Infrastructure & Cloud Systems Engineer

Courser accelerates the growth of IT service provider companies through partnerships, innovation, and customer-focused solutions. The Infrastructure & Cloud Systems Engineer will own the engineering, scaling, and operational reliability of Microsoft 365, Microsoft Entra ID, and Azure environments, while serving as a Tier 3/4 escalation lead. The role also focuses on cloud architecture, identity governance, security and compliance collaboration, helpdesk alignment, and infrastructure automation.

Responsibilities:

• Cloud Architecture & Infrastructure Engineering: Design, implement, and maintain core Azure infrastructure, virtual networks, storage, and resource groups. Manage session host pools, golden image updates, and auto-scaling within Azure Virtual Desktop (AVD) using Nerdio Manager to optimize platform performance and cost efficiency
• Identity & Zero Trust Governance: Administer Microsoft Entra ID, managing directory hygiene, Conditional Access policies, Privileged Identity Management (PIM), and phishing-resistant authentication (FIDO2 passkeys). Maintain Group Delegated Access Permissions (GDAP) to eliminate standing admin accounts and enforce least-privilege partner access
• Tier 3/4 Technical Escalations: Serve as the internal Tier 3/4 escalation authority for advanced identity, messaging (Exchange Online), virtualization, and cloud infrastructure issues. Perform deep root cause analysis and lead complex troubleshooting efforts
• Front-Line Support Alignment & Guardrails: Interface directly with our outsourced Tier 1/2 helpdesk partner to validate escalation workflows, enforce ticket routing boundaries, and monitor SLA performance. Author and maintain standard operating procedures (SOPs) enabling helpdesk technicians to resolve tier-1/2 issues independently
• Security & Compliance Collaboration: Partner with the Security & Compliance Engineer to enforce system hardening baselines, maintain SOC 2 Type II compliance controls, and configure automated evidence gathering. Act as a secondary technical responder within the Incident Response lifecycle to execute containment actions (e.g., session revocation, network isolation)
• Infrastructure Automation: Drive process efficiency by writing robust PowerShell scripts and leveraging Microsoft Graph API to automate recurring tenant administrative tasks, reporting, and bulk identity actions

Requirements:

• 6+ years of hands-on experience in enterprise systems engineering, cloud administration, or infrastructure delivery
• Deep proficiency in Microsoft Entra ID & Microsoft 365, including hands-on experience with Conditional Access, PIM, Intune endpoint compliance (Windows 11 / macOS), and Exchange Online
• Demonstrated experience with Microsoft Azure & Virtualization, including virtual networking (VNets, VPNs, NSGs), resource groups, and Azure Virtual Desktop (AVD) administration
• Strong scripting and automation capabilities using PowerShell and Microsoft Graph API to manage cloud environments
• Experience in tiered support and escalation structures, specifically collaborating with PSA/ticketing systems (ConnectWise) and outsourced Tier 1/2 service desks
• Demonstrated ability to take extreme ownership of technical problems, communicate cross-functionally, and manage multiple priorities effectively
• Bachelor's Degree in Computer Science, Information Security, or a related field (or equivalent professional experience)
• experience with Nerdio Manager strongly preferred
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)
• CompTIA Security+