Enterprise Infrastructure and Cloud Engineer

Honigman is a premier business law firm, based in Michigan with an international practice. Honigman is consistently recognized as one of the 101 Best and Brightest Places to Work, we earned this recognition by recruiting attorneys and staff members with outstanding credentials. Currently, we are looking for a Enterprise Infrastructure and Cloud Engineer in our Detroit or Chicago office. In addition to our Detroit and Chicago offices, we have offices in Grand Rapids, Bloomfield Hills, Ann Arbor, Kalamazoo, Lansing, and Washington D.C. With more than 350 attorneys working in 60 different areas of concentration, Honigman provides timely and cost-effective counsel to clients in numerous industries.

SUMMARY

The Enterprise Infrastructure and Cloud Engineer is responsible for the design, administration, security, reliability, and continuous improvement of the firm’s enterprise infrastructure and identity platforms. This position supports a hybrid technology environment that includes Microsoft Azure, Microsoft Entra ID, Microsoft 365 identity services, Windows Server, Active Directory, virtualization, storage, monitoring, disaster recovery, and related infrastructure services.

The engineer will administer identity and access management capabilities, including multifactor authentication, single sign-on, enterprise application integrations, authentication methods, Microsoft Entra Conditional Access policies, privileged access, and identity lifecycle controls. The position will work closely with Information Security, application owners, service desk personnel, vendors, and other IT teams to provide secure, reliable, and supportable technology services.

This individual is expected to independently troubleshoot complex technical issues, lead infrastructure initiatives, maintain accurate technical documentation, and apply automation and standardized operational practices wherever practical. Strong communication, customer service, risk awareness, and disciplined change management are essential to success in this role.

RESPONSIBILITIES

Identity and Access Management

• Administer Microsoft Entra ID and hybrid identity services, including authentication methods, enterprise applications, and synchronization with on-premises Active Directory.
• Design, implement, test, document, and maintain Microsoft Entra Conditional Access policies.
• Administer multifactor authentication, single sign-on, passwordless authentication, authentication strengths, self-service password reset, and related authentication controls.
• Integrate cloud and on-premises applications with Microsoft Entra ID using supported authentication and federation standards, including SAML, OAuth 2.0, OpenID Connect, and application proxy technologies where applicable.
• Configure and support enterprise application registrations, service principals, certificates, secrets, API permissions, and administrative consent workflows.
• Manage identity assignments using security groups, Microsoft 365 groups, application roles, and role-based access control.
• Periodically review privileged roles, application assignments, authentication methods, inactive identities, guest accounts, service accounts, and policy exclusions.
• Investigate authentication failures, risky sign-ins, access denials, account compromise indicators, and Conditional Access results using Microsoft Entra sign-in and audit logs.
• Maintain emergency-access procedures and ensure that identity-policy changes are tested, documented, and recoverable.
• Work with Information Security and application owners to apply least-privilege, Zero Trust, and separation-of-duties principles.

Cloud and Enterprise Infrastructure

• Administer infrastructure services hosted in Microsoft Azure and the firm’s data centers, including subscriptions, resource groups, virtualization, Azure Storage, etc.
• Deploy, configure, maintain, and troubleshoot Windows Server operating systems and associated infrastructure services.
• Administer Group Policy, DNS, DHCP, certificate-related services, and other core platform dependencies.
• Support Azure virtual machines, networking dependencies, storage, monitoring, and recovery capabilities within the position’s assigned scope.
• Administer virtualization, server hardware, storage platforms, and supporting management systems.
• Monitor system availability, capacity, health, security, and performance; identify trends and implement corrective actions.
• Assist with infrastructure modernization, cloud migration, lifecycle management, and technical-debt reduction.
• Design, administer, maintain, and troubleshoot the firm’s Citrix remote access and application delivery infrastructure, including published applications and desktops, access policies, authentication integration, capacity and performance management, upgrades, high availability, and disaster recovery.
• Participate in disaster-recovery and business-continuity planning, testing, documentation, and remediation.
• Maintain configuration standards and ensure infrastructure changes follow established change-management processes.

Automation, Monitoring, and Operational Improvement

• Develop and maintain PowerShell scripts and other automation used for administration, reporting, configuration validation, and repetitive operational tasks.
• Use Microsoft Graph, Azure management tools, and supported APIs to automate identity and infrastructure processes where appropriate.
• Create operational reports and dashboards that identify capacity, configuration, security, availability, and lifecycle risks.
• Maintain monitoring, alerting, and escalation workflows for assigned enterprise platforms.
• Identify recurring incidents and implement permanent corrective actions rather than relying solely on manual remediation.
• Maintain source-controlled scripts, documented prerequisites, change history, error handling, and operational runbooks.

Security and Governance

• Apply secure configuration standards to identity, server, remote access, cloud, virtualization, and management platforms.
• Support vulnerability remediation, security investigations, audit requests, access reviews, and compliance evidence collection.
• Review administrative permissions and recommend changes that reduce standing privilege and unnecessary access.
• Assist with the implementation and maintenance of privileged-access controls for administrative users and service identities.
• Ensure that authentication and access-policy changes include testing, exception handling, monitoring, rollback planning, and documentation.
• Coordinate with Information Security on incident response, identity containment, credential resets, session revocation, and access restoration.
• Assist with third-party and guest-access governance.

Support, Documentation, and Project Delivery

• Serve as an escalation resource for complex infrastructure, identity, authentication, and access issues.
• Provide technical guidance to service desk and other IT personnel.
• Maintain architecture diagrams, system inventories, configuration documentation, support procedures, and recovery runbooks.
• Lead or participate in infrastructure and identity projects from technical design through implementation and operational handoff.
• Coordinate with vendors and managed-service providers, and evaluate proposed technical solutions.
• Communicate technical risks, outages, project status, and implementation requirements clearly to both technical and nontechnical audiences.
• Participate in scheduled maintenance, incident response, and after-hours support as required by business needs.

QUALIFICATIONS

Required

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related discipline, or an equivalent combination of education and relevant professional experience.
• Five or more years of progressively responsible experience supporting enterprise infrastructure, cloud, identity, or systems-engineering environments.
• Hands-on experience administering Microsoft Entra ID and Active Directory in a hybrid enterprise environment.
• Experience with multifactor authentication, single sign-on, Conditional Access, enterprise application integration, and identity troubleshooting.
• Experience administering Windows Server and core infrastructure services such as DNS, DHCP, Group Policy, and public key or certificate-based services.
• Working knowledge of Microsoft Azure infrastructure and identity concepts.
• Understanding of SAML, OAuth 2.0, OpenID Connect, modern authentication, service principals, and application registrations.
• Experience analyzing logs and troubleshooting complex authentication, authorization, connectivity, and system-performance issues.
• Strong documentation, project coordination, customer service, and written and verbal communication skills.
• Ability to participate in scheduled maintenance and escalation support outside normal business hours when required.

Preferred

• Proficiency with PowerShell for administration, automation, reporting, and troubleshooting.
• Experience with Microsoft Graph and Azure automation.
• Experience with identity governance, privileged identity management, access reviews, entitlement management, or comparable IAM controls.
• Experience supporting a hybrid infrastructure spanning on-premises data centers and Microsoft Azure.
• Experience with virtualization, monitoring, storage, and disaster-recovery platforms.
• Familiarity with ITIL practices, change management, incident management, and root-cause analysis.
• Experience in a professional-services, legal, financial, or similarly security-sensitive environment.
• Relevant certifications, such as:
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Azure Administrator Associate
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft Certified: Cybersecurity Architect Expert
• Vendor-specific infrastructure, networking, virtualization, or security certifications relevant to the assigned platforms

TECHNOLOGY ENVIRONMENT

• Microsoft Azure
• Microsoft Entra ID
• Microsoft 365
• Active Directory
• Windows Server
• PowerShell and Microsoft Graph
• Microsoft Entra Conditional Access and PIM
• DNS, DHCP, Group Policy and PKI/certificate services
• Citrix Virtual Apps and Desktops
• Azure Virtual Desktop
• Azure & VMWare Virtualization and enterprise storage
• Monitoring and disaster-recovery platforms
• Enterprise authentication technologies including SAML, OAuth 2.0 and OpenID Connect

REQUIREMENTS

• Must be authorized to work in the United States without employer sponsorship now or in the future
• This position is not eligible for visa sponsorship

Pay Range and Compensation Package

Honigman provides a generous total compensation package, which includes comprehensive health and well-being benefits, as well as 401k and profit sharing. The anticipated annual pay range for this role is $120,000 to $140,000 (exempt). The actual offered pay rate will be determined based on various factors, including qualifications, experience, geographic location, education, external market data, and internal equity considerations.

Benefits & Additional Information

Successful candidates will enjoy an exceptional career opportunity within a welcoming environment. Eligible employees can also take advantage of Honigman’s comprehensive benefits program, highlights of which are below:

• Healthcare, life and disability insurance
• 401K and profit sharing
• Bonus program
• Generous All Purpose Leave (APL) program that increases with tenure
• Well-being programs (e.g., mental health services, medical resources, and more)
• Learning and development programs
• Employee discounts

For more information, click on “Our Benefits” when you visit:

Honigman is an Equal Opportunity Employer and does not discriminate on the basis of race, color, religion, sex, age, national origin, veteran status, marital status, sexual orientation, disability or any other category prohibited by applicable local, state or federal law. This policy applies to all aspects of employment, including recruitment, placement, promotion, transfer, demotion, compensation, benefits, and termination .