Senior Cloud Systems Engineer

Central Pacific Bank•Honolulu, HI

9d•$86,503 - $122,510

About The Position

This position maintains and supports the bank’s infrastructure, contributes to projects that improve efficiency and security, and identifies and resolves hardware, software, network carrier, and security issues across multiple computer environments and platforms. The role designs, implements, administers, and supports enterprise server, application, and cloud platforms, with senior-level responsibility for operating systems, application hosting and middleware, identity, endpoint management, Microsoft 365, certificates, deployment, monitoring, and production support. As a senior technical subject matter expert for hybrid systems and cloud solutions, the engineer leads the design and implementation of Microsoft Azure and AWS services, cloud-hosted application platforms, migrations, automation, security controls, identity integration, resiliency, and operational standards. The role coordinates with infrastructure-as-a-service and network providers while retaining technical ownership of server, application, cloud, identity, endpoint, and administration outcomes. The position also supports network services and enterprise system availability, provides technical leadership and mentorship, and prepares technical designs, standards, runbooks, support documentation, and audit evidence. All duties and customer interactions are expected to align with the company’s stated core values and professional competencies.

Requirements

High school diploma or GED equivalency required.
Bachelor’s degree from an accredited four-year university in Computer Science, Information Systems, Engineering, or a related field required.
At least 8 years of enterprise systems engineering experience administering, deploying, maintaining, and troubleshooting Windows Server, Active Directory, DNS, Group Policy, enterprise applications, IIS, middleware, and hybrid infrastructure environments.
At least 6 years of cloud engineering and architecture experience designing, implementing, securing, and administering Microsoft Azure and/or AWS environments, including compute, networking, storage, identity, monitoring, backup, and resiliency.
At least 6 years of experience administering Microsoft Entra ID, Microsoft Intune, and Microsoft 365, including identity management, SSO, MFA, Conditional Access, endpoint management, and enterprise integration.
At least 6 years of enterprise application and security engineering experience deploying and supporting enterprise applications, managing PKI and SSL/TLS certificates, implementing system hardening, remediating vulnerabilities, and troubleshooting complex application and authentication dependencies.
At least 4 years of experience with automation, operations, and resiliency, including PowerShell, Python, or infrastructure-as-code; monitoring, patch management, backup and recovery, disaster recovery, incident management, and change management processes.
At least 3 years of technical leadership and project execution experience independently planning, designing, implementing, and documenting complex technical solutions; leading cross-functional initiatives; coordinating vendors; and mentoring technical staff.
Ability to perform light physical work and move or lift items up to 20 pounds.
Ability to operate and proficiently use standard office equipment, including a phone, copier, personal computer, and other work-related mechanical or electronic devices and applications.
Ability to communicate clearly verbally and in writing with internal and external customers and to hear sufficiently for daily discussions and interactions.
Ability to read and understand bank-related documents.
Ability to work in a conventional office setting, sit at a desk or workstation for long periods, and adapt to different work environments as needed.

Nice To Haves

Azure and/or AWS certifications preferred.
Microsoft role-based certification such as Endpoint Administrator, Identity and Access Administrator, or Microsoft 365 Administrator preferred.

Responsibilities

Perform senior systems-engineering work across Windows Server and, where applicable, Linux; Active Directory; DNS; DHCP; application hosting and middleware; application deployment; service accounts; monitoring; patching; and production troubleshooting.
Design, implement, configure, and administer Microsoft IIS, web and application servers, Windows services, Java/JBoss/WildFly or comparable runtimes, scheduled jobs, and supporting application components.
Administer certificates and TLS dependencies, including requests, renewals, installation, bindings, trust chains, keystores, expiration monitoring, and troubleshooting.
Lead server and application lifecycle work, including technical design, migrations, upgrades, implementation, rollback, validation, operational transition, and root-cause analysis.
Coordinate with infrastructure-as-a-service providers on compute, storage, backup, virtualization, and data-center services while retaining responsibility for systems and application requirements.
Administer Microsoft Intune device enrollment, configuration, compliance, application packaging and deployment, endpoint security, update policies, and troubleshooting.
Administer Microsoft Entra ID users and groups, enterprise applications, Conditional Access, MFA, SSO, RBAC, application registrations, service principals, hybrid identity, and privileged-access controls.
Support Microsoft 365 administration, including Exchange Online, Teams, SharePoint/OneDrive, licensing, tenant configuration, security controls, service health, and issue resolution as assigned.
Integrate endpoint, identity, Microsoft 365, on-premises systems, SaaS, Azure, and AWS services into secure-access and administration patterns.
Provide network service support, including building servers, switches, routers, and workstations; test and upgrade software; and assist network users with network-related problems.
Help ensure enterprise systems are available to internal and external customers 24x7 and operate at peak performance; assist with communication and coordination of network maintenance, backups, and other downtime.
Design, deploy, configure, and administer Azure and AWS services supporting enterprise applications, including compute, storage, networking, load balancing, DNS, private connectivity, backup, monitoring, and managed platform services.
Design and support cloud-hosted application architectures, hybrid integrations, landing-zone patterns, subscriptions/accounts, resource organization, tagging, policy guardrails, and standardized platform configurations.
Implement cloud identity and access using Microsoft Entra ID, AWS IAM, RBAC, federation, SSO, MFA, service identities, application registrations, secrets, and least-privilege access patterns.
Lead cloud migrations and modernization, including workload assessment, dependency mapping, target-state design, migration planning, testing, cutover, rollback, optimization, and operational handoff.
Troubleshoot complex cloud compute, application, identity, networking, security, performance, availability, and integration issues; serve as the senior escalation point for production cloud services.
Build and maintain automation and infrastructure-as-code using PowerShell, Python, APIs, Terraform, and/or native cloud tools such as ARM templates or AWS CloudFormation.
Implement monitoring, logging, alerting, backup, high availability, disaster recovery, vulnerability remediation, secrets management, encryption, policy compliance, and recovery testing for assigned systems and cloud services.
Produce technical designs, architecture diagrams, standards, runbooks, implementation and rollback plans, support documentation, and audit evidence for systems and cloud platforms.
Provide limited network administration and troubleshooting for systems and cloud services, including DNS, DHCP, VPC/VNet concepts, routing, firewall and port requirements, private endpoints, VPN connectivity, proxies, and load balancers; coordinate advanced network engineering with the appropriate team or provider.
Mentor engineers and administrators, review technical work, evaluate new technologies, and communicate technical risks, tradeoffs, and recommendations to technical and nontechnical stakeholders.
Perform duties and interact with internal and external customers in alignment with the company’s stated core values and professional competencies.