Cloud & Automation Engineer

Overview The Cloud & Automation Engineer will help own, operate, and evolve our Microsoft Azure and Microsoft 365 environments. This is a hands‑on, senior‑level engineering role focused on execution, automation, and operational excellence. You will design and support cloud and identity platforms that serve both corporate users and restaurant operations nationwide. This role partners closely with Infrastructure, Network, Endpoint, Security, and Restaurant Technology teams and plays a key role in improving reliability, security, and efficiency through automation. Responsibilities The essential functions in this job description are not all-inclusive of this position’s duties and responsibilities. Reliable and dependable attendance is required. Manage Azure subscriptions, resource groups, networking, identity integrations, and cost controls Design secure, resilient, and scalable cloud architectures aligned with business needs Implement Azure governance, policies, and cost‑optimization strategies Manage Entra ID (Azure AD), Conditional Access, RBAC, and identity protection Maintain cloud security posture using Defender, Monitor, logging, and alerts Develop production‑grade automation using PowerShell, Azure Automation, Logic Apps, Functions, and APIs Integrate IT systems such as monitoring, asset management, ticketing, endpoint, network, and security platforms Automate workflows including user lifecycle events, device onboarding, reporting, monitoring responses, and audit evidence collection Create reusable scripts and runbooks with proper logging, error handling, and documentation Partner with Security and Compliance teams on initiatives such as PCI and audit support Participate in incident response, root cause analysis, and continuous improvement efforts Act as a senior escalation point for cloud, identity, and automation topics Contribute to standards, architecture decisions, and technical roadmaps Mentor and support other engineers through collaboration and documentation Qualifications Bachelor's degree in computer science, information technology, or a related field Microsoft certifications (AZ-104, AZ-305, or similar) preferred 5+ years of hands‑on experience with Microsoft Azure administration and cloud architecture Advanced experience administering Microsoft 365 and Entra ID (Azure AD) Strong PowerShell scripting skills with real‑world automation experience Experience integrating systems using REST APIs and service principals Solid understanding of identity, authentication, SSO, Conditional Access, and least‑privilege access Experience with Azure services such as Monitor, Defender for Cloud, Azure Policy, Key Vault, and Automation Accounts Experience supporting Windows‑based and hybrid environments Strong communication, documentation, and organizational skills Experience supporting multi‑site or operational environments (retail, restaurant, hospitality) First Watch is an equal opportunity employer. In compliance with the Americans with Disabilities Act, First Watch will provide reasonable accommodations to qualified individuals with disabilities and encourages both prospective and current employees to discuss potential accommodations with the employer. #J-18808-Ljbffr