Senior Cloud & Infrastructure Engineer

Job Responsibilities :

• Operate as the lead infrastructure engineer in close daily partnership with Omnis Senior Security Infrastructure Engineer, who provides technical direction, conducts security review, and signs off on significant infrastructure decisions before they reach production.

• Run and modernize Omnis Azure environment, including compute, networking, identity, Azure App Services, Azure SQL, Microsoft WAF, Azure Virtual Desktop and Windows 365, and Azure Monitor.

• Own the Windows Server fleet end-to-end : provisioning, patching cadence, Group Policy and Active Directory operations, lifecycle planning, and end-of-support migrations.

• Own Microsoft 365 license allocation and Azure subscription management across Omnis multi-tenant environment, including license assignment and recovery, subscription and tenant governance, cost visibility, and ongoing right-sizing.

• Modernize the infrastructure-as-code practice. Propose tooling and patterns for joint review with the Senior Security Infrastructure Engineer, and incrementally bring infrastructure under code with security guardrails built in from the start.

• Partner with the senior developer and broader development team to extend modern CI/CD patterns from application code into infrastructure deployment, and to design systems that scale securely as the business grows.

• Work closely with Omnis security team and managed SOC on hardening, vulnerability remediation, identity controls, endpoint protection through SentinelOne, and compliance evidence.

• Cross-train into the security workstreams the Senior Security Infrastructure Engineer manages day-to-day, including endpoint detection and response, SASE and ZTNA networking, SIEM, and the managed SOCs tooling, so the two roles can back each other up across disciplines.

• Manage observability across Datadog and Azure Monitor, including alerting, on-call signal hygiene, and runbook development.

• Maintain the homegrown line-of-business application infrastructure (Azure App Services, Azure SQL, and Microsoft WAF).

• Run day-to-day business continuity and disaster recovery operations within Omnis defined RPO and RTO targets. Maintain DR runbooks and run periodic failover and tabletop exercises.

• Build and maintain runbooks, architecture diagrams, and change records so the environment can be supported by anyone on the team.

• Partner with Omnis co-managed MSP as a shared delivery team across day-to-day operations and escalations, rather than treating the MSP as an outside vendor.

• Provide escalation support to internal end users for infrastructure-impacting tickets routed through the helpdesk and the co-managed MSP.