IT Infrastructure & Cloud Engineer

watchmakergenomics; Boulder (CO); On-site; USD 120,000 - 160,000; Full time

Job summary

Watchmaker Genomics is seeking an IT Infrastructure & Cloud Engineer for an onsite, full-time role in Boulder, CO. You will manage Azure cloud services, network infrastructure, and security across the Boulder site, reporting to the Director IT.

This role partners with the global IT team to translate standards into local implementation. The ideal candidate has a strong background in cloud and network engineering, plus hands-on administration of servers, identity services, and security controls.

Qualifications

• Bachelor's degree in IT, CS or related field with 8–12 years of relevant experience.
• Experience managing Azure cloud infrastructure and identity services.
• Strong knowledge of Active Directory, DNS, DHCP and core infrastructure services.

Responsibilities

• Build, administer, and maintain Azure cloud infra and identity management.
• Design and support site network infrastructure (switches, wireless, firewalls, VPNs, load balancers).
• Design and implement IT infrastructure per global architecture standards.
• Operate security monitoring, patching, and vulnerability management.
• Collaborate with EUC engineer on endpoint compliance and deployment standards.
• Maintain servers, storage, networks, and core services.
• Develop automation scripts (PowerShell, Python, Bash) to streamline ops.
• Maintain infrastructure docs and enforce change management.
• Design DR plans and conduct regular DR testing.

Skills

Cloud experience

Automation scripting

Cross-functional collaboration

Documentation

Security best practices

Education

Bachelor's degree in Information Technology, Computer Science, or related field

Tools

Azure

PowerShell

Python

Bash

Active Directory

DNS/DHCP

Job description

Position: IT Infrastructure & Cloud Engineer

Position Type: Full-time, permanent

Department: Information Technology

Location: Boulder, Colorado (onsite)

Experience: Bachelors in Information Technology, Computer Science, or related field required + 8-12 years relevant experience

Position Summary

Watchmaker Genomics is inviting applications for the full-time position of IT Infrastructure & Cloud Engineer, an onsite role in our Boulder, Colorado office. This position reports to the Director IT, Boulder site for day-to-day execution and service delivery, and is responsible for hands-on execution and maintenance of Watchmaker's network and Azure cloud infrastructure at the Boulder site.

This role works in close partnership with our Infrastructure & Cloud Lead based in Cape Town, South Africa, who sets global architecture standards and technical direction for the network and cloud environment. The Boulder-based Engineer is the primary hands-on resource for network engineering and Azure administration in the US, translating that global direction into local implementation and feeding site-level needs and constraints back into global design decisions. Windows and macOS endpoint management is owned day-to-day by our End User Compute Engineer; this role partners with that engineer on compliance standards and infrastructure-level policy, but is not expected to carry endpoint administration as a primary workload.

The successful candidate will thrive in a dynamic, fast-paced environment and contribute directly to our company culture and success. This position offers hands-on responsibility for Watchmaker's Boulder-site network and cloud infrastructure, close collaboration with a global IT team spanning the US and South Africa, and the opportunity to mentor service desk staff on complex infrastructure and network escalations as the team grows.

Core Responsibilities:

• Azure Cloud & Identity Infrastructure: Build, administer, and maintain Watchmaker's Azure cloud infrastructure and services, and administer identity, authentication, and access management in Microsoft Entra - including conditional access, multi-factor authentication, and joiner/mover/leaver processes - in line with global architecture and security standards. [Critical requirement]
• Network Infrastructure: Design, configure, maintain, and troubleshoot the site's network infrastructure, including switching, wireless, firewalls, VPNs, and load balancing. Advanced, hands-on network engineering is the other core pillar of this role. [Critical requirement]
• System Design and Architecture: Implement complex IT infrastructure - servers, storage, networks, and cloud services - in line with Watchmaker's global architecture standards.
• Security and Cyber Security Protection: Operate security systems across endpoints and cloud workloads; monitor, triage, and respond to security alerts; execute patch and vulnerability management using Microsoft Defender.
• Endpoint Management (collaborative): Partner with the End User Compute Engineer on Windows and macOS endpoint compliance, configuration baselines, and application deployment standards. Day-to-day enrollment and device support is owned by the EUC Engineer, not this role.
• System Administration and Maintenance: Execute or oversee the installation, configuration, and maintenance of servers, virtual environments, and enterprise applications, including Active Directory, DNS, DHCP, and other core services.
• Performance Monitoring and Optimization: Monitor server, network, storage, and cloud performance; troubleshoot issues and optimize infrastructure for stability, security, and efficiency.
• Automation and Scripting: Develop and use automation tools and scripts (e.g., PowerShell, Python, Bash) to streamline operations and system management.
• Computer Systems Validation: Perform required Computer Systems Validation actions to support ISO 13485.
• Documentation and Operational Discipline: Maintain accurate infrastructure documentation, work instructions, and knowledge base articles; execute all changes through formal change management; track and coordinate purchasing for infrastructure and network hardware.
• Risk Management and Escalation: Proactively identify, communicate, and elevate risks, incidents, and capacity constraints to the Director IT, Boulder site in a timely manner.
• Technical Guidance and Teamwork: Provide technical guidance to service desk staff on complex network and infrastructure escalations, and collaborate with cross-functional and global teams to meet business objectives.

Business Continuity, Disaster Recovery & Incident Response:

Design and implement disaster recovery (DR) plans, ensuring critical systems and data can be restored in case of failure or outage, and conduct regular DR testing to validate recovery against defined RTOs and RPOs.

Oversee regular backups of data, systems, and configurations; ensure backups are complete, secure, and recoverable, and that restores are verified through s