Sr. Cloud Infrastructure Engineer - MS Azure

SWCA Environmental Consultants

2d • Hybrid

About The Position

The Sr. Cloud Infrastructure Engineer is responsible for planning, designing, implementing, and operating SWCA’s Microsoft Azure–centric cloud infrastructure. This role leads both project delivery and operational excellence across Azure virtual machines, Azure Virtual Desktop (AVD), networking, security, automation, backup and recovery, and business continuity/disaster recovery (BCDR). This position serves as a technical authority for Azure infrastructure, providing Tier 4/expert-level troubleshooting and architectural guidance. The engineer will work across interconnected systems, including identity (Azure AD/Entra ID and Active Directory), compute, storage, networking, security platforms, cloud-native services, and hybrid integrations. A strong understanding of enterprise networking (WAN/LAN), VPN/SASE technologies, Microsoft 365, and client environments is required. The role emphasizes scalability, resiliency, security, cost optimization, and automation, while ensuring infrastructure aligns with business objectives and industry best practices.
This is a full-time, regular, benefits eligible position with the ability to work remotely, remote/office hybrid, in an office based in the United States.
Application deadline: Our team will begin reviewing applications immediately, and interviews will be scheduled with qualified candidates on a rolling basis. The application process will remain open until we have received a robust pool of qualified candidates. Once we have identified suitable individuals, we may close the application process without prior notice. We appreciate the time and effort invested by all applicants and will carefully consider each submission.

Requirements

• Bachelor's degree or equivalent work experience
• Ability to provide Tier 4 level support
• Must understand Azure systems design, management, and administration
• Experience with Microsoft on-premise tools (AD, GPO, SCCM) and cloud tools (Entra, Intune)
• Experience with automation such as Powershell and/or Python
• Experience in cloud technology
• A minimum of 3 years of relevant experience, 5+ years preferred
• Technical knowledge of current network hardware, protocols, and standards
• Background working with Windows Server and Azure
• Experience working both independently and in a team-oriented, collaborative environment is essential.
• Easily adaptable to rapidly shifting priorities based on business requirements.
• Strong written and oral communication skills including the ability to document all work and explain complex infrastructure concepts to non-technical colleagues and stakeholders.
• Strong interpersonal skills.
• Must be able to learn, understand, and apply new technologies.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Must be willing and able to travel to SWCA offices and manage some off-hours changes/ implementations or on-call hours as needed. Up to 30% travel may be required for equipment and datacenter maintenance, lifecycle management/upgrades, and moves/adds/changes.
• Ability to sit for extended periods of time.
• Dexterity of hands and fingers to operate a computer keyboard, mouse, power tools, and to handle other computer components.
• Occasional inspection of cables in floors and ceilings.
• Lifting and transporting of moderately heavy objects, such as computers and peripherals.

Nice To Haves

• Customer service skills an asset.

Responsibilities

• Plans and executes Azure infrastructure initiatives, including Azure Virtual Desktop (AVD), IaaS/PaaS workloads, hybrid cloud integrations, and cloud networking architectures.
• Designs and maintains secure, scalable Azure environments using VNets, subnets, NSGs, Azure Firewall, routing, VPN/ExpressRoute, and DNS.
• Develops and evolves BCDR strategies leveraging Azure Backup, Azure Site Recovery, geo-redundant storage, and multi-region designs.
• Analyzes cloud technology trends and collaborates with technology leadership to define Azure architecture standards, roadmaps, and delivery processes focused on stability, agility, security, and cost efficiency.
• Leads capacity planning, performance optimization, and cost management using Azure-native tools and best practices.
• Builds, configures, and maintains Azure virtual machines, images, and scale strategies, including standardized VM build processes and lifecycle management.
• Administers and optimizes Azure Virtual Desktop (AVD) environments, including host pools, session hosts, profiles, FSLogix, application delivery, and user experience.
• Implements and manages automation and infrastructure as code using tools such as ARM/Bicep, Terraform, PowerShell, Azure CLI, and Azure Automation.
• Oversees backup, restore, and recovery operations, performing regular testing and validation of recovery objectives (RPO/RTO).
• Leads VM, file server, and workload migrations from on-premises or legacy platforms into Azure, ensuring minimal downtime and data integrity.
• Manages application infrastructure dependencies, including service accounts, managed identities, secrets, certificates, and access controls.
• Implements and enforces Azure security best practices, including identity and access management, role-based access control (RBAC), logging, monitoring, vulnerability management, and compliance.
• Participates in day-to-day incident response, root cause analysis, and problem resolution for Azure and hybrid environments.
• Measures infrastructure performance and availability using Azure Monitor, Log Analytics, and alerting platforms.
• Reports on KPIs related to uptime, performance, cost, security, and operational efficiency, providing actionable recommendations for improvement.
• Continuously evaluates and improves tools, processes, and operational runbooks.
• Provides hands-on expertise and mentorship to junior engineers, promoting Azure best practices and operational maturity.
• Leads documentation efforts for Azure infrastructure, standards, and procedures, ensuring effective knowledge transfer and operational continuity.
• Supports internal training and transition activities for new systems and services.
• Ensures compliance with SWCA and Technology Department policies, including security, access control, change management, and audit requirements.

Benefits

• Regular-status employees are also eligible for performance bonuses.
• Candidates are also encouraged to consider SWCA’s Total Rewards package, which includes a competitive benefits package (https://www.swca.com/careers/benefits-wellness/), forward-thinking workplace flexibility, outstanding corporate culture, award-winning career development, and more.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level