Cloud Infrastructure Engineer

Position Summary

The Cloud Infrastructure Engineer is a senior hands-on technical role responsible for the reliability, automation, security posture, cost discipline, and continuous improvement of Concert’s Azure and core infrastructure environments. The role has technical ownership of cloud infrastructure operations and supports on-prem and IoT services as needed.

The successful candidate is passionate about keeping current on all aspects of technology infrastructure and security best practices, enjoys working as part of a solution team, and possesses excellent communication skills. The Cloud Infrastructure Engineer owns the day-to-day reliability, automation, and continuous maturity improvement of Concert's cloud environment and on-premises infrastructure.

The right candidate is detail oriented, organized, and able to maintain a stable and secure environment that is primarily Azure, with a smaller AWS footprint. The role will also work with solution teams to design and maintain the latest in smart building IoT devices, and cloud and network infrastructure to connect buildings and staff into an intelligent portfolio of automated operations and connected community services.

Key Responsibilities

Cloud Operations & Platform Ownership

Own the reliability, performance, and availability of Concert's cloud environment (IaaS and PaaS), and meet or exceed uptime KPIs for core systems.

Act as technical platform owner and lead for cloud infrastructure, maintaining platform configuration, documentation, runbooks, and operational standards.

Monitor capacity utilisation, cost efficiency, and performance against defined thresholds.

Define and maintain standardized cloud platform patterns (e.g., “gold builds,” reusable templates, landing zone baselines).

Manage Cloud services and backup platforms to ensure RPO and RTO objectives for critical systems as defined in DR/BCP plans.

Provide Level 2 and Level 3 support for incidents and service requests related to server infrastructure.

Work within established ITSM processes for incidents, requests, changes, problems, asset/configuration, and knowledge management.

Infrastructure Automation & IaC

Design, build, and maintain Infrastructure as Code (IaC), ensuring consistent, version-controlled environments.

Automate operational processes using Automation, scripting, CLI, and other automation technologies to reduce manual intervention and increase operational consistency.

Champion a 'policy as code' approach, integrating Policy and governance guardrails into infrastructure pipelines.

Contribute to CI/CD pipeline configuration within DevOps for infrastructure change delivery.

Identity, Security & Governance

Manage key directory services — including Conditional Access Policies, Privileged Identity Management (PIM), Managed Identities, and Service Principals.

Support Cloud posture management, remediate findings, and maintain security coverage across identities, servers, and network.

Ensure compliance with Policy baselines that contribute to GRC controls and audit readiness.

Contribute to Zero Trust architecture implementation in alignment with Enterprise Architecture.

Support vulnerability management processes, including remediation tracking and prioritization for infrastructure assets.

Participate in security incident response activities, supporting containment, remediation, and post-incident analysis.

Networking & Hybrid Connectivity

Manage Cloud networking — including virtual network segregation, hub-and-spoke topology, Firewall, and Private DNS Zones.

Maintain and support on-premises network infrastructure in collaboration with the Network & Cloud Connectivity Engineer to ensure hybrid connectivity.

Support cloud network monitoring through existing tooling and contribute to network availability targets.

Monitoring, Observability & Cost Management

Configure and maintain monitoring and alerting to ensure proactive detection and operational transparency.

Implement centralized logging, tracing, and metrics standards across cloud environments.

Define and track KPIs, ensuring proactive visibility into system health and performance.

Drive cost optimization strategies, including rightsizing, workload optimization, and cost allocation models.

Disaster Recovery & Business Continuity

Support DR and BCP planning activities including playbook development, procedural reference guides, and technical execution of DR test exercises.

Lead recurring DR test exercises for infrastructure-owned platforms, ensuring RTO/RPO targets are consistently met and documented.

Contribute to recovery confidence through repeatable and well-documented recovery processes improvement to help mature the DR/BCP.

Collaboration & Team

Provide technical mentorship and guidance to junior team members on infrastructure matters.

Work with vendors and managed service partners to resolve issues, maintain SLAs, and reduce external dependency.

Respond to emergencies as-needed during off-hours, and implement planned changes during maintenance windows outside of core business hours.

Contribute to the technology maturity roadmap, identifying automation opportunities, technical debt, and evergreening needs.

Please note this is a general description of the tasks and skills required. Additional responsibilities and duties may be required to successfully perform this role.

Required Knowledge & Skills

Required

Degree in Computer Science, Systems Engineering, or equivalent experience.

Minimum 5–8 years of hands-on Azure infrastructure and server experience in an enterprise environment.

Expert at Azure IaaS and PaaS operations using Azure Automation, scripting, CLI, or other automation tools.

Strong IaC experience: Terraform, ARM, DevOps pipeline configuration and post build automation (Azure Automation, CLI, Ansible, PowerShell) for infrastructure delivery.

Strong experience with Windows Server OS and Microsoft Infrastructure Services (Active Directory DS + GPOs, NPS, CA/PKI, DFS), Hyper-V, SQL Server, and Backup & Recovery

Strong experience with Landing Zones, Management Groups, and subscription governance.

Strong experience in Cloud networking design and peering, hub-and-spoke topology, network security, firewalls, private DNS zones, and VPN gateways.

Strong experience with Cloud Cost Management + Billing: budget alerts, reserved instance management, FinOps practices.

Strong experience with Microsoft 365 Exchange Online administration.

Microsoft Azure certifications: AZ-104 (Azure Administrator) or AZ-305 (Azure Solutions Architect Expert). AZ-400 (DevOps Engineer).

Preferred  

Working knowledge of ZTNA technologies and management.

Working knowledge of SharePoint, Teams, OneDrive.

Working knowledge of Operational Technology (OT): experience with building automation, BMS, or smart building integration.

ITIL Foundation certification and ServiceNow working knowledge is an asset.

Experience with Amazon Web Services (EC2 (web server) + Route53 (DNS service), web hosting) is an asset.