Sr. Infrastructure & Cloud Engineer

Axogen•Tampa, FL

About The Position

The Sr. Infrastructure & Cloud Engineer is a hands-on technical leader and trusted partner to Quality, Security, and Operations. You will own enterprise systems reliability, cloud migration execution, and security hardening while maintaining audit-ready controls. This role blends deep engineering expertise with strong architecture communication—defining standards and roadmaps, influencing stakeholders, and delivering results across several U.S. sites.

Requirements

10+ years managing enterprise infrastructure across multi-site environments.
Proven delivery of cloud migration programs—Azure preferred (AWS/GCP experience welcome).
Hands-on expertise with Microsoft systems (Windows Server/AD, Microsoft 365, Intune), Azure IaaS/PaaS, and advanced cybersecurity measures.
Demonstrated experience implementing MFA/SSO platforms (Duo/Okta/OneLogin) and Windows endpoint sign-on policies.
Strong Meraki operations (MX/MS/MR), including routing, switching, wireless, SD-WAN, and RADIUS/WiFi security.
Direct experience with 21 CFR Part 11, GxP, and CSV/CSA for infrastructure (authoring validation plans, risk assessments, IQ/OQ/PQ).
Proficiency in PowerShell scripting; familiarity with Git, CI/CD for infra-as-code is a plus
Track record in Enterprise IT Application Delivery, SDLC, strategic planning, project/program management, and IT service/change management (e.g., ITIL).

Nice To Haves

Certifications such as Microsoft Certified: Azure Solutions Architect Expert, AWS Certified Solutions Architect, CISSP, CSM, and/or CEH.
Additional credentials: Microsoft/Entra/Intune, Cisco Meraki (ECMS/CMSS), ITIL v4.
Experience with identity governance, privileged access management, Zero Trust, certificate management (PKI), and encryption standards.

Responsibilities

Administer enterprise platforms: Windows Server/AD, Entra ID (Azure AD), Azure IaaS/PaaS, Microsoft 365, Intune, VMware/virtualization, storage, and backup/DR (e.g., Veeam/Azure Backup).
Establish patch, vulnerability, and configuration baselines; drive continuous hardening for endpoints and servers. Manage Meraki routing/switching/wireless, SD-WAN/VPN, segmentation/NAC, and performance monitoring.
Design and support RADIUS/EAP authentication for wireless; integrate logs into SIEM.
Deploy and tune EPP/XDR/SIEM; author runbooks, playbooks, detections, and dashboards.
Partner with Security to triage incidents, perform root cause analysis, and lead remediation.
Author and maintain SOPs/WIs, architecture standards, cloud governance (identity, cost, security), DR plans, and service provisioning guidelines.
Ensure validated change control, periodic access reviews, configuration management, and evidence retention.
Build and communicate architecture vision, blueprints, and end-to-end solution roadmaps for infrastructure and cloud services.
Provide high-quality documentation: diagrams, standards, and transition plans that enable consistent implementation.
Manage IT services vendors (MSP, carriers, security vendors), SLAs, renewals, and escalations.
Drive alignment through collaboration and persuasion to align QA/RA, Security, and business stakeholders; negotiate win-win solutions that advance organizational goals.
Develop automation (primarily PowerShell, optionally Python) for provisioning, compliance evidence, patching, and reporting.
Drive service maturity with metrics, post-incident reviews, and iterative process enhancements.