IT Systems and Cloud Engineer

Storage Solutions Inc•Westfield, IN

1d•Hybrid

About The Position

We are looking for a versatile, hands-on IT professional who thrives across a wide operational range — from rolling up their sleeves on Tier 2/3 helpdesk escalations to architecting and maintaining the cloud and SaaS infrastructure that keeps a 270-person organization running. This is a high-impact individual contributor role that sits between day-to-day technical support and strategic systems ownership. You will partner directly with the Desktop Services Manager (who handles Tier 1-2 support, endpoint hardware/software and related management systems) and report to the Director of IT, acting as the primary technical depth of the team. You will own the cloud platform layer, drive modern workplace initiatives, and be the go-to escalation point for complex issues across a predominantly SaaS-based environment.

Requirements

4–7+ years of progressive IT experience spanning helpdesk/systems support and cloud administration
Deep hands-on expertise with Microsoft 365 administration (Exchange Online, Teams, SharePoint, Intune, Entra ID)
Proven experience managing Azure environments including resource groups, networking, IAM, and cost management
Working knowledge of Intune/Endpoint Manager: Autopilot, compliance policies, app deployment, Conditional Access, to be applied in cooperation with the Desktop Services Manager.
Proficiency in PowerShell scripting for administration and automation; experience with Microsoft Graph API a strong plus
Solid understanding of identity and access management concepts (SSO, SAML, OAuth, SCIM)
Experience supporting a SaaS-heavy environment with 10+ integrated applications
Excellent diagnostic and troubleshooting skills; comfortable owning problems through to resolution
Strong communication skills — able to explain technical concepts to non-technical stakeholders and document clearly

Nice To Haves

Microsoft certifications: MS-102 (M365 Administrator Expert), AZ-104 (Azure Administrator), SC-300 (Identity & Access), or equivalent
Experience with endpoint security tooling (we use Defender for Endpoint)
Familiarity with ITSM platforms and processes (we use Freshservice)
Exposure to compliance frameworks such as NIST CSF and ISO 27001
Experience with Power Platform (Power Automate, Power Apps) for workflow automation
Background supporting remote or hybrid organizations with distributed users
Ownership mindset — sees problems through to resolution
Ability to stay calm under pressure in high-visibility incidents
Collaborative — works well between strategic and operational layers
Continuous learner — keeps pace with a fast-moving platform landscape
Clear communicator — technical and non-technical audiences alike
Self-directed — manages time and priorities without requiring supervision
Cloud platform depth (Azure, M365)
Identity & access management understanding
Endpoint management (Intune/MDM) understanding
Scripting & automation (PowerShell) experience
SaaS integration & administration experience
Security-first thinking

Responsibilities

Administer and optimize Microsoft 365 tenant (Exchange Online, SharePoint, OneDrive, Teams, Intune, Entra ID/Azure AD, etc)
Manage a small Azure infrastructure including virtual machines, networking, storage, and cost optimization (currently only a few machines related to current ERP, likely soon to be retired)
Own integrations between SaaS platforms, ensuring SSO, SCIM provisioning, and data flow consistency across the application stack
Evaluate, onboard, and retire SaaS tools in coordination with business stakeholders and the Director of IT
Maintain licensing inventory, renewals, and cost tracking across all cloud subscriptions
Oversee backup, DR, and business continuity posture for cloud-hosted workloads
Design, deploy, and maintain Intune/Endpoint Manager policies for Windows device management, in coordination with the Desktop Services Manager
Build and manage Autopilot enrollment, compliance policies, conditional access rules, and application deployment (Intune and PatchMyPC)
Develop and maintain Microsoft 365 governance frameworks (Teams structure, SharePoint architecture, retention policies, DLP) in compliance with IT Policies (NIST CSF 2.0 + small portions of ISO 27001 type compliance / Controls from our parent company in Germany)
Lead adoption of productivity and collaboration tooling, driving usage and training alongside the Desktop Services Manager
Manage identity lifecycle — joiners, movers, leavers — with automation via PowerShell, Graph API, Power Automate, and/or workflows within Freshservice.
Serve as the primary escalation point for complex issues beyond the Desktop Services Manager's scope, including cloud platform errors, identity/access problems, and SaaS integration failures
Troubleshoot and resolve escalated tickets involving M365, Azure, networking, and cross-platform authentication
Develop runbooks, knowledge base articles, and SOPs that enable Tier 1 resolution of repeating issues
Support executive users and high-visibility incidents with urgency and professionalism
Implement and maintain security controls including MFA/passwordless authentication, Conditional Access, Defender for Endpoint, and Purview/Compliance Center policies
Monitor security posture through Secure Score, alert triage, and periodic access reviews
Support audit and compliance activities (SOC 2, cyber insurance questionnaires, vendor assessments) in coordination with the Director of IT
Manage privileged access, role assignments, and least-privilege principles across cloud platforms
Partner with the Director of IT to research, scope, and implement technology initiatives
Work with the Director of IT as a technical translator — documenting system architecture, translating business requirements into technical solutions, and communicating platform decisions clearly
Drive process improvement through automation, scripting (PowerShell, Graph API, Power Automate), and tooling rationalization
Mentor and cross-train the Desktop Services Manager on cloud platform fundamentals to increase team resilience