Sr. Azure Infrastructure Engineer

JOB FAMILY & GRADE

REPORTS TO

EXEMPTION STATUS

Information Technology

Director of IT

U.S. - Exempt

JOB SUMMARY:

The Sr. Cloud Engineer designs, develops, deploys, and supports Information Technology (IT) equipment, services, processes and software within cloud infrastructure environments such as Microsoft Azure for CECO Environmental Corp. This is an IT Enterprise production support position, and as such, off-hours critical systems/emergency support will be expected to support business continuity requirements.

ESSENTIAL DUTIES & RESPONSIBILITIES:

This job description represents only the primary areas of responsibility; specific position assignments will vary depending on the needs of the department.

To perform the job successfully, an individual must be able to execute each essential duty satisfactorily. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Manages the design, deployment, configuration, monitoring and maintenance of high availability enterprise solutions that implement industry standards using MS Azure and M365.
• Performs proactive system administration, monitoring, technical efficiency tuning, up-time, alert notifications, and automation tasks.
• Provisions Infrastructure as code using Azure CLI Powershell ARM templates.
• Manages Azure DevOps repos and branch policies.

• Builds and configures new development tools to improve automation and code deployment, with a focus on Azure operations and application deployment/configuration.
• Owns the diagnosis and issue resolution process, including the determination and provision of workaround solutions or escalation where necessary.
• Configures, administers, and manages M365 services (Exchange online, Teams, SharePoint, etc.) per Microsoft best practices.

• Troubleshoots infrastructure/software application solutions as required to insure Enterprise systems stability.
• Defines and implements the configuration of Azure IAAS and PAAS services for high availability data redundancy, data loss prevention, site recovery and resilience per Microsoft best practices.
• Defines and implements Cloud security architecture to ensure data security at rest and in transit, application security, key management, identity management, authentication, and authorization with OIDC and OAuth2 infrastructure security utilizing Azure VNets, NSGs, UDR, etc.
• Administers Windows Active Directory, Windows servers, Linux server, group policy, etc.

• Helps develop, implement, and monitor management information systems’ policies and controls within the cloud tenant environments to ensure data accuracy, security, and legal and regulatory compliance.
• Installs new equipment, specifies and manages software upgrades and patches to email services, manage Active Directory, DNS, FTP, and web servers and related facilities including login servers, mail relays, directory and list servers, web servers and proxy servers within cloud and on-premises data centers as required.
• Helps to manage third-party and contracted resources, under the guidance of the Director of Infrastructure & Operations, to ensure services provided are done on budget, and on (or ahead of) schedule requirements.
• Proactively identifies and raises technical risks.
• Produces/updates documentation on system processes to meet compliancy/auditing regulations.
• Effectively communicates with all levels of the organization.
• Complies with all IT and Information Security policies and procedures; helps respond to audit requests as required.
• Performs other duties of a similar nature and level as assigned.

EDUCATION AND EXPERIENCE:

• Education and/or Experience: Bachelor's degree (BA) in Computer Science or related field from four-year college or university; or at least ten (10) years related experience and/or training; or equivalent combination of education and experience in a cloud computing environment.
• A minimum of five (5) years of experience in managing an enterprise-level tenant in Microsoft Azure, with multitenant management experience preferred.

• Senior level Windows Server administration and management experience required. Linux Administration experience a plus.
• Knowledge of, and experience with Azure CLI PowerShell and ARM templates.
• A minimum of 5 years of relevant enterprise-level cloud management experience.
• Background in designing and analysis of Cloud Security models.
• Experience with Azure DevOps configuration and management.
• Knowledge of, and experience with the following Cloud concepts required:
  • Azure PAAS Services
  • Security and Provisioning within Azure
  • API Management Policies
  • Event Hubs
  • Azure SQL
  • Identity Management
  • Azure AD
  • Azure B2C Configuration
  • Cloud Security
  • Azure Key Vault
  • HSTS SSL TLS Ingress Control
  • Certificate Management
  • Azure Security Center Threat Detection.

LICENSING/CERTIFICATIONS:

• One or more of the following certifications is preferred:
  • AZ 104 Azure Administrator Associate
  • AZ 140 Windows Virtual Desktop Specialty
  • AZ 303 Microsoft Azure Architect Technologies
  • AZ 304 Microsoft Azure Architect Design
  • M365 Security Administrator Associate
  • M365 Enterprise Administrator Expert

COMPETENCIES

KNOWLEDGE:

• Knowledge of the use of PowerShell for cloud management and administration.
• Knowledge of Azure Networking, Azure Virtual Networks, ExpressRoute Site-to-Site VPN configuration, NSG configuration, and App Services Environments.

• Senior-level knowledge of Active Directory and Federation between on-premises data centers and cloud computing environments required.
• Senior-level knowledge of Microsoft computing environments within an enterprise-level landscape (both server & workstation) required.
• An understanding of networking concepts as related to Cloud tenant connectivity (VNet gateways, networking ACLs, security and network isolation) required.

• Microsoft Office Suite; ERP systems, ADP, Epicor and/or D365 is beneficial. Familiarity with EPM tools (e.g., Hyperion, TM1, etc.) preferred.

• Computers and Electronics - Knowledge of circuit boards, processors, chips, electronic equipment, and computer hardware and software, including applications and programming.
• Customer and Personal Service (intercultural skills, service minded) — Knowledge of principles and processes for providing customer and personal services. This includes customer needs assessment, meeting quality standards for services, and evaluation of customer satisfaction.

• English Language-Knowledge of the structure and content of the English language including the meaning and spelling of words, rules of composition and grammar.

COMPETENCIES

SKILL IN:

• Good technical networking skills, Layer 3 and above, including subnetting, addressing and VPN.
• Excellent communication skills – written and oral, and detail oriented.
• Basic knowledge of programming languages is a plus (For example: PowerShell, Kusto, Python, .NET, C#).
• Exercising confidentiality, discretion, and sound judgment.

• Sense of Urgency - Motivated self-starter.

• Systems Analysis - Determining how a system should work and how changes in conditions, operations, and the environment will affect outcomes.
• Critical thinking - Uses logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions, or approaches to problems.
• Judgment and Decision Making - Considering the relative costs and benefits of potential actions to choose the most appropriate one.
• Reading Comprehension - Understanding written sentences and paragraphs in work related documents.

• Active Listening - Giving full attention to what other people are saying, taking time to understand the points being made, asking questions as appropriate, and not interrupting at inappropriate times.

• Persuasion - Persuading others to change their minds or behavior.
• Analytical - Strong analytical skills. Being able to analyze complex challenges by identifying

fundamental drivers, fact finding and creating options based on facts and figures.

• Speaking - Talking to others to convey information effectively.

• Coordination - Adjusting actions in relation to others' actions.

• Writing - Communicating effectively in writing as appropriate for the needs of the audience.

• Well-developed ability to multi-task and prioritize with strong attention to details.

ABILITIES IN:

• Ability to work in a fast paced, production environment, both in teams and in isolation with a minimum of supervision in 24x7x365 type team structures.
• Oral Comprehension-The ability to listen to and understand information and ideas presented through spoken words and sentences.
• Written Comprehension-The ability to read and understand information and ideas presented in writing.
• Organization and prioritization-The ability to prioritize and organize workload with strong attention to details.

• Information Ordering - The ability to arrange things or actions in a certain order or pattern according to a specific rule or set of rules (e.g., patterns of numbers, letters, words, pictures, mathematical operations).
• Deductive Reasoning - The ability to apply general rules to specific problems to produce answers that make sense.
• Inductive Reasoning - The ability to combine pieces of information to form general rules or conclusions (includes finding a relationship among seemingly unrelated events).
• Oral Expression - The ability to communicate information and ideas in speaking so others will understand.
• Written Expression - The ability to communicate information and ideas in writing so others will understand.
• Problem Sensitivity - The ability to tell when something is wrong or is likely to go wrong. It does not involve solving the problem, only recognizing there is a problem.

• Speech Clarity - The ability to speak clearly so others can understand you.

• Aptitude for Technology - The ability to apply and improve extensive or in-dept specialized knowledge, skills, and judgement by assessing, and translating information technology into responsive and effective procurement solutions.

ADA REQUIREMENTS (For U.S. positions only):

Positions in this function typically require typing, sitting, climbing, balancing, stooping, kneeling, crouching, crawling, reaching, standing, walking, pushing, pulling, lifting, fingering, grasping, feeling, talking, hearing, seeing and repetitive motions.

• Concentrated mental and/or visual attention. The work involves performing complex tasks to very close accuracy and quality specifications, or a high degree of hand and eye coordination for sustained periods.
• The job is typically performed under comfortable working conditions; any disagreeable elements are generally absent during normal performance of job.
• Compliance with company attendance standards.

Sedentary Work: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

TRAVEL REQUIREMENTS:

Occasional travel may be required, as necessary; must have ability to travel across borders.

NOTE:

The above job description is intended to represent only the primary areas of responsibility; specific position assignments will vary depending on the business needs of the department.

JOB DESCRIPTION HISTORY INFORMATION:

Prepared by K. O’Connor; reviewed by C. Traina

Date: 2023.08.24