Azure Cloud Engineer

Alvarez & Marsal was founded in 1983 when Tony Alvarez II and Bryan Marsal recognized the opportunity to provide radically different advice and hands-on support to organizations facing operational and financial hurdles – situations demanding action, objectivity, and real results. Committed to its core values, A&M has since evolved from a boutique player to the premier independent global professional services firm with a reputation for providing leadership, problem-solving and value-creation to underperforming and robust companies across the industry spectrum. 

What We’re Looking For: 

We are seeking an experienced, highly motivated, and action orientated Cloud Engineer (Primarily Microsoft Azure) to join the IT Engineering Team. The Cloud Engineer will report to the IT Engineering Manager and work closely with other Infrastructure, Network, Operations, Security, and Application Engineers and Developers. The Cloud Engineer will also work closely with end users, to implement, monitor and maintain production and dev environments in a 24/7/365 global environment. 

Responsibilities: 

• Architect, design, deploy, and manage Azure IaaS deployment infrastructure based on requirements and best practices. 
• Automate configurations and deployments using scripts, ensuring a consistent and streamlined setup across various environments.
• Implement and enforce security best practices, such as Multi-Factor Authentication (MFA), private endpoint connections, and RBAC roles.
• Continuously research and stay updated with cloud advancements, suggesting improvements and updates to the company's existing setup.
• Architect, design and deployment of Secured Azure Landing Zones with segmented deployment groups.
• Architect, design, deploy, and manage Azure SaaS and PaaS services and solutions. 
• Cost management of Azure services and implementation of a tagging strategy for Cloud Resources and Assets with an associated taxonomy in support of cost rebilling, reporting, and compliance. 
• Planning and migration of existing workloads into Azure. 
• Design, build, upgrade, and decommission various Windows and Linux systems, features, and services including but not limited to: 

o   Windows Server 2012R2 – 2019 

o   Red Hat Enterprise Linux 

o   Active Directory  

o   AAD 

o   DNS, DHCP 

o   Remote Desktop Service 

o   Various LOB applications 

• Automate the delivery of Azure and VMware services.  
• Respond to monitoring alerts of any health issues within the Azure and VMware environments.   
• Liaise effectively with 3rd party suppliers and support providers to ensure issues and solutions are provided within expected service levels. 
• Provide training and act as a point of escalation for the Service Desk and supporting team members.  
• Recommend areas where existing policies and procedures require change or where new ones need to be developed.  
• Create supporting documentation for various audiences with the ability to multi-task and be creative and innovative in a dynamic, fast paced team environment. 

Experience & Qualifications: 

• Minimum 3 years of experience in architecture, design, deployment, and maintenance of public cloud solutions with a focus on Microsoft Azure IaaS.  
• Minimum 3 years of experience providing IT administration and/or engineering services managing Windows and Linux Servers and Services (Server 2012 R2 – Server 2019, Red Hat Enterprise Linux, Centos). 
• Expert knowledge of Azure CLI PowerShell, ARM Templates, Azure Networking, Azure Virtual Networks, ExpressRoutes, and Site-to-Site-VPN. 
• Experience implementing Cisco and/or F5 virtual appliances, automated deployment solutions, with a focus on ServiceNow catalog deployments. 
• Extensive experience with Azure services and solutions.
• Proficient in scripting for automating deployments and configurations.
• Familiarity with VNet Integration, Synapse storage setup, and external storage configurations.
• Strong understanding of cloud security best practices.
• Knowledge of various governance frameworks such as SOX, SC-II, HIPPA, PCI, and experience with implementing associated security and compliance controls. 
• Intermediate knowledge of Azure DevOps configuration and Management, Azure Security Center, and Azure Identity Management, including Azure AD, Azure AD B2C, SSO. 
• Experience with cloud monitoring including Azure Log Analytics, Azure Monitor, and Application insights. 
• Certification in one or more multiple public cloud environments from different vendors (Azure, AWS, GCP, OCI, etc) preferred. 
• Experience with securing and hardening of server environments and serverless code development and deployment. 
• Experience implementing DevOPS practices including Infrastructure-As-Code (IAC), Continuous Integration / Continuous Deployment (CI / CD), and automated testing. 
• Experience with planning and executing migrations from on-premises data centers to public cloud environments. 
• Experience in Terraform and/or Ansible and/or AWS CloudFormation IaC tools. 
• Script Experience - PowerShell, Python, Bash, or similar. 
• Experience developing or supporting applications using microservices architecture. 
• Experience with relational databases such as MS SQL. 
• Experience managing small projects and leading initiatives with minimal direction throughout the project lifecycle 

• Bicep Templates: Streamline Azure resource deployment using Bicep for consistent, secure infrastructure-as-code (IaC)
• PowerShell Automation: Automate Azure environment tasks with PowerShell, integrating scripts into CI/CD pipelines.
• YAML Pipelines: Build multi-stage YAML-based CI/CD pipelines for automated testing, code checks, and resource provisioning.
• Secure Parameter Handling: Securely manage sensitive information in YAML pipelines using Azure Key Vault and DevOps secrets.
• Pipeline Optimization: Improve pipeline efficiency with modular, reusable tasks using Bicep, PowerShell, and YAML.

The salary range is $110,000 - $150,000 annually, dependent on several variables including but not limited to education, experience, skills, and geography. In addition, A&M offers a discretionary bonus program which is based on a number of factors, including individual and firm performance.  Please ask your recruiter for details.

Regular employees working 30 or more hours per week are also entitled to participate in Alvarez & Marsal Holdings’ fringe benefits consisting of healthcare plans, flexible spending and savings accounts, life, AD&D, and disability coverages at rates determined from time to time as well as a 401(k) retirement plan. Provided the eligibility requirements are met, employees will also receive a discretionary contribution to their 401(k) from Alvarez & Marsal. Additionally, employees are eligible for paid time off including vacation, personal days, seventy-two (72) hours of sick time (prorated for part time employees), ten federal holidays, one floating holiday, and parental leave. The amount of vacation and personal days available varies based on tenure and role type. Click here for more information regarding A&M’s benefits programs.

#l1-LH1