Systems Administrator/Cloud Ops

DJ&A•Hialeah, FL

11d•$70,000 - $115,000

About The Position

The Systems Administrator / Cloud Operations Engineer keeps the identity, cloud services, servers, and networks used by engineering, surveying, and design teams secure and operational. The company operates across six engineering firms and is consolidating them onto a single Microsoft 365 identity tenant. The role works alongside a senior systems engineer on identity, core cloud services, and day-to-day infrastructure operations, and owns routine administration, patching, monitoring, backup, and data center operations. It also participates in the tenant consolidation and ongoing operation of the resulting environment while the company consolidates its three data centers. The position provides second-level support to engineering, surveying, and design staff across offices and in the field, including support for specialist applications. It serves as backup for identity and network responsibilities, with cross-training intended to ensure either the incumbent or senior engineer can operate the environment when the other is unavailable. The role is an individual-contributor analyst/engineer position. It works within standards set by the Manager, Infrastructure & Cloud Operations and escalates matters affecting licensing cost, the compliance boundary, or user-facing capability. The position is based at any company office or remotely in the US, with travel to offices and data centers as needed. Occasional after-hours or weekend work for maintenance windows, migrations, and urgent issues may be required, and the role may include an on-call rotation.

Requirements

Four or more years administering Windows Server, Microsoft 365, and cloud infrastructure, including hands-on patch management, backup, monitoring, and physical data center operations, migration, and decommissioning.
Working command of Entra ID or Active Directory, conditional access, and multi-factor authentication.
Hands-on experience with VMware or Hyper-V virtualization and enterprise backup.
Solid networking fundamentals, including TCP/IP, VLANs, DNS, DHCP, firewalls, and VPNs.
Scripting and automation capability, with PowerShell at minimum, sufficient to avoid repetitive manual work.
Ability and discipline to document work to a standard another person can follow.
Ability to explain technical issues clearly to non-technical staff.
Valid driver’s license and ability to travel to offices and data centers as needed.
Ability to lift up to 50 lbs and work in data centers, server rooms, and equipment closets.

Nice To Haves

Hands-on involvement in a tenant-to-tenant migration or directory consolidation.
Experience with government community cloud environments or a segmented compliance enclave.
Experience supporting federal contract security requirements such as NIST SP 800-171 or CMMC.
Experience supporting AEC applications (Autodesk, Bentley, Esri) and high-performance CAD workstations.
Relevant certification such as Microsoft Identity and Access Administrator, Microsoft 365 Administrator Expert, Azure Administrator, CompTIA Network+ or Security+, or CCNA.

Responsibilities

Administer servers, virtualization (VMware or Hyper-V), cloud workloads, storage, backup, and collaboration services; execute server and cloud infrastructure patch cycles and publish currency reporting.
Operate and maintain the company’s three data centers and execute the data center consolidation program as sequenced.
Monitor infrastructure health and capacity, respond to alerts, provide useful diagnostic information when escalating, and take second-level infrastructure escalations from the service desk.
Perform and document scheduled backup restore tests and maintain the disaster recovery procedures they support.
Support consolidation of operating companies into a single identity tenant, including mailbox, file, and Teams migration.
Administer Active Directory, Entra ID, and hybrid identity, including Group Policy, DNS, and DHCP.
Run reliable, auditable joiner, mover, and leaver identity lifecycle processes.
Administer multi-factor authentication, conditional access, and privileged access, including the documented, time-limited exception list.
Maintain role and group design so that access is granted by role rather than request history.
Administer Microsoft 365 service configuration and health for Exchange Online, SharePoint Online, OneDrive, and Teams.
Maintain tenant-level security and compliance configuration in partnership with the Manager, Information Security & Compliance, including data loss prevention, retention, and audit logging.
Support identity and tenant design for a segmented compliance enclave for federal work.
Maintain LAN/WAN, firewalls, VPNs, switching, and wireless across office locations as backup for the network.
Support secure remote access for hybrid and field staff.
Manage endpoint protection and device management, and respond to and document security incidents.
Provide second-level service desk escalation for hardware, software, and workstation issues.
Support Autodesk (AutoCAD, Civil 3D), Bentley, Esri ArcGIS, and Bluebeam applications.
Image, deploy, and retire workstations, CAD workstations, laptops, and mobile devices.
Execute the identity and collaboration workstream for acquisitions, including directory assessment, coexistence, migration, and cutover.
Contribute to the identity section of the integration playbook and improve it after each acquisition.
Automate provisioning, configuration, and reporting rather than performing repetitive work manually.
Write and maintain runbooks, network diagrams, and asset inventory so a competent peer or managed service provider can operate systems in the employee’s absence.
Cross-train with the senior systems engineer to test coverage for identity and network responsibilities.
Flag in writing to IT leadership any system that only one person can operate.