Senior Azure Infrastructure Engineer

Seakeeper Inc•Leesport, PA

2d•Onsite

About The Position

Seakeeper is the global leader in marine stabilization, on a mission to transform the way people experience life on the water, and our Microsoft cloud platform is the engine room that keeps the whole operation running. As our Senior Azure Infrastructure Engineer, you won't just maintain a cloud environment; you'll build one from the keel up. You'll be the hands-on technical owner of Seakeeper's entire Microsoft cloud ecosystem – Azure, Microsoft 365, Entra ID, Intune, and the automation that ties it all together – with the autonomy to design it right and the runway to make it your own. You will design, build, and operate the Azure foundation that our business runs on: the landing zone, subscription model, identity, networking, security baselines, and Infrastructure as Code. You'll make an immediate impact by: Azure Platform & Landing Zone Engineering Owning our Azure landing zone end-to-end — the architecture, guardrails, and governance every future workload will build on Standing up new subscription environments as the business grows, done right the first time Codifying our entire infrastructure so nothing lives in one person's head — repeatable, reviewable, and built to outlast any one engineer Cloud Migration (AWS to Azure) Leading our AWS-to-Azure migration from strategy through cutover — a rare chance to shape a platform's future rather than inherit someone else's decisions Making sure everything that moves lands better than it left — secure, monitored, and cost-smart from day one Cloud-Native & Container Platform Support Standing up the infrastructure behind our containerized and API-driven platforms (Azure Kubernetes Service) Pushing our cloud-native strategy forward as multi-cloud needs evolve alongside the migration Championing modernization across the Azure estate — you'll be the one spotting what's next Infrastructure DevOps & CI/CD Building the CI/CD backbone for infrastructure — treating infra code with the same discipline, rigor, and review as application code Partnering closely with our Software Engineering, DevOps & AI team where infrastructure and application pipelines meet Identity & Access Engineering Owning Microsoft Entra ID and shaping how every person and system authenticates across the company Designing RBAC standards that keep access clean as Seakeeper scales Driving Privileged Identity Management (PIM) forward — killing standing admin access in favor of just-in-time, approved access Advancing our Zero Trust posture alongside cybersecurity and our parent company's security bar Automation Engineering Building the automation layer — Azure Automation, PowerShell, Microsoft Graph API, Logic Apps — that takes manual work off everyone's plate Automating the full employee lifecycle: onboarding, offboarding, licensing, provisioning, compliance Treating every automation like production code — version-controlled, documented, and built to hand off cleanly Endpoint & Microsoft 365 Engineering Owning Intune engineering and partnering with our systems administrator to keep endpoints running smoothly Continuously leveling up our Microsoft 365 environment Platform Operations, Observability & Documentation Building the monitoring and reporting that gives leadership real visibility into platform health Setting service reliability goals and the operational playbooks that back them up Documenting and cross-training as you go — knowledge-sharing isn't an afterthought here, it's part of the job

Requirements

Bachelor’s degree in computer science, information systems (10+ years of progressive IT experience will be considered in place of a degree)
7+ years turning enterprise Microsoft cloud environments into something people can actually rely on
A production Azure migration you've personally seen through, start to finish (bonus points if it is AWS to Azure — this is exactly the kind of project waiting for you here)
Deep fluency in Azure landing zones, subscription design, and network governance
A strong handle on Entra ID, Conditional Access, and Privileged Identity Management
An eye for clean, scalable RBAC design
Comfort automating with Azure Automation, Logic Apps, and Microsoft Graph API
Infrastructure as Code chops — Terraform and/or Bicep
A track record of bringing real DevOps discipline to infrastructure — CI/CD, source control, secrets management
Experience wiring up API integrations across platforms
Hands-on time with containerized workloads and Kubernetes (Azure Kubernetes Service)
Intune engineering experience
PowerShell skills built for production, not just scripts
Fluency in Git-based workflows (Azure DevOps or GitHub)
Required certifications: SC-300 (or equivalent identity experience) and AZ-104 (or equivalent Azure administration experience)

Nice To Haves

AZ-305 (Azure Solutions Architect Expert), AZ-500, SC-100, MS-102, or any DevOps-related certification

Responsibilities

Own our Azure landing zone end-to-end — the architecture, guardrails, and governance every future workload will build on
Stand up new subscription environments as the business grows, done right the first time
Codify our entire infrastructure so nothing lives in one person's head — repeatable, reviewable, and built to outlast any one engineer
Lead our AWS-to-Azure migration from strategy through cutover
Ensure everything that moves lands better than it left — secure, monitored, and cost-smart from day one
Stand up the infrastructure behind our containerized and API-driven platforms (Azure Kubernetes Service)
Push our cloud-native strategy forward as multi-cloud needs evolve alongside the migration
Champion modernization across the Azure estate
Build the CI/CD backbone for infrastructure — treating infra code with the same discipline, rigor, and review as application code
Partner closely with our Software Engineering, DevOps & AI team where infrastructure and application pipelines meet
Own Microsoft Entra ID and shape how every person and system authenticates across the company
Design RBAC standards that keep access clean as Seakeeper scales
Drive Privileged Identity Management (PIM) forward — killing standing admin access in favor of just-in-time, approved access
Advance our Zero Trust posture alongside cybersecurity and our parent company's security bar
Build the automation layer — Azure Automation, PowerShell, Microsoft Graph API, Logic Apps — that takes manual work off everyone's plate
Automate the full employee lifecycle: onboarding, offboarding, licensing, provisioning, compliance
Treat every automation like production code — version-controlled, documented, and built to hand off cleanly
Own Intune engineering and partner with our systems administrator to keep endpoints running smoothly
Continuously level up our Microsoft 365 environment
Build the monitoring and reporting that gives leadership real visibility into platform health
Set service reliability goals and the operational playbooks that back them up
Document and cross-train as you go — knowledge-sharing isn't an afterthought here, it's part of the job