Snr Cloud Infrastructure Engineer

#LI-Hybrid

About The Role

Reporting to the Director, IT Operations, the (Senior) Cloud Infrastructure Engineer builds and runs the cloud platforms Bosa depends on, keeping our people productive, our identities and data secure, and our systems resilient. You'll look for every chance to make that easier through infrastructure-as-code, automation, and AI-assisted engineering, and partner with the rest of the Technology group and business users to protect what we run today and help shape what we'll run next.

This isn't a traditional sysadmin role. Our technology team is moving closer to the business, working alongside users to understand how work actually gets done, then using cloud-native tooling and AI to solve real problems where they add the most value. That includes opportunities to design and build internal web applications and tools with the business, where a custom solution is the right fit. We're a small, curious team that experiments, shares what we learn, and is energized by how quickly this space is changing. We're looking for someone who is genuinely interested in that shift, and who wants their day to be a mix of the fundamentals: identity, security, productivity, and resilience, and the newer work of figuring out where AI and automation fit best.

Key Elements of the Role include:

• Administration of Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive, Intune, Defender)
• Administration of Microsoft Entra ID, including Conditional Access Policies, MFA, Privileged Identity Management, and risky sign-in / risky user remediation
• Engineering and administration of AWS as our primary cloud platform (VPC, ECS, Route 53, IAM, EC2, S3)
• Infrastructure-as-code using Terraform / OpenTofu to provision and manage AWS and SaaS resources
• Endpoint and identity security: least-privilege access, Defender for Endpoint, Intune compliance, and certificate lifecycle management
• DevOps practices using GitLab and Git; branching, code review via merge requests, and CI/CD pipelines for infrastructure, scripts, and configuration
• Containerized workloads using Docker and AWS ECS
• Scripting and automation in PowerShell, Python, and Bash, leveraging AI-assisted coding tools (e.g., Claude Code) to accelerate delivery
• Backup, recovery, and resilience operations using Commvault Cloud; ownership of RTO/RPO compliance and DR testing

• Cybersecurity operations: detection tuning, incident response, and vulnerability management
• Email security and anti-phishing controls (Microsoft Defender for Office 365 / Mimecast)
• Capacity forecasting, cloud cost optimization, and data retention policy management

What You Bring

The successful candidate is experienced in designing and operating cloud-first environments within clearly defined processes that meet industry standards for security, control, and efficiency. The overall skills and experience that you bring to the position should include:

• Minimum four (4) years of experience in a Systems Administrator, Cloud Engineer, or related role; candidates with seven or more years and demonstrated depth across Microsoft 365, identity, and infrastructure-as-code will be considered at the Senior level.
• Demonstrated hands-on administration of Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive, Intune, and Defender)
• Demonstrated hands-on administration of Microsoft Entra ID (Azure AD), including Conditional Access, MFA, Privileged Identity Management, and identity protection / risky sign-in workflows
• Administration of Windows Server, working knowledge of Linux and network administration in cloud environments
• Experience with enterprise backup and disaster recovery; Commvault Cloud experience is a strong asset
• Experience operating in AWS as a primary cloud platform (VPC, IAM, EC2, S3, Route 53)
• Hands-on experience with Terraform or OpenTofu, and Git-based DevOps workflows (GitLab preferred: pipelines, merge requests, code review)
• Scripting proficiency in PowerShell, Python, and/or Bash
• Comfort and curiosity with AI-assisted engineering: using LLMs and coding agents to accelerate scripting, IaC, and operations
• Experience with issue tracking systems (e.g., Jira)
• Strong written and verbal communication, with excellent documentation skills

Nice to have:

• Experience with container technologies (Docker, AWS ECS)
• Experience with change management
• Certifications: AWS (Solutions Architect, SysOps), Microsoft (SC-300, AZ-500), security (Security+), and HashiCorp Terraform Associate