Senior Azure & O365 Cloud Engineer

We are seeking a skilled and experienced Azure & M365 Cloud Engineer to manage and enhance our cloud infrastructure. The ideal candidate will bring expertise in Azure, M365, and related cloud technologies, driving adoption of best practices, enforcing compliance, and enabling seamless operations. This role requires a proactive approach to identity and access management, role-based access control (RBAC), security configurations, and system monitoring. The role is pivotal in ensuring alignment with well-architected frameworks and improving the maturity of our cloud adoption journey. The candidate will contribute to creating scalable, secure, and efficient cloud environments.

Role & Responsibilities

Cloud Security & Identity Management
Implement and manage Privileged Identity Management (PIM), addressing overly permissive roles.
Design granular RBAC models for Azure and M365, including Entra and Purview, to minimize risks.
Enforce Multi-Factor Authentication (MFA) policies and integrate them with SecOps guidelines.
Establish a comprehensive Identity and Access Management (IAM) strategy tailored to organizational needs.

Infrastructure Governance & Oversight
Create and maintain Management Group Structures to facilitate precise resource management.
Develop and enforce guardrails to enable secure autonomy within subscription management.
Monitor subscription creation and implement alerts for unauthorized changes or new subscriptions.

Monitoring & Operational Health
Assess and refine Azure Arc onboarding and monitoring, ensuring that all Servers report status accurately.
Review and optimize existing alerts, balancing frequency and impact to minimize false positives.
Create a unified Power BI dashboard for Real Time visibility across IT systems, including:
o Usage metrics (CPU, memory, disk).
o Alerts for exceptions and critical errors.
o Reporting on services like Azure File Sync and other infrastructure components.

Optimization & Improvements
Identify and remediate gaps in tagging, naming conventions, and asset visibility.
Conduct regular reviews of production resources and ensure compliance with cloud adoption frameworks.
Assist with resource cost tracking and reduction initiatives, prioritizing security and efficiency.

Collaboration & Support
Collaborate with the service desk to design custom roles, replacing overly privileged accounts.
Provide advisory support to teams implementing cloud frameworks.
Ensure the transition of resources adheres to compliance and well-architected principles.

Proven experience in Azure Administration and M365 Engineer roles.
Deep expertise in Azure RBAC (Role-Based Access Control), with a proven track record in designing and implementing least-privilege models across Azure and Microsoft 365 environments.
Solid understanding and experience with identity and access management (IAM) in cloud environments, specifically Microsoft Azure and Office 365.
Experience in DevSecOps environments, with a focus on automation and secure deployments.
Familiarity with cloud adoption maturity models and strategies for mid-to-late stage adoption.
Certification in Azure Architect, Azure Administrator, or similar credentials.
Familiarity with the Well-Architected Framework and its practical application in cloud governance.
Strong experience with Conditional Access Policies, including auditing, reviewing, and implementing policies aligned with security and compliance requirements.

Desirable Skills
Familiarity with Azure Arc, Purview, and related monitoring tools.
Ability to work collaboratively with internal teams, like cloud security specialists, to develop detailed deliverables.
Strong problem-solving skills and the ability to work independently in a high-pressure environment.
Exceptional communication skills, both written and verbal, to document processes and engage with stakeholders.
Strong organizational skills to handle competing priorities and ensure timely delivery of tasks.

Thebes, a seasoned IT Managed Service provider with a 19-year track record, offers fast, flexible, and value-driven solutions, tailored to propel your organization into the next phase of its IT journey. Our unique Assured Outcome Provider (AOP) methodology prioritizes quality service, industry-leading solutions, and tangible ROI over conventional metrics like headcount and price lists. In our commitment to putting your needs first, we specialize in strategic IT consultancy, efficient project execution, ITaaS management, and staffing augmentation with our network of skilled professionals., What sets us apart is our proficiency in harnessing cutting-edge AI and Cloud technologies for cost optimization, ensuring that your IT infrastructure not only meets but exceeds expectations. We don't just deliver services; we curate digital solutions that align seamlessly with your business objectives. With a relentless focus on delivering outcomes, we do things for you, not to you, constantly adding value to your operations. Trust Thebes to be your partner in achieving IT excellence, where innovation and efficiency converge for unparalleled success.