Azure & Infrastructure Engineer

PwrQ Holdings LLC; Dayton (MN); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Forgent Power is seeking a Lead Azure Engineer to consolidate multiple Azure tenants into a single enterprise cloud and to own on-premises infrastructure across all sites. This hybrid role spans from physical servers and Hyper-V to Azure landing zones, governance, and security controls.

You will lead a multi-site transformation, drive cost optimization, implement Azure Arc & Defender across the environment, and collaborate with security to enforce Zero Trust.

Qualifications

• 7+ years of experience in Azure cloud engineering and infrastructure.
• Proven experience consolidating Azure tenants, subscriptions, or large-scale environments.
• Deep expertise in Azure networking - VNet design, VPN/ExpressRoute, segmentation.
• Strong experience with Azure compute, storage, and platform services.
• Hands-on experience with Azure governance - Policy, RBAC, management groups.
• Experience managing on-premises Windows Server environments including Active Directory, DNS, and DHCP.
• Experience with Hyper-V in a multi-site or multi-entity environment.
• Strong experience with cloud cost optimization and financial governance (FinOps).
• Experience with Microsoft Entra ID (Azure AD) for identity and access management.
• Ability to lead complex, multi-team cloud and infrastructure transformation efforts.
• Experience with M&A or multi-entity environment consolidation.
• Familiarity with Infrastructure as Code - Terraform, Bicep, ARM.
• Experience with Azure Monitor, Log Analytics, and observability platforms.
• Experience with Azure Arc and Azure Update Manager.
• Experience with Defender for Servers and Microsoft Defender for Cloud.
• Knowledge of hybrid environments - on-prem to Azure transition.
• Microsoft Azure certifications - Solutions Architect, Security, Network.

Responsibilities

• Lead Azure tenant consolidation into unified enterprise platform.
• Design and implement Azure landing zones and resource organization.
• Optimize networking, compute, storage, DR and HA architectures.
• Drive cost optimization via rightsizing and savings plans.
• Implement Azure governance, policy, RBAC, tagging and cost controls.
• Lead identity integration using Microsoft Entra ID across tenants.
• Collaborate with security teams to enforce Zero Trust and compliance.
• Provide technical leadership and executive-level roadmap updates.
• Own Hyper-V on-premises infrastructure and server lifecycle.
• Manage on-prem DNS/DHCP, AD health and replication.
• Oversee backup, DR strategies, and recovery testing.
• Maintain patching and security posture with Defender and Arc.

Skills

Azure cloud engineering

Azure networking

FinOps

On-prem Windows Server

Active Directory management

Azure governance

Lead cross-team initiatives

Tools

Terraform

Bicep

ARM templates

Azure Monitor

Azure Arc

Defender for Servers

Job description

Position Summary:

We are seeking a Lead Azure Engineer to drive two connected missions: the consolidation of Forgent's Azure environments into a single enterprise-scale cloud platform, and the day-to-day ownership of on-premises infrastructure across all sites. This is a hybrid cloud and infrastructure engineering role - you will own the full stack from physical servers and Hyper-V environments through to Azure landing zones and governance.

Key Responsibilities:

Azure Tenant Consolidation & Platform

• Lead consolidation of multiple Azure tenants, subscriptions, and environments into a unified enterprise Azure platform
• Design and implement Azure landing zones, subscription models, and resource organization strategies
• Standardize and optimize: Networking (VNets, peering, hybrid connectivity); Compute and storage services; Disaster recovery and high availability architectures
• Drive cost optimization initiatives: Rightsizing resources and eliminating redundant environments; Reserved instances and savings plans
• Implement and enforce Azure governance: Azure Policy, RBAC, tagging standards, and cost controls
• Lead identity integration using Microsoft Entra ID (Azure AD), including cross-tenant trust and access models
• Partner with security teams to implement Zero Trust architecture and compliance controls
• Provide technical leadership, roadmap planning, and executive-level updates

On-Premises Infrastructure

• Own and manage Hyper-V environments across all Forgent sites
• Manage physical server infrastructure including Dell PowerEdge servers - hardware lifecycle, rack and stack, capacity planning
• Maintain Active Directory (on-prem) site health, replication, and DNS/DHCP across all sites
• Manage Azure DNS and on-prem Windows DNS for all entities
• Maintain and operate Synology NAS and backup tooling across the environment
• Build and maintain a server golden image pipeline for standardized OS deployments

Security & Patching

• Deploy and manage Defender for Servers P2 across all Arc-onboarded on-premises servers
• Implement Azure Arc to extend Azure governance, policy, and Defender coverage to on-prem infrastructure
• Implement Azure Update Manager for unified patch management across Azure VMs and Arc enabled servers
• Define and maintain patch cadence, compliance reporting, and maintenance windows across all entities

Backup & Resilience

• Define and execute a unified backup strategy across Azure VMs, on-prem servers, and NAS
• Configure recovery vaults, retention policies, and offsite replication
• Define and validate RTOs and RPOs per entity and workload tier
• Ensure disaster recovery and high availability architectures are documented and tested

Qualifications:

Required

• 7+ years of experience in Azure cloud engineering and infrastructure
• Proven experience consolidating Azure tenants, subscriptions, or large-scale environments
• Deep expertise in Azure networking - VNet design, VPN/ExpressRoute, segmentation
• Strong experience with Azure compute, storage, and platform services
• Hands-on experience with Azure governance - Policy, RBAC, management groups
• Experience managing on-premises Windows Server environments including Active Directory, DNS, and DHCP
• Experience with Hyper-V in a multi-site or multi-entity environment
• Strong experience with cloud cost optimization and financial governance (FinOps)
• Experience with Microsoft Entra ID (Azure AD) for identity and access management
• Ability to lead complex, multi-team cloud and infrastructure transformation efforts

Preferred

• Experience with M&A or multi-entity environment consolidation
• Familiarity with Infrastructure as Code - Terraform, Bicep, ARM
• Experience with Azure Monitor, Log Analytics, and observability platforms
• Experience with Azure Arc and Azure Update Manager
• Experience with Defender for Servers and Microsoft Defender for Cloud
• Knowledge of hybrid environments - on-prem to Azure transition
• Microsoft Azure certifications - Solutions Architect, Security, Network

Core Competencies:

• Own and lead a large-scale Azure transformation initiative across a growing multi-site enterprise
• Directly impact cost reduction, security posture, and operational efficiency organization-wide
• Build a modern, standardized cloud and infrastructure platform across a growing NYSE-listed enterprise
• Work on a greenfield consolidation with real ownership - this is not a maintenance role
• Collaborative team environment with a clear technology roadmap and leadership support

Disclaimer

The statements above are intended to describe the general nature and level of work being performed. They are not an exhaustive list of all responsibilities, duties, or skills required. Forgent Power reserves the right to modify, interpret, or apply this job description as needed.

Equal Employment Opportunity Statement

Forgent Power is an equal opportunity employer. We are committed to creating an inclusive environment for all employees. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected class.