Senior Cloud Infrastructure Engineer Azure, Entra & Intune - New York - Hybrid

About the Role: -

• We're looking for a senior Infrastructure Engineer to lead the migration of complex, business-critical systems into Microsoft Azure including the move from traditional VDI platforms to Windows 365 Cloud PCs without disrupting the operations that depend on them.
• This is a hands-on technical leadership role. You'll own the architecture *and* the execution: mapping dependencies, building the migration roadmap, writing the rollback plan, and then doing the work. If you've navigated a large hybrid Active Directory estate through a real cloud transformation and know where the landmines are, this role is built for you.
• You'll work across hybrid identity, cloud infrastructure, virtual desktop, and modern endpoint management, partnering closely with security and business stakeholders throughout.

What You'll Do: -

• Serve as technical lead and subject matter expert across hybrid infrastructure, cloud, VDI, and modern endpoint initiatives
• Administer and optimize Microsoft Entra ID, Intune, and Exchange Online
• Lead endpoint management using Microsoft Intune (MDM/MAM)
• Plan and execute migrations of business-critical workloads to Azure, including VDI-to-Windows 365 Cloud PC transitions
• Validate that application, identity, network, and security dependencies remain intact post-migration
• Design, implement, and maintain Conditional Access policies aligned to Zero Trust principles
• Partner with security and business teams to secure access to Microsoft 365 services
• Build migration roadmaps, risk assessments, validation plans, and rollback strategies
• Tune environments for performance, resiliency, scalability, and cost
• Produce technical documentation, architecture diagrams, and runbooks
• Mentor junior engineers and raise the technical bar across the team

What You Bring: -

Required:

• Strong enterprise-scale experience with on-premises Active Directory
• Proven Azure migration experience on business-critical systems
• Hands-on administration of Microsoft Entra ID, Intune, and Exchange Online all three are essential
• Endpoint management experience with Microsoft Intune (MDM/MAM)
• Solid working knowledge of the Microsoft 365 stack: Exchange Online, SharePoint Online, OneDrive, and Office apps
• Deep understanding of Conditional Access policies and identity-based security controls, including automation of policy deployment
• Strong grasp of hybrid identity, networking, and security architecture
• Track record of keeping business-critical workloads running with minimal downtime

Preferred: -

• Infrastructure-as-Code experience (Terraform, Ansible, or CloudFormation)
• Hands-on Windows 365 Cloud PC experience
• AWS exposure alongside Azure
• Email security tooling experience (Proofpoint or similar)
• Relevant certifications in cloud, identity, or VDI

Background in regulated or security-focused environments