Senior Infrastructure and Cloud Engineer

SENIOR INFRASTRUCTURE AND CLOUD ENGINEER

SUMMARY:

Pogue Construction is strengthening its technology foundation as teams build new applications, introduce AI-enabled workflows, and evaluate where custom solutions can improve existing software processes. We are hiring a hands-on engineer to build and operate the secure, reliable infrastructure those solutions depend on.

The Senior Infrastructure and Cloud Engineer works within the Infrastructure & Security team, not the AI development team. This role does not develop applications or AI models. It engineers and maintains Pogue’s Azure and Microsoft environment, applies approved infrastructure and security standards, and works with application teams to move new solutions into supportable production operation.

The engineer also provides hands-on security implementation and incident-response support. Security strategy, risk acceptance, and application decisions remain with their designated owners.

EDUCATION:

Bachelor’s degree in computer science, Information Technology, or similar experience

EXPERIENCE:

7+ years of systems/infrastructure engineering in a multi-site Microsoft environment spanning on-premises and cloud, with deep Microsoft Azure and Entra ID experience.

PRIMARY RESPONSIBILITIES:

Azure platform and infrastructure engineering

• Build, configure, maintain, and improve Azure resources, Entra ID, Microsoft 365, Intune, servers, virtualization, storage, and related infrastructure to approved standards.
• Help implement and operate Azure landing-zone components, including subscription and resource organization, access controls, network connectivity, policies, logging, and monitoring.
• Establish repeatable infrastructure deployment and configuration practices using the infrastructure-as-code approach selected by Pogue.
• Monitor availability, performance, capacity, configuration drift, and cost; investigate issues and recommend corrective action.
• Execute changes through documented change control, testing, and rollback practices.

AI-enabled application infrastructure

• Partner with the AI and application teams to translate approved workload needs into infrastructure requirements without taking ownership of application development.
• Review infrastructure created by people, pipelines, or AI-assisted tools for compliance with approved configuration, access, network, security, monitoring, and cost standards.
• Identify unowned, overprivileged, publicly exposed, poorly documented, or unnecessary resources; remediate them or escalate exceptions through the appropriate approval path.
• Support separate development and production environments and maintain clear ownership and lifecycle records for deployed resources.
• Complete the infrastructure and operations portion of production handoffs, including monitoring, alerting, support runbooks, backup and recovery requirements, dependencies, and a rollback or disablement path.

Security implementation and support

• Implement and maintain least privilege, MFA, Conditional Access, hardening, vulnerability remediation, logging, and other approved controls across the infrastructure estate.
• Operate assigned components of Pogue’s security stack, including Defendify, CrowdStrike, Netwrix, and applicable Microsoft Defender and Purview controls.
• Assist with incident containment, evidence preservation, recovery, and corrective actions under the direction of the designated incident or security lead.
• Maintain technical evidence needed for audits, insurance requests, and customer requirements.

Reliability, documentation, and escalation

• Maintain configuration records, architecture diagrams, dependency maps, runbooks, and resource ownership information.
• Support backup, restore testing, disaster recovery, and resilience work against approved business requirements.
• Serve as a Tier 3 escalation point for complex infrastructure, identity, Microsoft 365, and Azure issues.
• Guide support and field teams on recurring issues and turn repeat fixes into documented standards.
• Coordinate with vendors and application teams to resolve platform issues and validate proposed changes before implementation.

REQUIRED SKILLS & EXPECTATIONS:

Required

• Experience leading technical initiatives, coordinating work across teams, mentoring colleagues, and communicating priorities and risks to stakeholders. Formal people-management experience is not required.
• Substantial hands-on experience administering and improving Microsoft-based infrastructure across cloud and on-premises environments.
• Demonstrated Azure experience with resource governance, identity and access, networking, monitoring, and production operations.
• Strong Entra ID, Microsoft 365, and Intune administration skills.
• Cost ownership: Add Azure budgeting, tagging, and a monthly cost and utilization report to IT leadership and Finance. Include cost impact in every production handoff, especially for AI workloads.
• Licensing and vendors: Add responsibility for Microsoft and security-tool license management, renewal calendars, and technical input on vendor quotes, SOWs, and SLAs.
• Multi-site and field support: Add experience with multi-office and job site connectivity and endpoint management.
• Practical security experience implementing least privilege, MFA or Conditional Access, hardening, vulnerability remediation, and incident-response support.
• Ability to review a newly deployed Azure workload and identify what is missing before it can be securely operated in production.
• Experience with scripting or repeatable configuration practices, sound change discipline, clear documentation, and effective collaboration with application teams

Preferred / A Plus

• Hands-on time with a modern security stack such as Defendify, CrowdStrike, Netwrix, or Microsoft Defender/Purview.
• Experience as a technical lead, team lead, or supervisor, with an interest in developing toward people management.
• Network hardware experience with Ubiquiti/UniFi.
• Relevant certifications — Microsoft Azure Administrator (AZ-104), Identity & Access Administrator (SC-300), Security Operations Analyst (SC-200), or CompTIA Security+.