repeatable deployment and configuration standards (templates, scripts, runbooks) to improve consistency and reduce manual effort.
Maintain accurate infrastructure documentation, including environment diagrams, service dependencies, and operational procedures.
Microsoft Fabric / data platform support (as assigned)
Support infrastructure and platform needs for data warehouse modernization efforts, including connectivity, identity/access patterns, and operational monitoring.
Partner with BI/Data teams to ensure platform reliability, access controls, and predictable refresh/processing performance.
Vendor and partner coordination
Coordinate with third-party vendors, consultants, and managed service providers as needed to support migrations, upgrades, and cloud platform initiatives.
Ensure vendor work aligns with company standards, change control requirements, and delivery expectations.
After-hours response and operational readiness
Participate in the on-call/off-hours support model as required for cloud infrastructure alerts and high-impact incidents.
Ensure incident response documentation, communications, and handoffs are timely and complete.
Project participation
Manage cloud/Azure owned projects and deliver them on approved design, timeline, and budget parameters.
Support broader IT projects as assigned by IT leadership (Director & VP of IT).
Responsible and accountable for incumbent’s own personal safety.
Responsible and accountable for the safety of all co-workers and any others incumbent comes in contact with.
Authorized and obligated to stop work on any task or series of tasks whenever an unsafe condition or situation is anticipated or is observed.
Complies with all applicable laws, regulations and Company policies and procedures, and is subject to appropriate disciplinary action (including dismissal) for failure to do so.
Reports any and all violations of applicable laws, regulations or Company policies and procedures promptly, and is subject to appropriate disciplinary action (including dismissal) for failure to do so.
Performs other related administrative and technical duties as may be assigned or requested by immediate supervision (such as certification training, safety training, procedure review, etc.).
All employees, current and former, must maintain confidentiality by not disclosing to others any confidential, proprietary or trade secret information belonging to the Company.