IT Infrastructure & Cloud Engineer

Watchmaker Genomics•Boulder, CO

10d•Onsite

About The Position

Watchmaker Genomics is inviting applications for the full-time position of IT Infrastructure & Cloud Engineer, an onsite role in our Boulder, Colorado office. This position reports to the Director IT, Boulder site for day-to-day execution and service delivery, and is responsible for hands-on execution and maintenance of Watchmaker's network and Azure cloud infrastructure at the Boulder site. This role works in close partnership with our Infrastructure & Cloud Lead based in Cape Town, South Africa, who sets global architecture standards and technical direction for the network and cloud environment. The Boulder-based Engineer is the primary hands-on resource for network engineering and Azure administration in the US, translating that global direction into local implementation and feeding site-level needs and constraints back into global design decisions. Windows and macOS endpoint management is owned day-to-day by our End User Compute Engineer; this role partners with that engineer on compliance standards and infrastructure-level policy, but is not expected to carry endpoint administration as a primary workload. The successful candidate will thrive in a dynamic, fast-paced environment and contribute directly to our company culture and success. This position offers hands-on responsibility for Watchmaker's Boulder-site network and cloud infrastructure, close collaboration with a global IT team spanning the US and South Africa, and the opportunity to mentor service desk staff on complex infrastructure and network escalations as the team grows.

Requirements

Advanced network engineering: hands-on experience configuring and troubleshooting routing, switching, wireless, firewalls, VPNs, and load balancing in an enterprise environment; strong knowledge of network protocols and network security best practices.
Microsoft Azure & Entra: proven, hands-on experience building, administering, and maintaining Azure infrastructure and cloud services, and administering Microsoft Entra identity and access management (conditional access, MFA, joiner/mover/leaver).
Microsoft Defender: experience with security operations and cyber security protection across endpoints and cloud workloads, including patch and vulnerability management.
Windows Server administration: proficiency managing and administering Windows servers, including Active Directory, DNS, DHCP, and other core services.
Automation and scripting: experience with automation tools and scripting languages (e.g., PowerShell, Python, Bash) for automating system administration tasks and managing large-scale environments.
Disaster recovery: practical experience designing and executing DR plans, including management and verification of backup systems and business continuity.
Project experience: experience leading or participating in IT projects — system upgrades, migrations, and deployments — with the ability to coordinate across teams.
Operational discipline: a disciplined, documentation-first approach to operations with a proactive risk mindset — anticipating issues, communicating early, and escalating appropriately.
Collaboration: strong interpersonal skills and the ability to work as an effective member of a distributed, global team.

Nice To Haves

Experience with Microsoft Intune and/or JAMF for endpoint management is a plus, but is not required — day-to-day endpoint administration is owned by our End User Compute Engineer.
Experience in multi-national or corporate environments are essential
Experience with the ITIL framework and other IT Service management tools
Familiarity with industry standards and regulations such as ISO, NIST, POPIA, GDPR, or HIPAA, and experience implementing security policies to meet compliance requirements
Computer Systems Validation (CSV) experience in manufacturing environments

Responsibilities

Build, administer, and maintain Watchmaker's Azure cloud infrastructure and services, and administer identity, authentication, and access management in Microsoft Entra — including conditional access, multi-factor authentication, and joiner/mover/leaver processes — in line with global architecture and security standards.
Design, configure, maintain, and troubleshoot the site's network infrastructure, including switching, wireless, firewalls, VPNs, and load balancing.
Implement complex IT infrastructure — servers, storage, networks, and cloud services — in line with Watchmaker's global architecture standards.
Operate security systems across endpoints and cloud workloads; monitor, triage, and respond to security alerts; execute patch and vulnerability management using Microsoft Defender.
Partner with the End User Compute Engineer on Windows and macOS endpoint compliance, configuration baselines, and application deployment standards.
Execute or oversee the installation, configuration, and maintenance of servers, virtual environments, and enterprise applications, including Active Directory, DNS, DHCP, and other core services.
Monitor server, network, storage, and cloud performance; troubleshoot issues and optimize infrastructure for stability, security, and efficiency.
Develop and use automation tools and scripts (e.g., PowerShell, Python, Bash) to streamline operations and system management.
Perform required Computer Systems Validation actions to support ISO 13485.
Maintain accurate infrastructure documentation, work instructions, and knowledge base articles; execute all changes through formal change management; track and coordinate purchasing for infrastructure and network hardware.
Proactively identify, communicate, and escalate risks, incidents, and capacity constraints to the Director IT, Boulder site in a timely manner.
Provide technical guidance to service desk staff on complex network and infrastructure escalations, and collaborate with cross-functional and global teams to meet business objectives.
Design and implement disaster recovery (DR) plans, ensuring critical systems and data can be restored in case of failure or outage, and conduct regular DR testing to validate recovery against defined RTOs and RPOs.
Oversee regular backups of data, systems, and configurations; ensure backups are complete, secure, and recoverable, and that restores are verified through scheduled test recoveries.
Implement and maintain redundancy for key systems (servers, storage, network components) to minimize downtime and ensure business continuity during failures.
Lead response efforts during major outages or incidents, including root cause analysis for recurring problems, coordinating recovery activities, and communicating status updates to stakeholders.
Monitor resource usage and cloud spend (capacity planning and regular cloud cost reviews) to forecast future needs and ensure scalability and cost efficiency.
Maintain and regularly update documentation of continuity and recovery procedures to reflect business changes and new technologies.