Infrastructure Engineer (Cloud & On-prem)

KIK Consumer Products

11h•Remote

About The Position

KIK Consumer Products is seeking an Azure Cloud Engineer and Office 365 administrator for a remote position. This role is responsible for designing, deploying, and managing Azure infrastructure, including virtual machines, networking, and security controls. The focus is on automating deployments, optimizing cloud performance, and ensuring high availability. As a secondary responsibility, the engineer will support Microsoft 365 services such as Exchange Online, Teams, and SharePoint, handling user administration, license management, and basic security policies. This blended role requires strong knowledge of Azure IaaS/PaaS and practical experience with Microsoft 365 administration in a hybrid cloud environment.

Requirements

Azure configuration fundamentals – VNets, NSGs, VMs, storage, RBAC, Key Vault.
Comfort working in a low-automation environment and maturing it incrementally.
Exposure to Azure VMware Solution (AVS) or on-prem vSphere migrations to Azure.
5+ years configuring Azure or other public-cloud infrastructure.
Exchange Online (mail routing, hygiene, retention/eDiscovery, DL automation).
Solid administration of Microsoft 365 & E5 workloads (Teams, SharePoint, OneDrive, Intune, Defender for Office 365, Purview, Sentinel).
Advanced PowerShell and Microsoft Graph scripting (bulk provisioning, policy deployment, reports).
Working knowledge of Entra ID (Azure AD) hybrid identity, Conditional Access, MFA, PIM, and Zero-Trust principles.
Strong analytical troubleshooting, documentation, and communication abilities.
3+ years administering Microsoft 365 / Exchange Online in a production environment.
Demonstrated track record of automating tasks with PowerShell.
Familiarity with Microsoft 365 E5 security/compliance tooling.
High school diploma or GED required.

Nice To Haves

Bachelor's degree preferred.

Responsibilities

Building and securing Azure VNets, subnets, NSGs, VPN/ExpressRoute links, virtual machines, storage accounts, Key Vault, and basic PaaS services (App Service, Azure Files/Blobs).
Introducing ARM/Bicep or Terraform templates as infrastructure-as-code practices mature.
Configuring and operating Azure VMware Solution (AVS), handling HCX migrations, NSX-T networking, and day-to-day vSphere management in the Azure private cloud.
Overseeing Exchange Online mail flow, SPF/DKIM/DMARC configuration, retention and distribution-list lifecycle.
Administering Teams, SharePoint, OneDrive, Intune, Viva, and license assignments.
Deploying E5 features such as Defender for Office 365.
Operating hybrid Entra ID, maintaining Azure AD Connect or Cloud Sync, enforcing Conditional Access and MFA, using Privileged Identity Management, and monitoring Identity Protection alerts.
Creating PowerShell scripts for provisioning, policy enforcement, and reporting.
Publishing runbooks and SOPs to turn manual tasks into repeatable processes.
Mentoring IT teammates on cloud-native best practices.
Translating business requirements into secure, scalable M365 and Azure solutions.
Partnering closely with security, infrastructure, and application teams to advance cloud adoption.