Senior Cloud Infrastructure Engineer

BlueAlly; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

BlueAlly is hiring a Senior Consultant to design, implement, and migrate Microsoft cloud infrastructure for clients across government, education, healthcare, utilities, nonprofits, and midmarket enterprises. This role covers Entra ID, M365, Intune, Purview, Defender, and Azure infrastructure, delivering multiple concurrent engagements and shaping solution scope and estimates.

You will act as a trusted technical lead for IT admins through executive sponsors, operating with incomplete information,

Responsibilities

• Assess client environments and requirements, and design solutions that meet stated business and technical objectives.
• Lead or participate in Microsoft tenant migrations: tenant-to-tenant, on-premises to cloud, hybrid coexistence, and third-party platform sources.
• Configure and remediate Microsoft Entra ID, including Conditional Access, MFA, Privileged Identity Management, self-service password reset with password writeback, B2B and B2C, cross-tenant synchronization, hybrid identity, and ADFS-to-SAML modernization.
• Deploy passwordless authentication, including Windows Hello for Business using cloud Kerberos trust and FIDO2 security keys.
• Deploy and modernize endpoint management: Microsoft Intune, Windows Autopilot, Configuration Manager coexistence and transition, compliance policies, configuration profiles, update rings, application packaging, and OneDrive Known Folder Move.
• Implement Microsoft Purview data protection: sensitivity labels, data loss prevention, retention and records management, and eDiscovery.
• Deploy Microsoft Defender for Endpoint, Defender for Cloud, and Defender for Identity, including migration from third-party EDR platforms.
• Manage and troubleshoot escalated issues across identity, data protection, and device management.
• Perform Azure Migrate assessments and execute server and workload migrations, including wave planning, cutover scheduling, and application-owner validation.
• Design and implement Azure networking, including VPN Gateway, Application Gateway and WAF, Bastion, and Front Door.
• Implement Azure Backup and Azure Site Recovery to meet client recovery objectives.
• Size and deploy Azure compute and storage, including Azure Files and storage account configuration.
• Deliver Azure Virtual Desktop and Windows 365 proofs of value and production deployments.
• Produce design documents, as-built documentation, runbooks, and migration plans.
• Deliver knowledge transfer sessions and administrator training at project closeout.

Job description

About the Role

BlueAlly is hiring a Senior Consultant to design, implement, and migrate Microsoft cloud infrastructure for clients across state and local government, education, healthcare, utilities and cooperatives, nonprofits, and midmarket enterprise. This role spans Microsoft Entra ID, Microsoft 365, Microsoft Intune, Microsoft Purview, Microsoft Defender, and Azure infrastructure. You will deliver across concurrent client engagements, contribute technical input to solution scoping and estimation, and act as a trusted technical point of contact for client stakeholders from IT administrators through executive sponsors. We are looking for someone who can operate with incomplete information, make defensible assumptions, document them, and keep an engagement moving.

Responsibilities

Solution Design and Delivery

• Assess client environments and requirements, and design solutions that meet stated business and technical objectives.
• Lead or participate in Microsoft tenant migrations: tenant-to-tenant, on-premises to cloud, hybrid coexistence, and third-party platform sources.
• Configure and remediate Microsoft Entra ID, including Conditional Access, MFA, Privileged Identity Management, self-service password reset with password writeback, B2B and B2C, cross-tenant synchronization, hybrid identity, and ADFS-to-SAML modernization.
• Deploy passwordless authentication, including Windows Hello for Business using cloud Kerberos trust and FIDO2 security keys.
• Deploy and modernize endpoint management: Microsoft Intune, Windows Autopilot, Configuration Manager coexistence and transition, compliance policies, configuration profiles, update rings, application packaging, and OneDrive Known Folder Move.
• Implement Microsoft Purview data protection: sensitivity labels, data loss prevention, retention and records management, and eDiscovery.
• Deploy Microsoft Defender for Endpoint, Defender for Cloud, and Defender for Identity, including migration from third-party EDR platforms.
• Manage and troubleshoot escalated issues across identity, data protection, and device management.

Azure Infrastructure

• Perform Azure Migrate assessments and execute server and workload migrations, including wave planning, cutover scheduling, and application-owner validation.
• Design and implement Azure networking, including VPN Gateway, Application Gateway and WAF, Bastion, and Front Door.
• Implement Azure Backup and Azure Site Recovery to meet client recovery objectives.
• Size and deploy Azure compute and storage, including Azure Files and storage account configuration.
• Deliver Azure Virtual Desktop and Windows 365 proofs of value and production deployments.

Documentation and Enablement

• Produce design documents, as-built documentation, runbooks, and migration plans.
• Deliver knowledge transfer sessions and administrator training at project closeout.

Track time accurately against estimated hours and communicate variance early. Stay current on Microsoft platform changes and share practice-level best practices internally.