Serve as the senior onsite technical lead and trusted advisor to the client's CTO and senior stakeholders
Design and deploy Azure and Microsoft 365 solutions using infrastructure-as-code (Bicep, ARM, Terraform, PowerShell)
Build Azure landing zones aligned to the Cloud Adoption Framework
Lead public cloud migrations: email, files, apps, servers, and identity
Act as senior escalation for Managed Services, vendors, and Microsoft support
Administer Microsoft Entra ID: conditional access, PIM, RBAC, and hybrid identity
Run M365 security: Defender for Endpoint/XDR, Sentinel, Purview, and Intune
Improve design, security, performance, and cost, and keep documentation current

Demonstrated experience operating as a senior technical resource in a dedicated client-facing environment, preferably supporting hedge funds or alternative investment firms.
4+ years with Azure and Microsoft 365 infrastructure
Azure compute: VMs, Availability Sets/Zones, Storage Accounts, Site Recovery
Azure networking: VNets, Virtual WAN, ExpressRoute, VPN Gateway, NSGs
Microsoft Entra ID: conditional access and hybrid identity
M365 admin: Exchange Online, Teams, SharePoint, OneDrive, Intune (MAM/MDM), Defender for Endpoint
Public cloud migrations and configuration management
Automation: PowerShell with Bicep/ARM or Terraform
Strong written documentation for infrastructure or cloud environments
Eligible to work in the United States.
Great to Have
Azure governance: Policy, RBAC, Management Groups, and Landing Zones aligned to the Cloud Adoption Framework
Azure security and edge: Application Gateway (WAF), Firewall, DDoS Protection
Microsoft security and compliance tools: Purview, Sentinel, Defender for Cloud
Networking (Nice to Have)
Fortinet (FortiGate) firewalls
Cisco Meraki switches and access points
Ubiquiti UniFi switching, access points, and controllers
LAN/WAN, VLANs, routing, DNS, DHCP, and VPN
Certifications (a plus)
AZ-104, AZ-305, AZ-700, MS-102 or SC-300, and Fortinet NSE

Senior Infrastructure Engineer – Azure, M365

Key skills