Senior Cloud Systems Engineer – Remote, IAM & Security Focus

Red Cell Partners, LLC.; New York (NY); Remote; USD 160,000 - 190,000; Full time

Benefits offered by this job

Fully remote work

Competitive salary

Employer-paid health insurance

Unlimited PTO

Parental leave

Job summary

Red Cell Partners, LLC is hiring a senior Cloud Systems Engineer to administer AWS, Azure, M365/Entra ID, and the identity plane with end-to-end ownership of infrastructure and governance. You will build hardened VM images, automate pipelines, and ensure compliance in defense-adjacent environments.

Responsibilities span multi-account governance, incident readiness, and cost management while maintaining security posture across cloud tenants.

Qualifications

• 5+ years in systems administration, cloud operations, or infrastructure engineering.
• 3+ years administering AWS in production, including VM, networking, and IAM.
• 2+ years administering a Microsoft 365 tenant with Entra ID, Exchange Online, licensing.
• Hands-on Microsoft Azure administration in production.
• Automation of operational workflows using PowerShell, Bash, or Python; Terraform experience.
• Strong understanding of IAM, encryption (KMS, TLS), and network segmentation.
• Experience with Linux (RHEL or Amazon Linux) and Windows Server in a cloud context.
• Experience working in DoD or defense environments and applying security requirements.
• Disciplined documentation habits - runbooks, SOPs, and configuration records.
• US Citizenship Required. All work must be performed within the United States.

Responsibilities

• Administer and maintain AWS and Azure environments, including VM, networking, and storage across both providers.
• AWS: deploy, maintain, and optimize EC2, RDS, S3, IAM, KMS, Secrets Manager, and CloudTrail; manage VPCs, subnets, routing tables, security groups, and NACLs.
• Azure: administer virtual machines, virtual networks and NSGs, storage accounts, Azure Files, Key Vault, Azure Virtual Desktop, and Site Recovery across subscriptions.
• Build and manage hardened VM images and golden images for consistent deployments.
• Implement and support high availability, auto-scaling, backup, and disaster recovery configurations.
• Support multi-account and multi-subscription governance structures - AWS Organizations, Azure Management Groups, and equivalent landing-zone constructs.
• Own the Microsoft 365 tenant end to end: Entra ID, Exchange Online, SharePoint, OneDrive, Teams, and licensing.
• Administer the identity plane - Conditional Access policies, MFA enforcement, RBAC and least privilege, privileged access, hybrid identity, and application registrations. and role assignments, and conditional access policies
• Run the full user lifecycle: provisioning, onboarding, role changes, offboarding, and access reviews, automated wherever the volume justifies it.
• Manage the endpoint fleet through Intune, including compliance policies, configuration profiles, patching, and device lifecycle.
• Administer single sign-on and provisioning integrations (SAML, SCIM) between Entra ID and the SaaS platforms we operate.
• Support data governance and protection through Purview, sensitivity labels, and DLP policy where applicable.
• Build and maintain infrastructure using Terraform - modular design, remote state management, and workspace strategy - across both AWS and Azure.
• Build reusable, secure baseline modules for network architecture, IAM roles, logging, monitoring, and encryption.
• Automate operational workflows in PowerShell, Bash, and Python, including Microsoft Graph API automation for identity and tenant tasks.
• Integrate infrastructure provisioning and security controls into CI/CD pipelines (GitHub Actions, GitLab CI, or equivalent) and maintain version-controlled infrastructure repositories.
• Implement automated drift detection and remediation, and enforce policy-as-code guardrails.
• Apply and maintain hardening baselines across Linux and Windows systems and cloud tenants.
• Configure and monitor AWS CloudTrail, GuardDuty, Security Hub, and Config alongside Defender and Entra ID sign-in and audit logging.
• Support SIEM integration and incident response.
• Maintain vulnerability management lifecycle: patching, remediation tracking, and reporting.
• Support compliance aligned to NIST SP 800-171, CMMC, FedRAMP or SOC 2 as applicable, including evidence collection for assessments.
• Administer the AI platforms in our environment - Anthropic Claude, ChatGPT, AWS Bedrock, and Microsoft 365 Copilot - including seats and licensing, SSO and provisioning, retention and data controls, connector and agent governance, and spend limits.

Skills

AWS administration

Azure administration

M365 Entra ID

PowerShell

Bash

Python

Terraform

IAM & encryption

Linux/Windows

DoD security

Documentation

US Citizenship

Job description

Red Cell Partners, LLC is hiring a senior Cloud Systems Engineer to administer AWS, Azure, M365/Entra ID, and the identity plane with end-to-end ownership of infrastructure and governance. You will build hardened VM images, automate pipelines, and ensure compliance in defense-adjacent environments.

Responsibilities span multi-account governance, incident readiness, and cost management while maintaining security posture across cloud tenants.