The ad says“Directory & Identity: Operate AD/Azure AD; serve as Okta–AD SSO/MFA integration owner (health, upgrades, certificates, lifecycle)”
The ad says“Cloud Operations: Manage AWS/Azure/GCP workloads (VMs, IAM, storage/compute, networking, connectivity); optimize cost, reliability, and security”
The ad says“Cloud Operations: Manage AWS/Azure/GCP workloads (VMs, IAM, storage/compute, networking, connectivity); optimize cost, reliability, and security”
The ad says“Directory & Identity: Operate AD/Azure AD; serve as Okta–AD SSO/MFA integration owner (health, upgrades, certificates, lifecycle)”
The ad says“Automation: Deliver PowerShell/Python/Bash tooling for patching, configuration, and repetitive operations; champion IaC/Config‑as‑Code where feasible”
The ad says“Networking & Peripheral Support: Manage enterprise DNS (non‑Route 53); support ClearPass and printer authentication integrations”
The ad says“Cloud Operations: Manage AWS/Azure/GCP workloads (VMs, IAM, storage/compute, networking, connectivity); optimize cost, reliability, and security”
The ad says“Windows Servers: Administer 200+ servers; own patching SLAs, monitoring (Prometheus/Grafana), capacity/lifecycle plans, and vulnerability remediations”
The ad says“Follow ITIL‑aligned change process: RFC tickets with peer review, test evidence, implementation/backout plans, and maintenance windows; attend CAB as required”
The ad says“Track changes in Jira; update CMDB/asset records within 7 days of change; complete PIRs within 5 business days for failed/high‑risk changes”
The ad says“Directory & Identity: Operate AD/Azure AD; serve as Okta–AD SSO/MFA integration owner (health, upgrades, certificates, lifecycle)”
The ad says“Infrastructure & Migrations: Execute NYC data‑center app migrations; assist Nutanix decommission; administer Rubrik backups and Sectigo certificates”
The ad says“Directory & Identity: Operate AD/Azure AD; serve as Okta–AD SSO/MFA integration owner (health, upgrades, certificates, lifecycle)”
The ad says“Windows Servers: Administer 200+ servers; own patching SLAs, monitoring (Prometheus/Grafana), capacity/lifecycle plans, and vulnerability remediations”
The ad says“Automation: Deliver PowerShell/Python/Bash tooling for patching, configuration, and repetitive operations; champion IaC/Config‑as‑Code where feasible”
The ad says“Windows Servers: Administer 200+ servers; own patching SLAs, monitoring (Prometheus/Grafana), capacity/lifecycle plans, and vulnerability remediations”
The ad says“Automation: Deliver PowerShell/Python/Bash tooling for patching, configuration, and repetitive operations; champion IaC/Config‑as‑Code where feasible”
The ad says“Infrastructure & Migrations: Execute NYC data‑center app migrations; assist Nutanix decommission; administer Rubrik backups and Sectigo certificates”
The ad says“Infrastructure & Migrations: Execute NYC data‑center app migrations; assist Nutanix decommission; administer Rubrik backups and Sectigo certificates”
The ad says“Directory & Identity: Operate AD/Azure AD; serve as Okta–AD SSO/MFA integration owner (health, upgrades, certificates, lifecycle)”
The ad says“Windows Servers: Administer 200+ servers; own patching SLAs, monitoring (Prometheus/Grafana), capacity/lifecycle plans, and vulnerability remediations”
Values
The ad says“Familiarity with Docker/containers”
The ad says“Monitoring/logging with Prometheus/Grafana, Loki, Splunk, or ELK”
The ad says“Experience with Linux, Nutanix, Rubrik”
The ad says“Monitoring/logging with Prometheus/Grafana, Loki, Splunk, or ELK”
The ad says“Monitoring/logging with Prometheus/Grafana, Loki, Splunk, or ELK”
People Inc. seeks an experienced IT Cloud Engineer to support, maintain, and modernize enterprise infrastructure during data‑center decommissioning and cloud migrations. You will own Windows Server operations, identity integrations (Okta–AD/Azure-AD), automation, and hybrid cloud services across on‑prem and AWS/Azure/GCP
40 hours a week
Start date: ASAP
End date: 6 months with potential to extend
Windows Servers: Administer 200+ servers; own patching SLAs, monitoring (Prometheus/Grafana), capacity/lifecycle plans, and vulnerability remediations
Automation: Deliver PowerShell/Python/Bash tooling for patching, configuration, and repetitive operations; champion IaC/Config‑as‑Code where feasible
Active Directory Migration:
Plan & governance: define scope/success/rollback, RFC/CAB approvals, stakeholder comms, risk register, clear ownership and SLAs
Baseline & readiness: full AD/GPO/OUs/trusts/DC health (dcdiag/repadmin), security posture (tiering/LAPS/NTLM), backups/DR tested
Identity & SSO design: source of truth + JML, AAD Connect (PHS/PTA, sourceAnchor, staging/writeback), Okta agents/MFA/policies, UPN/sAMAccountName strategy
App/data/network prep + pilot: catalog LDAP/Kerberos apps/SPNs, file/print ACLs, DNS/DHCP validation; run a scoped pilot with helpdesk scripts and rollback
Execute, monitor, cutover, close: wave-based moves with replication checks, live auth monitoring, cutover steps, post‑validation, cleanup/decommission, docs/CMDB updates, PIRs and metrics
Change Management & Governance:
Follow ITIL‑aligned change process: RFC tickets with peer review, test evidence, implementation/backout plans, and maintenance windows; attend CAB as required
Track changes in Jira; update CMDB/asset records within 7 days of change; complete PIRs within 5 business days for failed/high‑risk changes
Enforce progressive delivery: phased rollouts, canaries, and checkpoint validation; document rollback criteria and success gates upfront
Documentation & Knowledge Management:
Maintain current runbooks, architecture/network diagrams, standard operating procedures, DR playbooks, and “How We Operate” docs in a versioned repository
Treat documentation as acceptance criteria: every change/migration updates docs before closure; keep system ownership and escalation paths explicit
Publish weekly change summaries and quarterly service health reviews to stakeholders
Accountability & Metrics:
Change quality: change failure rate ≤5%; PIR completion SLA met.
CMDB accuracy: ≥98% CI correctness; ownership fields populated for 100% tier‑1 services
Observability coverage: dashboards/alerts for 100% tier‑1 apps with on‑call playbooks
Patch compliance: ≥95% critical within 14 days; ≥95% standard within 30 days
Backup posture: ≥99% successful jobs; quarterly restore tests with evidence
Incremental Delivery:
Plan migrations and decommissioning as small, testable increments with clear exit/rollback; demonstrate progress via bi‑weekly demos and burn‑up charts
Use feature flags/guardrails where applicable; prefer automate‑then‑standardize over one‑off fixes
Maintain a visible improvement backlog (automation debt, toil reduction, cost optimizations) with quarterly goals
Benefits
Complete medical/dental benefits
Generous vacation and sick time
Commuter program
Discounted gym memberships
Pet insurance
401(K) retirement plan
Preferred experience
Monitoring/logging with Prometheus/Grafana, Loki, Splunk, or ELK
Familiarity with Docker/containers
Excellent troubleshooting and stakeholder communication
5+ years in systems administration or infrastructure engineering
Hands‑on with AWS, Azure, or GCP (IAM, compute/storage, networking)
Preferred: Cloud‑migration background, ITIL knowledge, Microsoft Administrator or cloud certifications
Strong Windows Server and patch automation experience
Experience with Linux, Nutanix, Rubrik
Deep knowledge of Okta, Active Directory, Azure AD integrations
Scripting with PowerShell (preferred), plus Python or Bash
