Cloud Systems Administrator

Ferrandino & Son, Inc.•Town of Oyster Bay, NY

10h•Hybrid

About The Position

The Cloud Systems Administrator owns the health, performance, and security of Ferrandino & Son’s hybrid infrastructure across on-prem (Legacy Systems) and cloud environments (Azure/AWS), including identity, networking, and core platform services. This role is hands-on and proactive: maintaining uptime, closing security gaps, automating routine tasks, and ensuring rapid recovery when incidents occur. You’ll partner closely with Automation/BI teams to keep infrastructure ready for AI-driven workloads and evolving business needs.

Requirements

Bachelor’s degree in Computer Science, MIS, or related field, or equivalent experience.
5+ years in systems/infrastructure administration, with expertise in VMware and Microsoft Windows Server.
Working knowledge of VMware vSphere (ESXi, vCenter, vSAN) and core Windows services (AD, GPO, DNS, DHCP).
Experience with SAN/NAS storage, hybrid cloud environments (Azure and/or AWS), and Microsoft 365 tools (Entra/Azure AD, SCCM).
5–7 years of experience in infrastructure administration, including Windows Server/Active Directory, virtualization (VMware preferred), and hands-on experience or strong exposure to Azure (networking, identity, or compute).
Demonstrated experience with enterprise backup/DR solutions (Veeam strongly preferred).
Solid understanding of identity, authentication, and network fundamentals (DNS, DHCP, VLANs, VPN, RADIUS/NPS), with hands-on experience modernizing and migrating these services to cloud/hybrid architectures (e.g., Entra ID/Azure, Azure Networking, Azure S2S VPN).
Hands-on scripting/automation skills (PowerShell required; Python/Bash a plus).
Ability to identify and remediate infrastructure, security, and configuration issues across hybrid and Azure environments.
Clear, concise communicator with strong documentation habits.

Nice To Haves

Azure Site Recovery or similar cloud-based DR experience.
Exposure to SIEM/SOC workflows and vulnerability management tools.
Experience with SAN/storage administration.
Familiarity with ITIL practices (incident, problem, change).
Relevant certifications (AZ 104, AZ 500, Security+).

Responsibilities

Drive operational performance by maximizing uptime and resiliency: Proactively maintains and hardens core infrastructure, reducing outages and ensuring rapid recovery when incidents occur.
Accelerate modernization and scalability: Drives cloud migrations and automation, enabling the business to support AI-driven workloads and future growth.
Own hybrid infrastructure with a cloud-first migration strategy: prioritizing the transition of core services to Azure while maintaining and hardening existing on-prem systems (VMware vSphere: ESXi, vCenter, vSAN; Windows Server/AD, DNS, DHCP; SAN/NAS/object storage). Ensure patching, firmware, capacity, security, and uptime are consistently maintained across all environments.
Plan and execute cloud migration initiatives into Azure. Assess workloads for lift-and-shift vs. re-platforming, prioritize low-risk and high-impact candidates, project costs, design and document migration runbooks, and execute migrations using Azure-native services (including Azure Site Recovery, identity integration with Entra ID, and DR strategy alignment) with minimal downtime and operational disruption.
Participate in on‑call rotation, after‑hours maintenance, and incident response to ensure system availability.
Lead infrastructure projects end‑to‑end: planning, execution, stakeholder communication, and post‑implementation review.
Act as the internal owner of infrastructure monitoring and incident response. Oversee MSP monitoring services to ensure coverage, accuracy, and responsiveness; validate alerts, eliminate noise, and drive proactive and reactive issue resolution to minimize downtime and reduce MTTR.
Own the security posture of the hybrid and Azure environment. Enforce security best practices across identity, networking, and infrastructure; continuously monitor system health and security signals; proactively identify and remediate risks, misconfigurations, and unnecessary resource sprawl. Partner with the MSP and Security/SOC to escalate and drive resolution of advanced threats and vulnerabilities.
Manage OS and application lifecycle: installation, patching, upgrades, troubleshooting across Windows and a small Linux footprint.
Maintain thorough, current documentation for systems, architecture, procedures, and DR playbooks.
Drive process improvements using virtualization, cloud, and automation technologies.