Cloud Systems Engineer III

• Administer and maintain Microsoft Windows Server 2012, 2016, and 2019 environments, including installation, configuration, patching, and lifecycle management.
• Manage Active Directory, Group Policy Objects (GPOs), DNS, DHCP, and related Windows Server roles and features.
• Monitor server health, performance, and capacity; identify and resolve hardware, OS, and application-layer issues.
• Perform server hardening and apply security baselines in alignment with CIS benchmarks and organizational compliance requirements.
• Support backup, restore, and disaster recovery operations for Windows-based workloads, including periodic testing and documentation of recovery procedures.
• Plan and execute Windows Server upgrades, migrations, and decommissioning in coordination with application and security teams.

• Administer Linux-based servers (RHEL, CentOS, Ubuntu, or equivalent distributions) including installation, configuration, patching, and troubleshooting.
• Manage Linux services, processes, file systems, user accounts, and permissions in accordance with least privilege standards.
• Write and maintain shell scripts (Bash) to automate routine Linux administration tasks and reduce operational toil; develop and maintain Ansible playbooks as part of Infrastructure as Code (IaC) practices to automate configuration management and system provisioning.
• Support integration between Linux workloads and cloud services (AWS and/or Azure), ensuring consistent security and operational standards across hybrid environments.

• Manage and administer Microsoft Intune for device enrollment, compliance policy enforcement, and configuration profile deployment across Windows, iOS, and Android endpoints.
• Develop and maintain Intune-based application deployment packages and update rings to ensure consistent, secure software delivery.
• Monitor device compliance posture and remediate non-compliant endpoints in collaboration with security and helpdesk teams.
• Integrate Intune with Azure Active Directory (Entra ID) for conditional access, identity-based policies, and Zero Trust endpoint controls.
• Maintain documentation for endpoint management standards, Intune configurations, and change procedures.

• Implement, configure, and operate cloud infrastructure and shared services (AWS and/or Azure) following approved standards to meet availability, performance, security, and compliance requirements.
• Build and update Infrastructure as Code (e.g., Terraform, Bicep/ARM, CloudFormation) using version control, testing/validation, and peer review.
• Implement identity and access patterns (IAM/RBAC, least privilege, MFA/conditional access) and integrate secrets/key management into solutions.
• Configure cloud networking components (VPC/VNet, routing, DNS, load balancers, private endpoints) and support connectivity (VPN/ExpressRoute/Direct Connect) in partnership with network teams.
• Configure and use observability tools (logging, metrics, tracing) to support monitoring, alerting, and troubleshooting; contribute to SLO/SLI reporting.
• Support container and platform services (e.g., AKS/EKS, container registries, API gateways, managed databases, messaging) by implementing configurations, upgrades, and routine operational tasks.
• Apply cloud security controls (policies/guardrails, baseline hardening, encryption) and assist with remediation of findings and audit evidence collection.
• Use and improve CI/CD pipelines for infrastructure and platform changes; help standardize release and rollback practices.
• Contribute to cloud cost and performance optimization (tagging compliance, basic rightsizing recommendations, and usage reporting) and follow established FinOps practices.

• Operate and continuously improve cloud and on-premises environments through incident response, problem management, root-cause analysis, and reliability engineering practices.
• Implement and maintain cloud landing zone components (accounts/subscriptions, networking, security guardrails, identity, logging, and baseline configurations) under established standards and guidance.
• Collaborate with application, data, and security teams to evaluate solution designs, select managed services, and implement resilient architectures (multi-AZ/region patterns, backup/restore, and failover).
• Identify and implement automation opportunities using scripting and tooling (e.g., Python, PowerShell, Bash, CI/CD) to reduce toil and improve consistency.
• Provide escalation support for cloud and infrastructure platform issues, partnering with vendors and internal stakeholders to resolve complex service-impacting incidents.
• Create and maintain technical documentation and runbooks; share knowledge with peers and partner teams and follow established operational standards.
• Develop, test, and tune disaster recovery and business continuity capabilities for cloud workloads, including backup strategies, recovery automation, and periodic exercises.
• Manage cloud resource lifecycle and governance (policies/guardrails, tagging, identity reviews, deprecation planning), ensuring environments remain secure, supported, and auditable.

• Bachelor's degree in Engineering/Computer Science or Information Technology (or commensurate on-the-job experience) desired.
• 3+ years of experience administering Microsoft Windows Server (2012, 2016, and/or 2019) in an enterprise environment, including Active Directory, Group Policy, DNS, and DHCP.
• Working knowledge of Linux OS administration (RHEL, CentOS, Ubuntu, or equivalent), including shell scripting and system troubleshooting.
• Hands-on experience with Microsoft Intune for device enrollment, compliance policy configuration, and endpoint management; familiarity with Azure Active Directory (Entra ID) and conditional access.
• 2+ years of experience implementing and operating cloud infrastructure and services (AWS and/or Azure).
• Strong experience with Infrastructure as Code and configuration management (e.g., Terraform, Bicep/ARM, CloudFormation, Ansible) and modern Git-based workflows.
• Experience working in multi-environment cloud estates (multiple accounts/subscriptions) and supporting shared services patterns under established governance.
• Hands-on experience with cloud security and identity (IAM/RBAC, secrets and key management, encryption, policy/guardrails) and working effectively with security/compliance partners.
• Working knowledge of cloud networking concepts (VPC/VNet, routing, DNS, load balancing, private connectivity) and troubleshooting in distributed systems.
• Working knowledge of containers and orchestration platforms (e.g., Kubernetes/AKS/EKS) and/or managed platform services used by application teams.
• Excellent documentation skills.
• Experience with scripting and automation tools (Python, PowerShell, Bash/Shell).

Orange County's Federal Credit Union is an Equal Opportunity Employer. Pre-employment screenings, including background and credit checks, are required.