Senior Cloud Systems Administrator

Energy Trust of Oregon•Portland, OR

About The Position

The Senior Cloud Systems Administrator is responsible for the secure, reliable, cost-effective administration and strategic development of Energy Trust of Oregon’s Microsoft cloud environment, including Microsoft Azure, Microsoft 365, Microsoft Entra ID, and related services. The role assesses and improves tenant configuration; establishes governance for identity, access, licensing, groups, and cloud resources; designs and implements scalable cloud solutions; and leads modernization and migration of on-premises systems and services to the cloud. Working with IT leadership, infrastructure team members, software developers, system owners, and business partners, the administrator translates needs into secure, supportable, and cost-effective solutions. The role advises on major cloud initiatives and architecture, ensures production changes are reviewed, communicated, and documented before implementation, and promotes team knowledge sharing through mentoring, cross-training, documentation, and collaborative problem-solving. The primary focus is modernizing cloud services while maintaining operational continuity and supportability across hybrid environments. The role is a senior technical advisor to IT leadership, project teams, and business partners and has no supervisory responsibilities. Energy Trust offers remote, hybrid, and in-office work options and considers candidates living throughout Oregon and Washington. This position must report to the Portland office at least quarterly for staff and other in-person meetings. Occasional travel may be required for meetings, training, or technology implementation activities.

Requirements

Bachelor’s degree in information technology, computer science, or a related field, or equivalent professional experience.
Seven years of progressively responsible experience administering, engineering, and supporting Microsoft infrastructure and cloud services, including experience in a senior or technical role.
Advanced experience with Microsoft Azure, Microsoft 365, Microsoft Entra ID, and hybrid identity environments, including governance, security, licensing, permissions, access management, and directory services.
Demonstrated ability to assess complex technical environments, develop architecture and remediation recommendations, and implement approved improvements and modernization initiatives.
Demonstrated ability to advise on, plan, and execute cloud migrations, cloud-based solutions, integrations, automation, and operational improvements.
Working knowledge of cloud networking, storage, backup and recovery, monitoring, security, resiliency, and cost-management principles.
Strong analytical, troubleshooting, documentation, communication, and project-planning skills, including the ability to explain technical concepts, options, and risks to technical and non-technical audiences.
Demonstrated ability to independently learn emerging technologies, evaluate solutions, develop proofs of concept, and share knowledge through documentation, mentoring, and training.

Nice To Haves

Relevant Microsoft certifications, such as Azure Administrator, Azure Solutions Architect, Identity and Access Administrator, Cybersecurity Architect, or Microsoft 365 Administrator.

Responsibilities

Assess Azure, Microsoft 365, Microsoft Entra ID, and related services; identify configuration, security, governance, reliability, and cost-management gaps; and lead prioritized remediation.
Establish, advise on, and maintain cloud governance standards for naming, tagging, ownership, lifecycle management, documentation, change control, and environment separation.
Review Microsoft defaults and existing configurations that may create risks involving data loss, inappropriate access, uncontrolled service adoption, or shadow IT, and implement appropriate controls.
Design and administer identity and access controls using least-privilege and role-based access principles, including administrative roles, privileged access, Conditional Access, multifactor authentication, service accounts, enterprise applications, and access reviews.
Develop standards and migration plans for modernizing on-premises Active Directory security groups and Microsoft Entra ID groups, including assigned and dynamic membership.
Design, implement, and maintain dynamic group rules, group ownership and review processes, directory synchronization, and supported writeback capabilities between Microsoft Entra ID and on-premises Active Directory.
Design group-based and automated licensing practices that align access and services with job responsibilities and approved business needs.
Partner with business and technical stakeholders to translate needs into secure, supportable, cost-effective cloud architecture and implementation plans.
Design, implement, and support Azure-hosted forms, websites, integrations, workflows, and related solutions that may exchange data with Microsoft Dynamics 365 environments and other business systems.
Produce architecture diagrams, technical recommendations, implementation roadmaps, proof-of-concept environments, demonstrations, testing plans, and operational documentation.
Advise on, plan, and execute migrations from on-premises systems to cloud services, including discovery, dependency analysis, design, testing, cutover, rollback, documentation, and transition to ongoing support.
Lead migration efforts independently within areas of expertise; evaluate project complexity, identify risks and resource needs, and recommend when additional internal resources, specialized expertise, or consulting support are required.
Advise on cloud backup and recovery design and, in some cases, maintain business continuity, monitoring, alerting, storage, and resilience capabilities appropriate to business and security requirements.
Automate repeatable administration and deployment activities using scripting, configuration management, infrastructure-as-code, or workflow tools when appropriate.
Provide advanced troubleshooting and operational support for Microsoft cloud and hybrid services, coordinating with vendors and Microsoft support when needed.
Develop standards, procedures, and knowledge articles, and train IT staff on adopted technologies and operational practices.
Perform other job-related duties as assigned and perform all job functions safely.

Benefits

Health, dental, and vision insurance.
Employer-sponsored and paid life and disability insurance.
401(k) with a company contribution of 6% of salary after 90 days of employment.
TriMet pass.
Access to health and dependent FSA/HSA accounts.
Generous paid vacation, holidays, and sick days.
Paid volunteer hours.
Employee assistance program.
Career advancement opportunities.
Flexibility to work from home and/or an office space at the Portland, Oregon location.
Work-from-home laptop provided.