Note: The job is a remote job and is open to candidates in USA. Courser accelerates the growth of IT service provider companies through partnerships, innovation, and customer-focused solutions. The Infrastructure & Cloud Systems Engineer will own the engineering, scaling, and operational reliability of Microsoft 365, Microsoft Entra ID, and Azure environments, while serving as a Tier 3/4 escalation lead. The role also focuses on cloud architecture, identity governance, security and compliance collaboration, helpdesk alignment, and infrastructure automation.
Responsibilities
- Cloud Architecture & Infrastructure Engineering: Design, implement, and maintain core Azure infrastructure, virtual networks, storage, and resource groups. Manage session host pools, golden image updates, and auto-scaling within Azure Virtual Desktop (AVD) using Nerdio Manager to optimize platform performance and cost efficiency
- Identity & Zero Trust Governance: Administer Microsoft Entra ID, managing directory hygiene, Conditional Access policies, Privileged Identity Management (PIM), and phishing-resistant authentication (FIDO2 passkeys). Maintain Group Delegated Access Permissions (GDAP) to eliminate standing admin accounts and enforce least-privilege partner access
- Tier 3/4 Technical Escalations: Serve as the internal Tier 3/4 escalation authority for advanced identity, messaging (Exchange Online), virtualization, and cloud infrastructure issues. Perform deep root cause analysis and lead complex troubleshooting efforts
- Front-Line Support Alignment & Guardrails: Interface directly with our outsourced Tier 1/2 helpdesk partner to validate escalation workflows, enforce ticket routing boundaries, and monitor SLA performance. Author and maintain standard operating procedures (SOPs) enabling helpdesk technicians to resolve tier-1/2 issues independently
- Security & Compliance Collaboration: Partner with the Security & Compliance Engineer to enforce system hardening baselines, maintain SOC 2 Type II compliance controls, and configure automated evidence gathering. Act as a secondary technical responder within the Incident Response lifecycle to execute containment actions (e.g., session revocation, network isolation)
- Infrastructure Automation: Drive process efficiency by writing robust PowerShell scripts and leveraging Microsoft Graph API to automate recurring tenant administrative tasks, reporting, and bulk identity actions
Skills
- 6+ years of hands-on experience in enterprise systems engineering, cloud administration, or infrastructure delivery
- Deep proficiency in Microsoft Entra ID & Microsoft 365, including hands-on experience with Conditional Access, PIM, Intune endpoint compliance (Windows 11 / macOS), and Exchange Online
- Demonstrated experience with Microsoft Azure & Virtualization, including virtual networking (VNets, VPNs, NSGs), resource groups, and Azure Virtual Desktop (AVD) administration
- Strong scripting and automation capabilities using PowerShell and Microsoft Graph API to manage cloud environments
- Experience in tiered support and escalation structures, specifically collaborating with PSA/ticketing systems (ConnectWise) and outsourced Tier 1/2 service desks
- Demonstrated ability to take extreme ownership of technical problems, communicate cross-functionally, and manage multiple priorities effectively
- Bachelor's Degree in Computer Science, Information Security, or a related field (or equivalent professional experience)
- Experience with Nerdio Manager strongly preferred
- Microsoft Certified: Azure Administrator Associate (AZ-104)
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)
- CompTIA Security+
Benefits
- Remote work arrangement
- Best-in-class training
- Mentorship
- Clear self-promotion paths to help you grow
- Medical, dental, vision, and life insurance
- 401(k) company match
- Flexible vacation time after completing one full year of employment; for the first year of employment, full-time team members are provided 10 vacation days
- Paid sick time
- 10 holidays including your birthday and a floating holiday
- Healthy Lifestyle reimbursement
- Membership Subsidy
- 40 hours for volunteer time
- Paid parental leave
- Reimbursement for ongoing certifications
Company Overview