Senior Cloud Infrastructure Engineer Azure, Entra & Intune - New York/Hybrid

We're looking for a senior Infrastructure Engineer to lead the migration of complex, business-critical systems into Microsoft Azure including the move from traditional VDI platforms to Windows 365 Cloud PCs without disrupting the operations that depend on them.
This is a hands-on technical leadership role. You'll own the architecture *and* the execution: mapping dependencies, building the migration roadmap, writing the rollback plan, and then doing the work. If you've navigated a large hybrid Active Directory estate through a real cloud transformation and know where the landmines are, this role is built for you.
You'll work across hybrid identity, cloud infrastructure, virtual desktop, and modern endpoint management, partnering closely with security and business stakeholders throughout.
## What You'll Do
- Serve as technical lead and subject matter expert across hybrid infrastructure, cloud, VDI, and modern endpoint initiatives
- Administer and optimize Microsoft Entra ID, Intune, and Exchange Online
- Lead endpoint management using Microsoft Intune (MDM/MAM)
- Plan and execute migrations of business-critical workloads to Azure, including VDI-to-Windows 365 Cloud PC transitions
- Validate that application, identity, network, and security dependencies remain intact post-migration
- Design, implement, and maintain Conditional Access policies aligned to Zero Trust principles
- Partner with security and business teams to secure access to Microsoft 365 services
- Build migration roadmaps, risk assessments, validation plans, and rollback strategies
- Tune environments for performance, resiliency, scalability, and cost
- Produce technical documentation, architecture diagrams, and runbooks
- Mentor junior engineers and raise the technical bar across the team
## What You Bring
**Required**
- Strong enterprise-scale experience with on-premises Active Directory
- Proven Azure migration experience on business-critical systems
- Hands-on administration of Microsoft Entra ID, Intune, and Exchange Online all three are essential

- Endpoint management experience with Microsoft Intune (MDM/MAM)
- Solid working knowledge of the Microsoft 365 stack: Exchange Online, SharePoint Online, OneDrive, and Office apps
- Deep understanding of Conditional Access policies and identity-based security controls, including automation of policy deployment
- Strong grasp of hybrid identity, networking, and security architecture
- Track record of keeping business-critical workloads running with minimal downtime
**Preferred**
- Infrastructure-as-Code experience (Terraform, Ansible, or CloudFormation)
- Hands-on Windows 365 Cloud PC experience
- AWS exposure alongside Azure
- Email security tooling experience (Proofpoint or similar)
- Relevant certifications in cloud, identity, or VDI
- Background in regulated or security-focused environments
## Who Thrives Here
A senior engineer who has lived through real migrations who understands where user experience breaks, how modern endpoint security actually behaves in production, and what business continuity requires when the cutover window is tight. Someone stakeholders trust as an advisor, not just an implementer.
## Why Join Us
- **High-visibility transformation work.** This isn't maintenance you're shaping how a complex enterprise operates in the cloud, with direct executive visibility.
- **Real technical ownership.** You set the architecture and see it through to production. No handing designs off and hoping.
- **Modern Microsoft stack, end to end.** Entra, Intune, Windows 365, Conditional Access, Zero Trust depth across the platforms defining enterprise IT right now.
- **- **Room to lead.** Mentorship is part of the role, not an afterthought.

## Ready to Apply?
Send your resume along with a brief note on the largest Azure or VDI migration you've personally led. We review every application and respond to qualified candidates promptly.