Infrastructure & Cloud Systems Engineer

About Courser Courser accelerates the growth of IT service provider companies.

We forge dynamic partnerships, leveraging our values of Teamwork, Service, Growth-Mindedness, Trust, and Innovation to deliver impactful solutions and phenomenal customer experiences.

If you thrive in a fast-paced IT environment, join our rapidly expanding team and contribute to our ongoing success.

Infrastructure & Cloud Systems Engineer (M365/Entra ID/Azure) We are looking for an Infrastructure & Cloud Systems Engineer at Courser to serve as the core technical anchor and guardian of our enterprise cloud-native ecosystem.

In this role, you will own the day-to-day engineering, scaling, and operational reliability of our Microsoft 365, Microsoft Entra ID, and Azure environments.

Reporting directly to the Director of IT & Security Operations, you will bridge the gap between front-line helpdesk operations and architectural strategy, acting as our Tier 3/4 escalation lead and working closely with our Security & Compliance and Automation pods to ensure seamless, secure service delivery.

Key Responsibilities: Cloud Architecture & Infrastructure Engineering: Design, implement, and maintain core Azure infrastructure, virtual networks, storage, and resource groups.

Manage session host pools, golden image updates, and auto-scaling within Azure Virtual Desktop (AVD) using Nerdio Manager to optimize platform performance and cost efficiency.

Identity & Zero Trust Governance: Administer Microsoft Entra ID, managing directory hygiene, Conditional Access policies, Privileged Identity Management (PIM), and phishing-resistant authentication (FIDO2 passkeys).

Maintain Group Delegated Access Permissions (GDAP) to eliminate standing admin accounts and enforce least-privilege partner access.

Tier 3/4 Technical Escalations: Serve as the internal Tier 3/4 escalation authority for advanced identity, messaging (Exchange Online), virtualization, and cloud infrastructure issues.

Perform deep root cause analysis and lead complex troubleshooting efforts.

Front-Line Support Alignment & Guardrails: Interface directly with our outsourced Tier 1/2 helpdesk partner to validate escalation workflows, enforce ticket routing boundaries, and monitor SLA performance.

Author and maintain standard operating procedures (SOPs) enabling helpdesk technicians to resolve tier-1/2 issues independently.

Security & Compliance Collaboration: Partner with the Security & Compliance Engineer to enforce system hardening baselines, maintain SOC 2 Type II compliance controls, and configure automated evidence gathering.

Act as a secondary technical responder within the Incident Response lifecycle to execute containment actions (e.g., session revocation, network isolation).

Infrastructure Automation: Drive process efficiency by writing robust PowerShell scripts and leveraging Microsoft Graph API to automate recurring tenant administrative tasks, reporting, and bulk identity actions.

Requirements: 6+ years of hands-on experien...