Infrastructure & Cloud Systems Engineer

Courser•,

1d•Remote

About The Position

We are looking for an Infrastructure & Cloud Systems Engineer at Courser to serve as the core technical anchor and guardian of our enterprise cloud-native ecosystem. In this role, you will own the day-to-day engineering, scaling, and operational reliability of our Microsoft 365, Microsoft Entra ID, and Azure environments. Reporting directly to the Director of IT & Security Operations, you will bridge the gap between front-line helpdesk operations and architectural strategy, acting as our Tier 3/4 escalation lead and working closely with our Security & Compliance and Automation pods to ensure seamless, secure service delivery.

Requirements

6+ years of hands-on experience in enterprise systems engineering, cloud administration, or infrastructure delivery, ideally within an MSP or high-growth multi-tenant environment.
Deep proficiency in Microsoft Entra ID & Microsoft 365, including hands-on experience with Conditional Access, PIM, Intune endpoint compliance (Windows 11 / macOS), and Exchange Online.
Demonstrated experience with Microsoft Azure & Virtualization, including virtual networking (VNets, VPNs, NSGs), resource groups, and Azure Virtual Desktop (AVD) administration (experience with Nerdio Manager strongly preferred).
Strong scripting and automation capabilities using PowerShell and Microsoft Graph API to manage cloud environments.
Experience in tiered support and escalation structures, specifically collaborating with PSA/ticketing systems (ConnectWise) and outsourced Tier 1/2 service desks.
Demonstrated ability to take extreme ownership of technical problems, communicate cross-functionally, and manage multiple priorities effectively.

Nice To Haves

Microsoft Certified: Azure Administrator Associate (AZ-104)
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)
CompTIA Security+

Responsibilities

Design, implement, and maintain core Azure infrastructure, virtual networks, storage, and resource groups.
Manage session host pools, golden image updates, and auto-scaling within Azure Virtual Desktop (AVD) using Nerdio Manager to optimize platform performance and cost efficiency.
Administer Microsoft Entra ID, managing directory hygiene, Conditional Access policies, Privileged Identity Management (PIM), and phishing-resistant authentication (FIDO2 passkeys).
Maintain Group Delegated Access Permissions (GDAP) to eliminate standing admin accounts and enforce least-privilege partner access.
Serve as the internal Tier 3/4 escalation authority for advanced identity, messaging (Exchange Online), virtualization, and cloud infrastructure issues.
Perform deep root cause analysis and lead complex troubleshooting efforts.
Interface directly with our outsourced Tier 1/2 helpdesk partner to validate escalation workflows, enforce ticket routing boundaries, and monitor SLA performance.
Author and maintain standard operating procedures (SOPs) enabling helpdesk technicians to resolve tier-1/2 issues independently.
Partner with the Security & Compliance Engineer to enforce system hardening baselines, maintain SOC 2 Type II compliance controls, and configure automated evidence gathering.
Act as a secondary technical responder within the Incident Response lifecycle to execute containment actions (e.g., session revocation, network isolation).
Drive process efficiency by writing robust PowerShell scripts and leveraging Microsoft Graph API to automate recurring tenant administrative tasks, reporting, and bulk identity actions.

Benefits

Competitive benefits package, including medical, dental, vision, and life insurance
401(k) company match
Flexible vacation time
Paid sick time
10 Holidays including your Birthday and a Floating Holiday!
Healthy Lifestyle reimbursement
Membership Subsidy
40 Hours for Volunteer Time
Paid parental leave
Reimbursement for ongoing certifications