Job Description

Salary: $125,000 - 145,000 per year Requirements:

• 5+ years of experience in cloud infrastructure, enterprise infrastructure, cybersecurity, security engineering, or a closely related technical field.
• 3+ years of hands-on Microsoft Azure administration or engineering experience.
• Strong knowledge of Windows Server, virtual machines, enterprise storage, and cloud infrastructure.
• Strong understanding of networking fundamentals, including TCP/IP, DNS, VPNs, routing, firewalls, and secure network architecture.
• Experience with Microsoft Entra ID, identity management, SSO, and access lifecycle processes.
• Experience with endpoint management and EDR/XDR technologies, as well as an understanding of Zero Trust architecture and modern enterprise security practices.
• Experience using PowerShell, Python, APIs, or comparable scripting and automation tools.
• Experience implementing backup, recovery, monitoring, and platform reliability solutions.
• Strong troubleshooting, incident response, documentation, and root cause analysis skills.
• Bachelors degree in Information Technology, Computer Science, Cybersecurity, Engineering, or equivalent professional experience.
• Microsoft Azure Administrator Associate (AZ-104) and/or Azure Solutions Architect Expert (AZ-305) certification.
• Experience with Azure Monitor, Log Analytics, Microsoft Defender, or SIEM/SOAR platforms.
• Experience with Cloudflare security solutions, SentinelOne, Hexnode, or comparable enterprise platforms.
• Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM Templates.
• Familiarity with GitHub Actions, CI/CD pipelines, application security tools, and DevSecOps practices.
• Experience supporting SQL Server and PostgreSQL infrastructure.
• Experience with governance, compliance, and audit programs such as SOX, SOC 2, ISO 27001, NIST, or CIS; experience in regulated or publicly traded organizations is also relevant.
• Relevant capabilities include Azure cloud architecture and administration, enterprise security engineering, identity and access management, enterprise networking and Zero Trust, endpoint security and management, infrastructure and security automation, platform reliability and monitoring, vulnerability management and incident response, backup and disaster recovery, governance and compliance, cross-functional technical leadership, and continuous improvement.

• Design, deploy, administer, and maintain Microsoft Azure resources and platform services, including subscriptions, resource groups, virtual networks, storage, and compute.
• Operate Azure Virtual Machines and Azure Virtual Desktop environments, including deployment, upgrades, maintenance, performance improvements, and standardized configurations.
• Establish and maintain Azure architecture, governance, resource lifecycle, and configuration standards; monitor platform health, utilization, capacity, performance, and costs, and implement improvements.
• Support reliable development, testing, production, analytics, and enterprise application environments.
• Design and maintain secure virtual networking, DNS, routing, VPNs, firewalls, Network Security Groups, private endpoints, and hybrid connectivity.
• Administer and improve our Zero Trust platform, including Cloudflare WARP and related access controls, and strengthen network visibility, monitoring, segmentation, and secure communications.
• Set security standards for Azure resources, endpoints, network infrastructure, and cloud connectivity, and keep infrastructure and network architecture documentation current.
• Administer Microsoft Entra identity and security features, including security groups, SSO integrations, and identity-related cloud controls.
• Support Joiner, Mover, and Leaver processes, enterprise access lifecycle management, privileged access management, credential governance, and password management initiatives.
• Administer and improve endpoint security and management platforms, including Hexnode MDM, SentinelOne, and future enterprise technologies; manage access to approved enterprise AI platforms.
• Monitor security alerts and coordinate incident investigation, response, containment, remediation, and root cause analysis.
• Investigate phishing campaigns and security events, working with business teams to improve awareness and response.
• Manage vulnerability findings across cloud infrastructure, endpoints, and applications, coordinating remediation with infrastructure and development teams.
• Support application security processes, security assessments, vulnerability management platforms, and secure software development; integrate security scanning and controls into CI/CD workflows where appropriate.
• Implement centralized infrastructure and security monitoring, alerting, logging, and operational visibility.
• Conduct proactive maintenance and capacity planning to improve availability, stability, and performance.
• Develop and maintain backup and recovery strategies for critical workloads; validate backups, test disaster recovery, and help establish RTOs and RPOs.
• Participate in Business Continuity and Disaster Recovery planning and maintain supporting technical documentation.
• Automate infrastructure provisioning, security administration, reporting, and operational workflows using PowerShell, Python, APIs, Azure Automation, Infrastructure-as-Code, or similar tools.
• Standardize deployment and configuration processes, integrate infrastructure, endpoint, identity, and security platforms into centralized monitoring and workflows, and build automation that improves efficiency, compliance validation, and reliability.
• Evaluate emerging cloud and security technologies to improve scalability, security, and operational effectiveness.
• Develop and maintain technology and security policies, standards, procedures, architecture documentation, and operational runbooks.
• Support SOX compliance and future governance, audit, and security programs; participate in access reviews, change management, vulnerability remediation, disaster recovery, and other technology controls.
• Support third-party security reviews, vendor risk assessments, and audit evidence requests, and align infrastructure and security practices with enterprise policies, regulatory requirements, and technology standards.
• Partner with Data Engineering on SQL Server, PostgreSQL, analytics platforms, integrations, and supporting infrastructure.
• Work with Software Development to maintain reliable environments and improve DevSecOps and CI/CD security practices.
• Collaborate with Enterprise Systems Administration to improve endpoint management, identity integration, and user experience.
• Participate in enterprise architecture planning, technology roadmap development, and continuous improvement initiatives.

• AI
• ARM
• Architect
• Azure
• CI/CD
• Cloud
• DevSecOps
• GitHub
• Support
• Network
• Phoenix
• PostgreSQL
• PowerShell
• Python
• SQL
• Security
• TCP/IP
• Terraform
• Windows
• ChatGPT
• VPN

More:

We are Phoenix Energy, and we are seeking a Cloud Infrastructure & Security Engineer to help us build and operate a secure, resilient, scalable, and well-governed enterprise technology environment. Reporting to our Director of Enterprise Technology, this hands-on role spans Azure infrastructure, cloud and network security, identity and access management, endpoint security, platform reliability, automation, and disaster recovery. It combines infrastructure engineering with practical security engineering and governance rather than focusing solely on SOC work. As our company grows, this role will help mature our Enterprise Technology organization and support enterprise applications, analytics, AI initiatives, software development, and future business needs in partnership with Infrastructure, Software Development, Data Engineering, Enterprise Systems, and Business Operations. The annual salary range is $125,000–$145,000. Benefits include a 401(k) with matching, dental, health, and vision insurance, life insurance, an employee assistance program, employee discounts, flexible spending and health savings accounts, paid time off, and a retirement plan. This is an in-person position.

last updated 40 week of 2026

Job Tags

Similar Jobs