Senior Cloud Engineer

Apply Job Type Full-time Description Summary The Senior Cloud Engineer is responsible for the design, implementation, migration, and support of cloud infrastructure for XPERTECHS clients, with a primary focus on Microsoft Azure and the Microsoft 365 platform. This individual works with clients to architect and deliver new cloud solutions, lead on-premises to cloud migrations, troubleshoot escalated critical issues, and maintain secure, well-governed cloud configurations. The Senior Cloud Engineer is skilled in a broad range of technology and technical concepts related to Azure compute, storage, networking, identity, security, backup and disaster recovery, hybrid connectivity, and infrastructure automation. This role serves as the senior technical resource for cloud projects, leading complex engagements from requirements gathering through design, implementation, and thorough close-out. The Senior Cloud Engineer is expected to provide expert-level consultation on cloud architecture, cost optimization, and security best practices, and to mentor other engineers while helping define and improve XPERTECHS cloud standards. Responsibilities Design and implement enterprise-class Azure solutions for small to mid-sized businesses, with a focus on security, scalability, resiliency, and cost efficiency. Lead cloud migration projects, including assessment, planning, and execution of on-premises server, application, and data workloads to Azure and Microsoft 365. Plan and execute on-premises file server migrations to SharePoint Online, OneDrive, and Microsoft Teams, including content assessment, permissions mapping, information architecture design, migration tooling (SharePoint Migration Tool, Migration Manager, or third-party platforms), OneDrive sync and Known Folder Move deployment, and end-user cutover support. Architect, configure, and support Azure compute, storage, virtual networking, Azure Virtual Desktop, and hybrid connectivity (VPN, ExpressRoute, Azure Arc). Design, configure, and troubleshoot Azure site-to-site and point-to-site VPN connectivity, including VPN Gateway sizing and SKUs, local network gateways, IPsec/IKE policies, BGP and static routing, route tables, and name resolution between on-premises networks and Azure virtual networks. Design and manage identity and access using Microsoft Entra ID, including Conditional Access, privileged identity management, and hybrid identity scenarios. Design, configure, and support Microsoft Intune device management, Windows Autopilot deployment, endpoint compliance policies, and application protection controls for Microsoft 365 client environments. Implement and maintain cloud security and governance controls, including Microsoft Defender for Cloud, Azure Policy, role-based access control, and landing zone standards. Design, implement, and test backup, business continuity, and disaster recovery solutions using Azure Backup, Azure Site Recovery, and third-party…