Cloud Infrastructure Engineer II

Position Summary:

The Cloud Infrastructure Engineer II role will develop, implement, and support related services and solutions for consulting clients. This position will build a customer-focused relationship with clients to identify business challenges and develop specifications and requirements to arrive at the best solution. The role will develop specializations around technology sets such as platform, infrastructure, and security and around multiple target customer profiles such as K-12, higher education, SMB, enterprise/commercial, and/or government.

Roles and Responsibilities/ Essential Functions:

•  Work as a member of the HBS Cloud Architecture Team (CAT) as an experienced contributor that provides consultative and proactive project support to Heartland Business Systems’ (HBS) account base.
•  Collaborate across multiple internal teams to ensure successful delivery and timely execution of the scope of work.
•  Contribute to product selection, configuration standards, and best practices, and educate team members on these products and services to enhance the sales process.
•  Provide support, maintenance, and administration for customer environments and review for other potential concerns or enhancement opportunities.
•  Assist with the development and implementation of the Azure cloud security architecture for protecting PHI/PII/PCI data deployed into various cloud, hybrid, HBS Cloud and on-premises systems.
•  Implement and manage security architectures for cloud/hybrid systems.
•  Assist in the process to assess, develop, implement, optimize, and document security technologies and processes, data protection, cryptography, key management, identity, and access management (IAM) within SaaS, IaaS, PaaS, and other cloud environments.
•  Work in and always model a positive team atmosphere between regional and virtual practices while maintaining a professional and respectful demeanor.
•  Create and maintain detailed documentation of past projects to potentially provide data for time estimates and project scopes for new related projects.
•  Obtain and maintain current vendor/industry specific certifications and stay current on new products and solutions by utilizing networks of resources.
•  Minimum of 1,450 hours (billable + presales) per fiscal year prorated based on start date. These charge hour requirements will be balanced against professional development and on-the-job training.

Competencies

•  Accountability - Ability to accept responsibility and account for his/her actions.
•  Adaptability - Ability to fit into a changing environment.
•  Ambition - Extent that an individual demonstrates drive and initiative in seeking personal advancement or recognition.
•  Applied Learning- Applied learning looks at whether an individual takes part in needed learning activities in a way that makes the most of the learning experience.
•  Decision Making - Selecting an effective course of action while controlling resources and expenditures.
•  Detail Orientated - Ability of an individual to pay meticulous attention to all aspects of a situation or task, no matter how small or seemingly unimportant.
•  Ethical - Ability to be guided by the company’s accepted principles of moral conduct.
•  Interpersonal- Interpersonal skills look at the ability of the individual to develop and maintain relationships with others.
•  Organized - Ability of an individual to be structured and methodical in working skills.
•  Persistence - Ability to continue in a course of action in the face of adversity.
•  Technical Aptitude - Ability to relate to topics which require an understanding or specialized knowledge.

Required Experience:

•  3+ years of experience in a technical-related field.
•  Experience installing and supporting Microsoft enterprise products, data center networking, or software development / scripting / automation.

Preferred Experience:

•  Experience working as a consultant.
•  Experience with Microsoft Azure solutions:
• Azure AD (AAD / Entra ID), including Azure AD Connect (AADC), SAML SSO and OpenID Connect (OIDC), Conditional Access, Multi-Factor Authentication (MFA), Self-Service Password Reset (SSPR), Password Protection, and Privileged Identity Management (PIM).
• Virtual Machines and Azure Virtual Desktop (AVD)
• Networking and DNS, including Network Security Groups (NSGs), VPN Gateways, Traffic Managers, Load Balancers, Private Link, and ExpressRoute.
• Storage
• Azure Backup, Azure Site Recovery
• Pricing & Cost Management
•  Experience implementing and designing systems-based solutions with a focus on the cloud.
• IaaS, PaaS, and SaaS.
•  PowerShell, Python, or other scripting and development background.
•  Experience with developing and maintaining security architecture for PHI/PII/PCI data in various cloud, hybrid-cloud, HBS Cloud and on-premises systems.
•  Experience with various Microsoft technologies:
•  Azure Stack HCI
•  Active Directory (AD) Domain Services (ADDS)
•  Defender for Office 365 (MDO / M365D)
•  Defender for Identity (MDI / AATP)
•  Defender for Cloud
•  Defender for Cloud Apps (MCAS / MDCA)
•  Defender for Endpoint (MDfE / MDATP) / Defender for Severs
•  Purview (Data Loss Prevention / DLP, Information Protection / AIP)
•  Secure Score
•  Intune
•  Thycotic / Delinea Secret Server Cloud (SSC) – deployment and configuration.
•  Familiarity or experience with:
•  Microsoft Exchange
•  Linux
•  Cisco (Hyperflex, Nexus, UCS)
•  HPE Nimble, HPE ProLiant
•  Dell PowerEdge
•  Nutanix
•  Software Defined Networking (SDA, SD-WAN)
•  Microsoft 365, Exchange Online, SharePoint, OneDrive, and Teams.
•  ConnectWise and Hudu.

Required Skills, Education and/ or Certifications:

•  Bachelor’s Degree or equivalent (or relevant) certifications
•  At least one or more of the following certifications – or to be completed within first 6 months:
•  Microsoft Certified: Azure Solutions Architect Expert
•  Microsoft Certified: Azure Administrator Associate
•  Microsoft Certified: Azure Virtual Desktop Specialty

Preferred Skills, Education and/ or Certifications:

•  One or more of the following certifications – in addition to the above:
•  Microsoft Certified: Azure Security Engineer Associate
•  Microsoft Certified: Identity and Access Administrator Associate
•  Microsoft Certified: Azure Network Engineer Associate
•  Microsoft Certified: Cybersecurity Architect Expert
•  Microsoft Certified: Windows Server Hybrid Administrator Associate
•  Microsoft Certified: Azure Developer Associate
•  Microsoft 365 Certified: Enterprise Administrator Expert
•  Microsoft 365 Certified: Security Administrator Associate (being retired)
•  (ISC)2 Certified Information Systems Security Professional (CISSP)
•  (ISC)2 Certified Cloud Security Professional (CCSP)
•  (ISC)2 Certified Secure Software Lifecycle Professional (CSSLP)
•  Cisco Certified Network Associate (CCNA)
•  VMware Certificate Professional (VCP)

Equal Opportunity Employer - Including Disabled and Veterans

#HBS