HEARTLAND BUSINESS SYSTEMS LLC-posted 4 months ago
Mid Level
Fayetteville, AR
501-1,000 employees

The Senior Cloud Infrastructure Engineer - I role will develop, implement, and support related services and solutions for consulting clients. This position will build a customer-focused relationship with clients to identify business challenges and develop specifications and requirements to arrive at the best solution. This is a highly technical and challenging but exciting and rewarding role that brings expectations for expertise across Azure Infrastructure, M365, and Entra ID – with security throughout, and extending into adjacent technologies. Our team is predominantly customer-facing, dedicating most of each work week to direct consultations with clients. The role will develop specializations around technology sets such as platform, infrastructure, and security and around multiple target customer profiles such as K-12, higher education, SMB, enterprise/commercial, and/or government. The Senior Cloud Infrastructure Engineer I’s are expected to obtain and hold eight (8+) certifications, to meet the demand and expectations of our customers and to meet the requirements of our partner designations. An individual certification path towards meeting these goals will be included on a professional development plan upon hire. The Senior Cloud Infrastructure Engineer I will specialize or possess a well-rounded combination of one of the following Microsoft Cloud focus areas: Azure Infrastructure (IaaS/PaaS); End-user Compute (EUC): Microsoft Intune and Defender for Endpoint/Server; and/or Security, with a focus on Microsoft Purview.

  • Work as a member of the HBS Cloud Architecture Team (CAT) as a leader and contributor that provides consultative and proactive project support to Heartland Business Systems’ (HBS) account base.
  • Collaborate and be a leader across multiple internal teams to ensure successful delivery and timely execution of the scope of work.
  • Research new products for selection, enhance configuration standards and best practices, and educate team members on these products and services to enhance the sales process.
  • Provide senior-level support, maintenance, and administration for customer environments and review for other potential concerns or enhancement opportunities.
  • Assist with the development and implementation of the Azure cloud security architecture for protecting PHI/PII/PCI data deployed into various cloud, hybrid, HBS Cloud, and on-premises systems.
  • Implement and manage security architectures for cloud/hybrid systems.
  • Assess, develop, implement, optimize, and document a comprehensive set of security technologies and processes, data protection, cryptography, key management, identity, and access management (IAM) within SaaS, IaaS, PaaS, and other cloud environments.
  • Work in and always model a positive team atmosphere between regional and virtual practices while maintaining a professional and respectful demeanor.
  • Provide input to the development of career plans and education goals for engineers, including mentoring college Interns or recent college graduates.
  • Create and maintain detailed documentation of past projects to potentially provide time estimates and project scopes for new related projects.
  • Obtain and maintain current vendor/industry specific certifications and stay current on new products and solutions by utilizing networks of resources.
  • Minimum of 1,450 hours (billable + presales) per fiscal year prorated based on start date. These charge hour requirements will be balanced against professional development and on-the-job training.
  • 3+ years of experience in a technical-related field.
  • Designing and architecting Microsoft Cloud and Identity solutions – Including but not limited to: Entra ID (EID / Azure AD / AAD), Entra Connect, SAML SSO and OpenID Connect (OIDC), Conditional Access, Multi-Factor Authentication (MFA), Self-Service Password Reset (SSPR), Password Protection, Passwordless Authentication, Privileged Identity Management (PIM).
  • 3 - 5 years in a technical-related field.
  • 3+ years’ experience working as a consultant.
  • Microsoft Azure Infrastructure: Virtual Machines and Azure Virtual Desktop (AVD), Networking and DNS, including Network Security Groups (NSGs), VPN Gateways, Traffic Managers, Load Balancers, Private Link, and ExpressRoute.
  • Storage, Azure Backup, Azure Site Recovery, Azure Update Manager, Pricing & Cost Management, Azure Secure Score.
  • Designing and architecting systems-based solutions with a focus on the cloud: IaaS, PaaS, and SaaS.
  • Installing and supporting Microsoft enterprise products, including Active Directory (AD) Domain Services (ADDS).
  • Comprehensive understanding of IP networking protocols, including DNS, static routing, TCP, UDP, and ICMP.
  • Configuring on-premises networking, especially firewalls (Palo Alto, Cisco, and/or Fortinet) – towards creating and supporting site-to-site IKE/IPSEC site-to-site (S2S) VPN connections with Azure environments.
  • Microsoft Intune and Defender for Endpoint / Server: Intune, Endpoint Management, Endpoint Security, Application Management, Windows Autopilot, Defender for Endpoint (MDfE / MDATP), Defender for Servers, Attack Surface Reduction (ASR) rules, Secure Score.
  • Microsoft Security: Purview – including, but not limited to: Audit, Data Lifecycle Management / Retention Policies, eDiscovery, Data Loss Prevention (DLP), Information Protection (AIP), Defender for Office 365 (MDO / M365D), Defender for Identity (MDI / AATP), Defender for Cloud, Defender for Cloud Apps (MCAS / MDCA), Secure Score.
  • PowerShell, Python, or other scripting and development background.
  • Azure Sentinel, including Kusto Query Language (KQL).
  • Public Key Infrastructure (PKI), including working with X.509 certificates and CSRs.
  • Orchestration and automation of cloud deployment (Bicep & ARM Templates, Terraform, Chef, Ansible, etc.).
  • Developing and maintaining security architecture for PHI/PII/PCI data in various cloud, hybrid-cloud, HBS Cloud and on-premises systems.
  • Thycotic / Delinea Secret Server Cloud (SSC) – deployment and configuration.
  • Dynamic IP routing protocols, including BGP.
  • Familiarity or experience with Microsoft Exchange, Linux, Cisco (Hyperflex, Nexus, UCS), HPE Nimble, HPE ProLiant, Dell PowerEdge, VMware ESXi, Nutanix, Hyper-V, and Software Defined Networking (SDA, SD-WAN).
  • Experience with Microsoft 365, including Exchange Online, SharePoint, OneDrive, Teams, ConnectWise and Hudu.
  • Bachelor’s Degree or equivalent (or relevant) certifications.
  • At least one or more of the below preferred certifications.
  • Must be able to successfully pass a background check per Criminal Justice Information Services (CJIS) requirements, including fingerprinting and criminal history review.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service