Cloud Systems Engineer III

Cloud Systems Engineer Opportunity

At Orange County's Federal Credit Union, we create meaningful relationships that empower our members and enrich our community. With over 86 years of trust, $3 billion in assets, and 145,000+ members, we've built a reputation for excellence—and we're just getting started.

Our commitment to people, performance, and purpose has earned us the #1 spot in the Orange County Register's 2024 & 2025 Best Credit Union list, and the voices of our employees have earned us the Peter Barron Stark Award for Workplace Satisfaction. When you join us, you're not just taking the next step in your career; you're joining a team that loves where they work.

The targeted annual salary range is $123,000.00 to $135,000.00. Final offer will be determined based on experience, education, training/certifications and specialized skills.

Perks & Benefits:

• Health Coverage: Comprehensive benefits, including Anthem, Delta Dental, and VSP, effective from your first day.
• Financial Security: Life insurance at no cost and a 401(k) plan with an employer match up to 6%.
• Work-Life Balance: 13 days of vacation and seven (7) sick days annually and paid holidays.
• Recognition & Growth: Annual merit increases, discretionary and referral bonuses, as well as educational grants up to $1,000 per year.

Position Summary:

Under general direction, builds and operates secure, reliable, and scalable cloud and on-premises server infrastructure. Administers Microsoft Windows Server environments (2012, 2016, and 2019) alongside Linux-based systems and manages endpoint and device compliance via Microsoft Intune. Implements cloud platform capabilities (compute, storage, networking, identity, security, observability, and automation) to support application teams and meet availability, performance, and compliance requirements. Develops and maintains Infrastructure as Code (IaC) and deployment pipelines; troubleshoots complex issues and participates in incident response and continuous improvement efforts across hybrid cloud and on-premises environments.

Essential Duties and Responsibilities:

Windows Server Administration:

• Administer and maintain Microsoft Windows Server 2012, 2016, and 2019 environments, including installation, configuration, patching, and lifecycle management.
• Manage Active Directory, Group Policy Objects (GPOs), DNS, DHCP, and related Windows Server roles and features.
• Monitor server health, performance, and capacity; identify and resolve hardware, OS, and application-layer issues.
• Perform server hardening and apply security baselines in alignment with CIS benchmarks and organizational compliance requirements.
• Support backup, restore, and disaster recovery operations for Windows-based workloads, including periodic testing and documentation of recovery procedures.
• Plan and execute Windows Server upgrades, migrations, and decommissioning in coordination with application and security teams.

Linux OS Administration:

• Administer Linux-based servers (RHEL, CentOS, Ubuntu, or equivalent distributions) including installation, configuration, patching, and troubleshooting.
• Manage Linux services, processes, file systems, user accounts, and permissions in accordance with least privilege standards.
• Write and maintain shell scripts (Bash) to automate routine Linux administration tasks and reduce operational toil; develop and maintain Ansible playbooks as part of Infrastructure as Code (IaC) practices to automate configuration management and system provisioning.
• Support integration between Linux workloads and cloud services (AWS and/or Azure), ensuring consistent security and operational standards across hybrid environments.

Microsoft Intune & Endpoint Management:

• Manage and administer Microsoft Intune for device enrollment, compliance policy enforcement, and configuration profile deployment across Windows, iOS, and Android endpoints.
• Develop and maintain Intune-based application deployment packages and update rings to ensure consistent, secure software delivery.
• Monitor device compliance posture and remediate non-compliant endpoints in collaboration with security and helpdesk teams.
• Integrate Intune with Azure Active Directory (Entra ID) for conditional access, identity-based policies, and Zero Trust endpoint controls.
• Maintain documentation for endpoint management standards, Intune configurations, and change procedures.

Cloud Infrastructure & Platform Services:

• Implement, configure, and operate cloud infrastructure and shared services (AWS and/or Azure) following approved standards to meet availability, performance, security, and compliance requirements.
• Build and update Infrastructure as Code (e.g., Terraform, Bicep/ARM, CloudFormation) using version control, testing/validation, and peer review.
• Implement identity and access patterns (IAM/RBAC, least privilege, MFA/conditional access) and integrate secrets/key management into solutions.
• Configure cloud networking components (VPC/VNet, routing, DNS, load balancers, private endpoints) and support connectivity (VPN/ExpressRoute/Direct Connect) in partnership with network teams.
• Configure and use observability tools (logging, metrics, tracing) to support monitoring, alerting, and troubleshooting; contribute to SLO/SLI reporting.
• Support container and platform services (e.g., AKS/EKS, container registries, API gateways, managed databases, messaging) by implementing configurations, upgrades, and routine operational tasks.
• Apply cloud security controls (policies/guardrails, baseline hardening, encryption) and assist with remediation of findings and audit evidence collection.
• Use and improve CI/CD pipelines for infrastructure and platform changes; help standardize release and rollback practices.
• Contribute to cloud cost and performance optimization (tagging compliance, basic rightsizing recommendations, and usage reporting) and follow established FinOps practices.

Operations & Continuous Improvement:

• Operate and continuously improve cloud and on-premises environments through incident response, problem management, root-cause analysis, and reliability engineering practices.
• Implement and maintain cloud landing zone components (accounts/subscriptions, networking, security guardrails, identity, logging, and baseline configurations) under established standards and guidance.
• Collaborate with application, data, and security teams to evaluate solution designs, select managed services, and implement resilient architectures (multi-AZ/region patterns, backup/restore, and failover).
• Identify and implement automation opportunities using scripting and tooling (e.g., Python, PowerShell, Bash, CI/CD) to reduce toil and improve consistency.
• Provide escalation support for cloud and infrastructure platform issues, partnering with vendors and internal stakeholders to resolve complex service-impacting incidents.
• Create and maintain technical documentation and runbooks; share knowledge with peers and partner teams and follow established operational standards.
• Develop, test, and tune disaster recovery and business continuity capabilities for cloud workloads, including backup strategies, recovery automation, and periodic exercises.
• Manage cloud resource lifecycle and governance (policies/guardrails, tagging, identity reviews, deprecation planning), ensuring environments remain secure, supported, and auditable.

Qualifications and Experience:

• Bachelor's degree in Engineering/Computer Science or Information Technology (or commensurate on-the-job experience) desired.
• 3+ years of experience administering Microsoft Windows Server (2012, 2016, and/or 2019) in an enterprise environment, including Active Directory, Group Policy, DNS, and DHCP.
• Working knowledge of Linux OS administration (RHEL, CentOS, Ubuntu, or equivalent), including shell scripting and system troubleshooting.
• Hands-on experience with Microsoft Intune for device enrollment, compliance policy configuration, and endpoint management; familiarity with Azure Active Directory (Entra ID) and conditional access.
• 2+ years of experience implementing and operating cloud infrastructure and services (AWS and/or Azure).
• Strong experience with Infrastructure as Code and configuration management (e.g., Terraform, Bicep/ARM, CloudFormation, Ansible) and modern Git-based workflows.
• Experience working in multi-environment cloud estates (multiple accounts/subscriptions) and supporting shared services patterns under established governance.
• Hands-on experience with cloud security and identity (IAM/RBAC, secrets and key management, encryption, policy/guardrails)