Cloud Systems Administrator

Cloud Systems Administrator

The Cloud Systems Administrator owns the health, performance, and security of Ferrandino & Son's hybrid infrastructure across on-prem (Legacy Systems) and cloud environments (Azure/AWS), including identity, networking, and core platform services. This role is hands-on and proactive: maintaining uptime, closing security gaps, automating routine tasks, and ensuring rapid recovery when incidents occur. You'll partner closely with Automation/BI teams to keep infrastructure ready for AI-driven workloads and evolving business needs.

The Cloud Systems Administrator will:

Drive operational performance by maximizing uptime and resiliency: Proactively maintains and hardens core infrastructure, reducing outages and ensuring rapid recovery when incidents occur.

Accelerate modernization and scalability: Drives cloud migrations and automation, enabling the business to support AI-driven workloads and future growth.

Examples of Areas of Responsibility:

• Own hybrid infrastructure with a cloud-first migration strategy prioritizing the transition of core services to Azure while maintaining and hardening existing on-prem systems (VMware vSphere: ESXi, vCenter, vSAN; Windows Server/AD, DNS, DHCP; SAN/NAS/object storage). Ensure patching, firmware, capacity, security, and uptime are consistently maintained across all environments.
• Plan and execute cloud migration initiatives into Azure. Assess workloads for lift-and-shift vs. re-platforming, prioritize low-risk and high-impact candidates, project costs, design and document migration runbooks, and execute migrations using Azure-native services (including Azure Site Recovery, identity integration with Entra ID, and DR strategy alignment) with minimal downtime and operational disruption.
• Participate in on-call rotation, after-hours maintenance, and incident response to ensure system availability.
• Lead infrastructure projects end-to-end: planning, execution, stakeholder communication, and post-implementation review.
• Act as the internal owner of infrastructure monitoring and incident response. Oversee MSP monitoring services to ensure coverage, accuracy, and responsiveness; validate alerts, eliminate noise, and drive proactive and reactive issue resolution to minimize downtime and reduce MTTR.
• Own the security posture of the hybrid and Azure environment. Enforce security best practices across identity, networking, and infrastructure; continuously monitor system health and security signals; proactively identify and remediate risks, misconfigurations, and unnecessary resource sprawl. Partner with the MSP and Security/SOC to escalate and drive resolution of advanced threats and vulnerabilities.
• Manage OS and application lifecycle: installation, patching, upgrades, troubleshooting across Windows and a small Linux footprint.
• Maintain thorough, current documentation for systems, architecture, procedures, and DR playbooks.
• Drive process improvements using virtualization, cloud, and automation technologies.

Requirements:

Experience & Education:

• Bachelor's degree in Computer Science, MIS, or related field, or equivalent experience.
• 5+ years in systems/infrastructure administration, with expertise in VMware and Microsoft Windows Server.
• Working knowledge of VMware vSphere (ESXi, vCenter, vSAN) and core Windows services (AD, GPO, DNS, DHCP).
• Experience with SAN/NAS storage, hybrid cloud environments (Azure and/or AWS), and Microsoft 365 tools (Entra/Azure AD, SCCM).

Required Skills:

• 5–7 years of experience in infrastructure administration, including Windows Server/Active Directory, virtualization (VMware preferred), and hands-on experience or strong exposure to Azure (networking, identity, or compute).
• Demonstrated experience with enterprise backup/DR solutions (Veeam strongly preferred).
• Solid understanding of identity, authentication, and network fundamentals (DNS, DHCP, VLANs, VPN, RADIUS/NPS), with hands-on experience modernizing and migrating these services to cloud/hybrid architectures (e.g., Entra ID/Azure, Azure Networking, Azure S2S VPN).
• Hands-on scripting/automation skills (PowerShell required; Python/Bash a plus).
• Ability to identify and remediate infrastructure, security, and configuration issues across hybrid and Azure environments.
• Clear, concise communicator with strong documentation habits.

Preferred Skills:

• Azure Site Recovery or similar cloud-based DR experience.
• Exposure to SIEM/SOC workflows and vulnerability management tools.
• Experience with SAN/storage administration.
• Familiarity with ITIL practices (incident, problem, change).
• Relevant certifications (AZ 104, AZ 500, Security+).

Pay Range Detail: The base pay range for this role is $90,000 - $105,000 USD per year. This position is considered an exempt position under federal and applicable state wage and hour law. The salary range and/or hourly rate listed is a good faith determination of potential base compensation that may be offered to a successful applicant for this position at the time of this job advertisement and may be modified in the future. When determining a team member's base salary and/or rate, several factors may be considered as applicable (e.g., location, specialty, department, years of relevant experience, education, credentials, budget and internal equity).

Ferrandino & Son Inc. is a national facility maintenance and construction services company providing our clients with superior service. Our employees are provided comprehensive benefit options including Medical, Dental, Vision, Life Insurance, 401(k) with company match and more! We provide for learning and development of our team based on their job function and opportunities for growth. Come be a part of our growing team! For more information, visit us at:

Ferrandino & Son Inc is an Equal Opportunity Employer – M/F/Veteran/Disability/Sexual Orientation/Gender Identity

Equal Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.