Enterprise Infrastructure and Cloud Engineer (Chicago)

Honigman is a premier business law firm, based in Michigan with an international practice. Honigman is consistently recognized as one of the 101 Best and Brightest Places to Work, we earned this recognition by recruiting attorneys and staff members with outstanding credentials. Currently, we are looking for a Enterprise Infrastructure and Cloud Engineer in our Detroit or Chicago office. In addition to our Detroit and Chicago offices, we have offices in Grand Rapids, Bloomfield Hills, Ann Arbor, Kalamazoo, Lansing, and Washington D.C. With more than 350 attorneys working in 60 different areas of concentration, Honigman provides timely and cost-effective counsel to clients in numerous industries.

SUMMARY

The Enterprise Infrastructure and Cloud Engineer is responsible for the design, administration, security, reliability, and continuous improvement of the firm’s enterprise infrastructure and identity platforms. This position supports a hybrid technology environment that includes Microsoft Azure, Microsoft Entra ID, Microsoft 365 identity services, Windows Server, Active Directory, virtualization, storage, monitoring, disaster recovery, and related infrastructure services.

The engineer will administer identity and access management capabilities, including multifactor authentication, single sign-on, enterprise application integrations, authentication methods, Microsoft Entra Conditional Access policies, privileged access, and identity lifecycle controls. The position will work closely with Information Security, application owners, service desk personnel, vendors, and other IT teams to provide secure, reliable, and supportable technology services.

This individual is expected to independently troubleshoot complex technical issues, lead infrastructure initiatives, maintain accurate technical documentation, and apply automation and standardized operational practices wherever practical. Strong communication, customer service, risk awareness, and disciplined change management are essential to success in this role.

RESPONSIBILITIES

Identity and Access Management

• Administer Microsoft Entra ID and hybrid identity services, including authentication methods, enterprise applications, and synchronization with on-premises Active Directory.
• Design, implement, test, document, and maintain Microsoft Entra Conditional Access policies.
• Administer multifactor authentication, single sign-on, passwordless authentication, authentication strengths, self-service password reset, and related authentication controls.
• Integrate cloud and on-premises applications with Microsoft Entra ID using supported authentication and federation standards, including SAML, OAuth 2.0, OpenID Connect, and application proxy technologies where applicable.
• Configure and support enterprise application registrations, service principals, certificates, secrets, API permissions, and administrative consent workflows.
• Manage identity assignments using security groups, Microsoft 365 groups, application roles, and role-based access control.
• Periodically review privileged roles, application assignments, authentication methods, inactive identities, guest accounts, service accounts, and policy exclusions.
• Investigate authentication failures, risky sign-ins, access denials, account compromise indicators, and Conditional Access results using Microsoft Entra sign-in and audit logs.
• Maintain emergency-access procedures and ensure that identity-policy changes are tested, documented, and recoverable.
• Work with Information Security and application owners to apply least-privilege, Zero Trust, and separation-of-duties principles.

Cloud and Enterprise Infrastructure

• Administer infrastructure services hosted in Microsoft Azure and the firm’s data centers, including subscriptions, resource groups, virtualization, Azure Storage, etc.
• Deploy, configure, maintain, and troubleshoot Windows Server operating systems and associated infrastructure services.
• Administer Group Policy, DNS, DHCP, certificate-related services, and other core platform dependencies.
• Support Azure virtual machines, networking dependencies, storage, monitoring, and recovery capabilities within the position’s assigned scope.
• Administer virtualization, server hardware, storage platforms, and supporting management systems.
• Monitor system availability, capacity, health, security, and performance; identify trends and implement corrective actions.
• Assist with infrastructure modernization, cloud migration, lifecycle management, and technical-debt reduction.
• Design, administer, maintain, and troubleshoot the firm’s Citrix remote access and application delivery infrastructure, including published applications and desktops, access policies, authentication integration, capacity and performance management, upgrades, high availability, and disaster recovery.
• Participate in disaster-recovery and business-continuity planning, testing, documentation, and remediation.
• Maintain configuration standards and ensure infrastructure changes follow established change-management processes.

Automation, Monitoring, and Operational Improvement

• Develop and maintain PowerShell scripts and other automation used for administration, reporting, configuration validation, and repetitive operational tasks.
• Use Microsoft Graph, Azure management tools, and supported APIs to automate identity and infrastructure processes where appropriate.
• Create operational reports and dashboards that identify capacity, configuration, security, availability, and lifecycle risks.
• Maintain monitoring, alerting, and escalation workflows for assigned enterprise platforms.
• Identify recurring incidents and implement permanent corrective actions rather than relying solely on manual remediation.
• Maintain source-controlled scripts, documented prerequisites, change history, error handling, and operational runbooks.

Security and Governance

• Apply secure configuration standards to identity, server, remote access, cloud, virtualization, and management platforms.
• Support vulnerability remediation, security investigations, audit requests, access reviews, and compliance evidence collection.
• Review administrative permissions and recommend changes that reduce standing privilege and unnecessary access.
• Assist with the implementation and maintenance of privileged-access controls for administrative users and service identities.
• Ensure that authentication and access-policy changes include testing, exception handling, monitoring, rollback planning, and documentation.
• Coordinate with Information Security on incident response, identity containment, credential resets, session revocation, and access restoration.
• Assist with third-party and guest-access governance.

Support, Documentation, and Project Delivery

• Serve as an escalation resource for complex infrastructure, identity, authentication, and access issues.
• Provide technical guidance to service desk and other IT personnel.
• Maintain architecture diagrams, system inventories, configuration documentation, support procedures, and recovery runbooks.
• Lead or participate in infrastructure and identity projects from technical design through implementation and operational handoff.
• Coordinate with vendors and managed-service providers, and evaluate proposed technical solutions.
• Communicate technical risks, outages, project status, and implementation requirements clearly to both technical and nontechnical audiences.
• Participate in scheduled maintenance, incident response, and after-hours support as required by business needs.

QUALIFICATIONS

Required

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related discipline, or an equivalent combination of education and relevant professional experience.
• Five or more years of progressively responsible experience supporting enterprise infrastructure, cloud, identity, or systems-engineering environments.
• Hands-on experience administering Microsoft Entra ID and Active Directory in a hybrid enterprise environment.
• Experience with multifactor authentication, single sign-on, Conditional Access, enterprise application integration, and identity troubleshooting.
• Experience administering Windows Server and core infrastructure services such as DNS, DHCP, Group Policy, and public key or certificate-based services.
• Working knowledge of Microsoft Azure infrastructure and identity concepts.
• Understanding of SAML, OAuth 2.0, OpenID Connect, modern authentication, service principals, and application registrations.
• Experience analyzing logs and troubleshooting complex authentication, authorization, connectivity, and system-performance issues.
• Strong documentation, project coordination, customer service, and written and verbal communication skills.
• Ability to participate in scheduled maintenance and escalation support outside normal business hours when required.

Preferred

• Proficiency with PowerShell for administration, automation, reporting, and troubleshooting.
• Experience with Microsoft Graph and Azure automation.
• Experience with identity governance, privileged identity management, access reviews, entitlement management, or comparable IAM controls.
• Experience supporting a hybrid i