Sr. Infrastructure Cloud Engineer

Axogen•Tampa, FL

1d•Onsite

About The Position

The Sr. Infrastructure & Cloud Engineer is a hands-on technical leader and trusted partner to Quality, Security, and Operations. You will own enterprise systems reliability, cloud migration execution, and security hardening while maintaining audit-ready controls. This role blends deep engineering expertise with strong architecture communication—defining standards and roadmaps, influencing stakeholders, and delivering results across several U.S. sites.

Requirements

10+ years of experience managing enterprise infrastructure across multi‑site environments.
Proven leadership in completing on‑premises or hybrid Active Directory migrations to Azure AD or Azure Active Directory Domain Services, and Intune MDM
Extensive hands-on experience with Intune device policies, Conditional Access, and core IAM principles.
Deep expertise in Microsoft Server migrations from on‑premises to Azure IaaS, with preference for candidates familiar with transitions from IaaS to PaaS.
Demonstrated success implementing MFA and SSO solutions (e.g., Duo, OneLogin, Microsoft Entra based SAML) and enforcing secure Windows endpoint authentication policies.
Strong operational proficiency with Cisco Meraki based products, including routing, switching, wireless, SD‑WAN, and RADIUS/Wi‑Fi security.
Direct experience operating within compliance‑driven environments; familiarity with 21 CFR Part 11, GxP, and SOX is preferred.
Proficient in PowerShell scripting for Microsoft 365 administration.
Proven track record in enterprise IT service and change management (e.g., ITIL).

Nice To Haves

Certifications such as Microsoft Identity and Access Administrator, Intune Administrator Associate, Azure Solutions Architect Expert, Security Operations Analyst, Endpoint Administrator Associate, Azure Administrator Associate
Experience with identity governance, privileged access management, Zero Trust, certificate management (PKI), and encryption standards.

Responsibilities

Administer enterprise platforms: Windows Server/AD, Entra ID (Azure AD), Azure IaaS/PaaS, Microsoft 365, Intune, VMware/virtualization, storage, and backup/DR (e.g., Veeam/Azure Backup).
Establish patch, vulnerability, and configuration baselines; drive continuous hardening for endpoints and servers.
Manage Meraki routing/switching/wireless, SD-WAN/VPN, segmentation/NAC, and performance monitoring.
Design and support RADIUS/EAP authentication for wireless; integrate logs into SIEM.
Deploy and tune EPP/XDR/SIEM; author runbooks, playbooks, detections, and dashboards.
Partner with Security to triage incidents, perform root cause analysis, and lead remediation.
Author and maintain SOPs/WIs, architecture standards, cloud governance (identity, cost, security), DR plans, and service provisioning guidelines.
Ensure validated change control, periodic access reviews, configuration management, and evidence retention.
Build and communicate architecture vision, blueprints, and end-to-end solution roadmaps for infrastructure and cloud services.
Provide high-quality documentation: diagrams, standards, and transition plans that enable consistent implementation.
Manage IT services vendors (MSP, carriers, security vendors), SLAs, renewals, and escalations.
Drive alignment through collaboration and persuasion to align QA/RA, Security, and business stakeholders; negotiate win-win solutions that advance organizational goals.
Develop automation (primarily PowerShell, optionally Python) for provisioning, compliance evidence, patching, and reporting.
Drive service maturity with metrics, post-incident reviews, and iterative process enhancements.