Cloud Systems Engineer

Red Cell Partners; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Red Cell Partners is hiring a Cloud Systems Engineer to administer AWS, Azure, and our Microsoft 365 and Entra ID tenant. This is a single, senior seat covering both halves of the environment — the infrastructure that runs our workloads and the identity plane that governs who reaches them — with end‑to‑end ownership of each.

The work spans virtual machine provisioning and network architecture, Infrastructure as Code, tenant and identity administration, endpoint management, automation, and

Qualifications

• Senior cloud systems engineer with experience administering AWS and Azure.
• Experience with IAM, VPCs, network security, and compliance in regulated environments.
• Strong scripting and automation skills in PowerShell, Bash, and Python.

Responsibilities

• Cloud Infrastructure and Virtual Systems Administration: administer AWS/Azure environments, VMs, networking, storage, and SSO.
• Identity & Microsoft 365 Administration: manage Entra ID, Exchange Online, SharePoint, OneDrive, Teams and licensing.
• Infrastructure as Code and Automation: design Terraform modules, remote state, CI/CD integration, and drift remediation.
• Security, Compliance & Monitoring: apply hardening baselines, monitor CloudTrail/Defender, SIEM integration, and audit readiness.

Skills

Cloud Systems

AWS/Azure admin

Infrastructure as Code

Automation

Security & Compliance

Tools

AWS

Azure

Terraform

PowerShell

Bash

Python

GitHub Actions

GitLab CI

Job description

About Us

Red Cell Partners is an incubation firm building and investing in rapidly scalable technology‑led companies that are bringing revolutionary advancements to market in three distinct practice areas: healthcare, cyber, and national security. United by a shared sense of duty and deep belief in the power of innovation, Red Cell is developing powerful tools and solutions to address our Nation’s most pressing problems.

About Us

Red Cell Partners is an incubation firm building and investing in rapidly scalable technology‑led companies that are bringing revolutionary advancements to market in three distinct practice areas: healthcare, cyber, and national security. United by a shared sense of duty and deep belief in the power of innovation, Red Cell is developing powerful tools and solutions to address our Nation’s most pressing problems.

DEFCON AI is an insights company that leverages artificial intelligence, mathematical optimization, data analytics, and software engineering for resilient optimization of complex systems.

In today’s dynamically changing world, DEFCON AI’s technology aligns outcomes with operational goals, better decision making, and empowers customers to anticipate assess, and mitigate the impacts of disruptions.

About The Role

DEFCON AI is hiring a Cloud Systems Engineer to administer AWS, Microsoft Azure, and our Microsoft 365 and Entra ID tenant. This is a single, senior seat covering both halves of the environment — the infrastructure that runs our workloads and the identity plane that governs who reaches them — with end‑to‑end ownership of each.

The work spans virtual machine provisioning and network architecture, Infrastructure as Code, tenant and identity administration, endpoint management, automation, and continuous monitoring. We operate under defense‑sector compliance obligations, so security hardening and audit‑ready documentation are part of the job rather than an afterthought. Experience in regulated or compliance‑driven environments — defense, healthcare, or financial services — is a strong plus.

Responsibilities:

Cloud Infrastructure and Virtual Systems Administration

• Administer and maintain AWS and Azure environments, including day‑to‑day operations of virtual machines, networking, and storage across both providers.
• AWS: deploy, maintain, and optimize EC2, RDS, S3, IAM, KMS, Secrets Manager, and CloudTrail; manage VPCs, subnets, routing tables, security groups, and NACLs.
• Azure: administer virtual machines, virtual networks and NSGs, storage accounts, Azure Files, Key Vault, Azure Virtual Desktop, and Site Recovery across subscriptions.
• Build and manage hardened VM images and golden images for consistent, repeatable deployments.
• Implement and support high availability, auto‑scaling, backup, and disaster recovery configurations.
• Support multi‑account and multi‑subscription governance structures — AWS Organizations, Azure Management Groups, and equivalent landing‑zone constructs.

Identity & Microsoft 365 Administration

• Own the Microsoft 365 tenant end to end: Entra ID, Exchange Online, SharePoint, OneDrive, Teams, and licensing.
• Administer the identity plane — Conditional Access policies, MFA enforcement, RBAC and least privilege, privileged access, hybrid identity, and application registrations. and role assignments, and conditional access policies
• Run the full user lifecycle: provisioning, onboarding, role changes, offboarding, and access reviews, automated wherever the volume justifies it.
• Manage the endpoint fleet through Intune, including compliance policies, configuration profiles, patching, and device lifecycle.
• Administer single sign‑on and provisioning integrations (SAML, SCIM) between Entra ID and the SaaS platforms we operate.
• Support data governance and protection through Purview, sensitivity labels, and DLP policy where applicable.

Infrastructure as Code and Automation

• Design and maintain infrastructure using Terraform — modular design, remote state management, and workspace strategy — across both AWS and Azure.
• Build reusable, secure baseline modules for network architecture, IAM roles, logging, monitoring, and encryption.
• Automate operational workflows in PowerShell, Bash, and Python, including Microsoft Graph API automation for identity and tenant tasks.
• Integrate infrastructure provisioning and security controls into CI/CD pipelines (GitHub Actions, GitLab CI, or equivalent) and maintain version‑controlled infrastructure repositories.
• Implement automated drift detection and remediation, and enforce policy‑as‑code guardrails.

Security, Compliance & Monitoring

• Apply and maintain hardening baselines (CIS Benchmarks, DISA STIGs) across Linux and Windows systems and cloud tenants.
• Configure and monitor AWS CloudTrail, GuardDuty, Security Hub, and Config alongside Microsoft Defender and Entra ID sign‑in and audit logging.
• Support SIEM integration (Splunk, Microsoft Sentinel, or equivalent) and assist with incident response.
• Maintain the vulnerability management lifecycle: patching, remediation tracking, and reporting.
• Support compliance aligned to N