Senior Azure & M365 Infrastructure Engineer

Portfolio BI

Design, build, and automate Azure and M365 platforms for Portfolio BI, supporting alternative asset managers. Serve as a senior technical lead and trusted advisor for cloud migration and security.

Posted 6/15/2026full-timeNew York City • New York • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

AzureCloudDNSFirewallsSQLSwitchingTerraformVault

About the role

Key responsibilities & impact

Design, build, and automate the Azure and Microsoft 365 platforms behind our managed cloud service
Serve as the senior onsite technical lead and trusted advisor to the client's CTO and senior stakeholders
Design and deploy Azure and Microsoft 365 solutions using infrastructure-as-code (Bicep, ARM, Terraform, PowerShell)
Build Azure landing zones aligned to the Cloud Adoption Framework
Lead public cloud migrations: email, files, apps, servers, and identity
Act as senior escalation for Managed Services, vendors, and Microsoft support
Administer Microsoft Entra ID: conditional access, PIM, RBAC, and hybrid identity
Run M365 security: Defender for Endpoint/XDR, Sentinel, Purview, and Intune
Improve design, security, performance, and cost, and keep documentation current

Requirements

What you’ll need

Proven track record as a senior technical resource in a dedicated or client-facing environment, ideally within an MSP or financial services firm
4+ years with Azure and Microsoft 365
Azure compute: VMs, Availability Sets/Zones, Storage Accounts, Site Recovery
Azure networking: VNets, Virtual WAN, ExpressRoute, VPN Gateway, NSGs
Microsoft Entra ID: conditional access and hybrid identity
M365 admin: Exchange Online, Teams, SharePoint, OneDrive, Intune (MAM/MDM), Defender for Endpoint
Public cloud migrations and configuration management
Automation: PowerShell with Bicep/ARM or Terraform
Strong written documentation
Azure governance: Policy, RBAC, Management Groups, Landing Zones (Great to Have)
Azure services: Key Vault, Bastion, Backup, Monitor, Log Analytics (Great to Have)
Azure security and edge: Application Gateway (WAF), Firewall, DDoS Protection (Great to Have)
Microsoft Purview, Sentinel, Defender for Cloud (Great to Have)
Azure SQL, Azure Virtual Desktop, AKS, Azure DevOps/GitHub Actions (Great to Have)
FinOps and cost optimization (Great to Have)
Fortinet (FortiGate) firewalls (Networking Nice to Have)
Cisco Meraki switches and access points (Networking Nice to Have)
Ubiquiti UniFi switching, access points, and controllers (Networking Nice to Have)
LAN/WAN, VLANs, routing, DNS, DHCP, and VPN (Networking Nice to Have)
Certifications (a plus): AZ-104, AZ-305, AZ-700, MS-102 or SC-300, and Fortinet NSE

Benefits

Comp & perks

Health Care Plan (Medical, Dental & Vision)
Retirement Plan (401k, IRA)
Life Insurance (Basic, Voluntary & AD&D)
Paid Time Off (Vacation, Sick & Public Holidays)
Family Leave (Maternity, Paternity)
Short Term & Long-Term Disability
Training & Development, including support for cloud and security certifications

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AzureMicrosoft 365BicepARMTerraformPowerShellPublic cloud migrationsMicrosoft Entra IDM365 administrationAutomation

Soft Skills

Technical leadershipClient-facing communicationDocumentationAdvisory skillsProblem-solving

Certifications

AZ-104AZ-305AZ-700MS-102SC-300Fortinet NSE