Cloud Infrastructure Engineer

The Cloud Infrastructure Engineer is a senior hands‑on technical role responsible for the reliability, automation, security posture, cost discipline, and continuous improvement of Concert’s Azure and core infrastructure environments. The role has technical ownership of cloud infrastructure operations and supports on‑prem and IoT services as needed. The Cloud Infrastructure Engineer owns the day‑to‑day reliability, automation, and continuous maturity improvement of Concert's cloud environment and on‑premises infrastructure. The right candidate is detail oriented, organized, and able to maintain a stable and secure environment that is primarily Azure, with a smaller AWS footprint. The role will also work with solution teams to design and maintain the latest in smart building IoT devices, and cloud and network infrastructure to connect buildings and staff into an intelligent portfolio of automated operations and connected community services. Own the reliability, performance, and availability of Concert's cloud environment (IaaS and PaaS), and meet or exceed uptime KPIs for core systems. Act as technical platform owner and lead for cloud infrastructure, maintaining platform configuration, documentation, runbooks, and operational standards. Monitor capacity utilisation, cost efficiency, and performance against defined thresholds. Provide Level 2 and Level 3 support for incidents and service requests related to server infrastructure. Work within established ITSM processes for incidents, requests, changes, problems, asset/configuration, and knowledge management. Design, build, and maintain Infrastructure as Code (IaC), ensuring consistent, version‑controlled environments. Champion a 'policy as code' approach, integrating Policy and governance guardrails into infrastructure pipelines. Contribute to CI/CD pipeline configuration within DevOps for infrastructure change delivery. Manage key directory services — including Conditional Access Policies, Privileged Identity Management (PIM), Managed Identities, and Service Principals. Support Cloud posture management, remediate findings, and maintain security coverage across identities, servers, and network. Ensure compliance with Policy baselines that contribute to GRC controls and audit readiness. Contribute to Zero Trust architecture implementation in alignment with Enterprise Architecture. Support vulnerability management processes, including remediation tracking and prioritization for infrastructure assets. Participate in security incident response activities, supporting containment, remediation, and post‑incident analysis. Networking & Hybrid Connectivity Manage Cloud networking — including virtual network segregation, hub-and-spoke topology, Firewall, and Private DNS Zones. Maintain and support on‑premises network infrastructure in collaboration with the Network & Cloud Connectivity Engineer to ensure hybrid connectivity. Support cloud network monitoring through existing tooling and contribute to network availability targets. Define and track KPIs, ensuring proactive visibility into system health and performance. Support DR and BCP planning activities including playbook development, procedural reference guides, and technical execution of DR test exercises. Contribute to recovery confidence through repeatable and well‑documented recovery processes improvement to help mature the DR/BCP. Provide technical mentorship and guidance to junior team members on infrastructure matters. Respond to emergencies as‑needed during off‑hours, and implement planned changes during maintenance windows outside of core business hours. Contribute to the technology maturity roadmap, identifying automation opportunities, technical debt, and evergreening needs. Degree in Computer Science, Systems Engineering, or equivalent experience. Terraform, ARM, DevOps pipeline configuration and post build automation (Azure Automation, CLI, Ansible, PowerShell) for infrastructure delivery. Strong experience with Windows Server OS and Microsoft Infrastructure Services (Active Directory DS + GPOs, NPS, CA/PKI, DFS), Hyper‑V, SQL Server, and Backup & Recovery Strong experience in Cloud networking design and peering, hub‑and‑spoke topology, network security, firewalls, private DNS zones, and VPN gateways. Strong experience with Cloud Cost Management + Billing: budget alerts, reserved instance management, FinOps practices. Strong experience with Microsoft 365 Exchange Online administration. Microsoft Azure certifications: AZ-104 (Azure Administrator) or AZ-305 (Azure Solutions Architect Expert). AZ‑400 (DevOps Engineer). Working knowledge of SharePoint, Teams, OneDrive. Working knowledge of Operational Technology (OT): experience with building automation, BMS, or smart building integration. ITIL Foundation certification and ServiceNow working knowledge is an asset. Experience with Amazon Web Services (EC2 (web server) + Route5