[Remote] Senior Cloud & Systems Engineer

Note: The job is a remote job and is open to candidates in USA. KPA is a technology company seeking a Senior Cloud & Systems Engineer to support their IT and systems function. The role involves leading infrastructure modernization, managing identity governance, and overseeing Microsoft 365 administration, all while collaborating with DevOps and helpdesk teams to resolve complex issues.ResponsibilitiesLead infrastructure modernization - own the transition from hybrid on-premises and Azure to a fully cloud-native, domain-free environment; manage Azure and AWS workloads outside of DevOps scope; drive identity and platform consolidation as the company evolvesOwn identity governance end to end - Entra ID, Active Directory, hybrid identity, Azure AD Connect, conditional access, and access lifecycleOwn the full Microsoft 365 tenant including Exchange Online, SharePoint, Teams, and licensing; administer Intune and Autopilot for endpoint lifecycle management across Windows, macOS, iOS, and AndroidOwn the traditional systems administration layer that underpins the business - Windows Server, Hyper-V, DNS, DHCP, Group Policy, patching, firmware, and backup administrationBuild and own automation that makes the business more agile - PowerShell, API integrations, and AI-assisted development to reduce manual work and accelerate deliveryOwn network infrastructure across all office locations - Cisco Meraki switching, wireless, VLANs, DHCP, ISP management, and VPN connectivity; maintain PRTG monitoring and respond proactively to infrastructure health issues; keep firmware current across all network hardwareEvaluate, recommend, and lead the migration to a modern cloud telephony platform; own the current phone system through the transition including user provisioning, call routing, and licensingPartner with the DevOps, helpdesk and security team on complex escalations, identify root causes rather than symptoms, and build solutions that prevent repeat issuesSkillsBachelor's degree in computer science, information technology, or equivalent experience; Certifications such as CompTIA Security+, Microsoft AZ-104 or MS-102 are a strong plus5+ years of experience in systems administration or infrastructure engineering with meaningful time in hybrid Windows and Azure environments; you have done real sysadmin work and you also know your way around modern cloudStrong hands-on Azure experience required - Entra ID, Azure Virtual Desktop, Azure Files, Azure Arc, Azure Update Manager, and IaaS VM administration; solid Microsoft 365 administration across Exchange Online, SharePoint, Teams, Intune, and AutopilotPowerShell proficiency including Microsoft Graph API, Active Directory automation, and Exchange Online management; comfortable with API integrations and scripted workflows; experience using AI tools to accelerate engineeringSolid on-premises Windows Server background including AD DS, DNS, DHCP, and Group Policy; you are not afraid of legacy infrastructure and know how to manage it safely while moving toward something betterExperience with enterprise backup platforms and restore validation practices; working knowledge of Cisco Meraki or equivalent enterprise network platformStrong security awareness and good judgment around security decisions; familiarity with SOC 2 or similar compliance frameworks is a plusAWS experience is a plus — legacy workloads exist in AWS; disciplined about change management and documenting infrastructure changes before executing themBenefitsBonus potential of 10% annuallyCompany OverviewKPA provides Environment, Health & Safety (EHS), HR Management, and Finance & Insurance compliance software and services to companies. It was founded in 1986, and is headquartered in Lafayette, Colorado, USA, with a workforce of 201-500 employees. Its website is http://kpa.io.