Senior Cloud Systems Administrator

Energy Trust of Oregon•Portland, OR

1d•$118,800 - $187,700•Hybrid

About The Position

The Senior Cloud Systems Administrator is responsible for the secure, reliable, and cost-effective administration and strategic development of Energy Trust of Oregon’s Microsoft cloud environment, including Microsoft Azure, Microsoft 365, Microsoft Entra ID, and related services. The role assesses and improves tenant configuration; establishes governance for identity, access, licensing, groups, and cloud resources; designs and implements scalable cloud solutions; and leads modernization and migration of on-premises systems and services to the cloud. The position works with IT leadership, infrastructure team members, software development staff, system owners, and business partners to align cloud initiatives and architectural decisions with organizational goals. It ensures production changes are reviewed, communicated, and documented before implementation, and supports knowledge sharing through mentoring, cross-training, documentation, and collaborative problem-solving. The role serves as a senior technical advisor to IT leadership, project teams, and business partners and reports to the IT Infrastructure Manager. The position may be performed remotely, in a hybrid arrangement, or from an office. The administrator is expected to report to the Portland office at least quarterly for staff and other in-person meetings. Occasional travel may be required for meetings, training, or technology implementation activities. The position has no supervisory responsibilities.

Requirements

Bachelor’s degree in information technology, computer science, or a related field, or equivalent professional experience.
Seven years of progressively responsible experience administering, engineering, and supporting Microsoft infrastructure and cloud services, including experience in a senior or technical role.
Advanced experience with Microsoft Azure, Microsoft 365, Microsoft Entra ID, and hybrid identity environments, including governance, security, licensing, permissions, access management, and directory services.
Demonstrated ability to assess complex technical environments, develop architecture and remediation recommendations, and implement approved improvements and modernization initiatives.
Demonstrated ability to advise on, plan, and execute cloud migrations, cloud-based solutions, integrations, automation, and operational improvements.
Working knowledge of cloud networking, storage, backup and recovery, monitoring, security, resiliency, and cost-management principles.
Strong analytical, troubleshooting, documentation, communication, and project-planning skills, including ability to explain technical concepts, options, and risks to technical and non-technical audiences.
Demonstrated ability to independently learn emerging technologies, evaluate solutions, develop proofs of concept, and share knowledge through documentation, mentoring, and training.

Nice To Haves

Relevant Microsoft certifications, such as Azure Administrator, Azure Solutions Architect, Identity and Access Administrator, Cybersecurity Architect, or Microsoft 365 Administrator.

Responsibilities

Assess Microsoft Azure, Microsoft 365, Microsoft Entra ID, and related services; identify configuration, security, governance, reliability, and cost-management gaps; and lead prioritized remediation.
Establish, advise on, and maintain cloud governance standards for naming, tagging, ownership, lifecycle management, documentation, change control, and environment separation.
Review Microsoft defaults and existing configurations for risks such as data loss, inappropriate access, uncontrolled service adoption, and shadow IT, and implement appropriate controls.
Design and administer identity and access controls based on least privilege and role-based access, including administrative roles, privileged access, Conditional Access, multifactor authentication, service accounts, enterprise applications, and access reviews.
Develop standards and migration plans for modernizing on-premises Active Directory security groups and Microsoft Entra ID groups, including assigned and dynamic membership.
Design, implement, and maintain dynamic group rules, group ownership and review processes, directory synchronization, and supported writeback capabilities between Microsoft Entra ID and on-premises Active Directory.
Design group-based and automated licensing practices aligned with job responsibilities and approved business needs.
Partner with business and technical stakeholders to turn needs into secure, supportable, and cost-effective cloud architecture and implementation plans.
Design, implement, and support Azure-hosted forms, websites, integrations, workflows, and related solutions that may exchange data with Microsoft Dynamics 365 and other business systems.
Produce architecture diagrams, technical recommendations, implementation roadmaps, proof-of-concept environments, demonstrations, testing plans, and operational documentation.
Advise on, plan, and execute migrations from on-premises systems to cloud services, including discovery, dependency analysis, design, testing, cutover, rollback, documentation, and transition to ongoing support.
Lead migration efforts in areas of expertise, evaluate project complexity, identify risks and resource needs, and recommend when additional internal resources, specialized expertise, or consulting support are needed.
Advise on cloud backup and recovery design and, in some cases, maintain business continuity, monitoring, alerting, storage, and resilience capabilities appropriate to business and security requirements.
Automate repeatable administration and deployment activities using scripting, configuration management, infrastructure-as-code, or workflow tools when appropriate.
Provide advanced troubleshooting and operational support for Microsoft cloud and hybrid services, coordinating with vendors and Microsoft support when needed.
Develop standards, procedures, and knowledge articles, and train IT staff on adopted technologies and operational practices.
Perform other job-related duties as assigned.
Perform all job functions safely.