[Hiring] Infrastructure & Cloud Systems Engineer @Courser Employment Services dba Courser

Role Description

We are looking for an Infrastructure & Cloud Systems Engineer at Courser to serve as the core technical anchor and guardian of our enterprise cloud-native ecosystem. In this role, you will own the day-to-day engineering, scaling, and operational reliability of our Microsoft 365, Microsoft Entra ID, and Azure environments. Reporting directly to the Director of IT & Security Operations, you will bridge the gap between front-line helpdesk operations and architectural strategy, acting as our Tier 3/4 escalation lead and working closely with our Security & Compliance and Automation pods to ensure seamless, secure service delivery.

• Cloud Architecture & Infrastructure Engineering: Design, implement, and maintain core Azure infrastructure, virtual networks, storage, and resource groups. Manage session host pools, golden image updates, and auto-scaling within Azure Virtual Desktop (AVD) using Nerdio Manager to optimize platform performance and cost efficiency.
• Identity & Zero Trust Governance: Administer Microsoft Entra ID, managing directory hygiene, Conditional Access policies, Privileged Identity Management (PIM), and phishing-resistant authentication (FIDO2 passkeys). Maintain Group Delegated Access Permissions (GDAP) to eliminate standing admin accounts and enforce least-privilege partner access.
• Tier 3/4 Technical Escalations: Serve as the internal Tier 3/4 escalation authority for advanced identity, messaging (Exchange Online), virtualization, and cloud infrastructure issues. Perform deep root cause analysis and lead complex troubleshooting efforts.
• Front-Line Support Alignment & Guardrails: Interface directly with our outsourced Tier 1/2 helpdesk partner to validate escalation workflows, enforce ticket routing boundaries, and monitor SLA performance. Author and maintain standard operating procedures (SOPs) enabling helpdesk technicians to resolve tier-1/2 issues independently.
• Security & Compliance Collaboration: Partner with the Security & Compliance Engineer to enforce system hardening baselines, maintain SOC 2 Type II compliance controls, and configure automated evidence gathering. Act as a secondary technical responder within the Incident Response lifecycle to execute containment actions (e.g., session revocation, network isolation).
• Infrastructure Automation: Drive process efficiency by writing robust PowerShell scripts and leveraging Microsoft Graph API to automate recurring tenant administrative tasks, reporting, and bulk identity actions.

Qualifications

• 6+ years of hands-on experience in enterprise systems engineering, cloud administration, or infrastructure delivery, ideally within an MSP or high-growth multi-tenant environment.
• Deep proficiency in Microsoft Entra ID & Microsoft 365, including hands-on experience with Conditional Access, PIM, Intune endpoint compliance (Windows 11 / macOS), and Exchange Online.
• Demonstrated experience with Microsoft Azure & Virtualization, including virtual networking (VNets, VPNs, NSGs), resource groups, and Azure Virtual Desktop (AVD) administration (experience with Nerdio Manager strongly preferred).
• Strong scripting and automation capabilities using PowerShell and Microsoft Graph API to manage cloud environments.
• Experience in tiered support and escalation structures, specifically collaborating with PSA/ticketing systems (ConnectWise) and outsourced Tier 1/2 service desks.
• Demonstrated ability to take extreme ownership of technical problems, communicate cross-functionally, and manage multiple priorities effectively.

Requirements

• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)
• CompTIA Security+

Benefits

• Competitive benefits package, including medical, dental, vision, and life insurance
• 401(k) company match
• Flexible vacation time*
• Paid sick time
• 10 Holidays including your Birthday and a Floating Holiday!
• Healthy Lifestyle reimbursement
• Membership Subsidy
• 40 Hours for Volunteer Time
• Paid parental leave
• Reimbursement for ongoing certifications

*Flexible vacation time after completing one full year of employment. For the first year of employment, full-time team members are provided 10 vacation days.