Infrastructure Engineer

Infrastructure Engineer

Orveon is a new kind of beauty company on a powerful mission: to change the way the world thinks about beauty. We dare to do things differently — pushing boundaries with purpose, inspiring creativity, and moving with intention in everything we do.

We are a collective of three premium and prestige beauty brands: bareMinerals, BUXOM, and Laura Mercier. With offices in New York, London, and Columbus, we combine the energy of an entrepreneurial spirit with the scale and ambition to change the way the world thinks about beauty.

Our culture is built on our IMPACT values — Innovative, Motivated, Passionate, Accountable, Collaborative, and Thoughtful. These aren't just words; they define how we show up for each other, for our brands, and for the world around us. We gain strength from our differences and believe that progress happens when we move as one. We are proud to offer a hybrid work model to support the work-life balance of our teams, and we are committed to fostering an inclusive, agile environment where everyone can thrive.

We are seeking a skilled Infrastructure Engineer to join our Infrastructure and Security team to manage our Microsoft 365, Azure and other cloud/SaaS environments. This role is pivotal in designing, implementing, and managing enterprise-scale cloud environments that support business-critical applications and services while maintaining our overall security posture. In addition to cloud engineering responsibilities, this role will act as the face of IT and escalation point for the users at our New York office, facilitating timely resolution of technical issues and maintaining high levels of user satisfaction.

Primary Responsibilities:

• Microsoft 365 Security Administration (Exchange 365, Teams, SharePoint 365, Entra ID).
• Implement compliance and data governance policies using Purview.
• Oversee Azure services and enforce security best practices.
• Design and deploy scalable, secure, and resilient cloud solutions.
• Manage and monitor Azure infrastructure, ensuring performance, reliability, and cost optimization.
• Monitor identity and access management controls.
• Support integration and security for multiple SaaS platforms.
• Ensure compliance with security policies and best practices using Entra ID, RBAC, Azure Key Vault, and secure linked services.
• Troubleshoot and resolve issues related to cloud infrastructure and services.
• Provide technical guidance and mentorship on Azure and other cloud technologies.
• Stay up to date with Azure innovations and recommend improvements.
• Document support procedures and contribute to knowledge base articles for recurring issues.
• Deliver frontline support for end users in the New York office, including:
• Triaging hardware/software issues.
• Administering local physical and wireless networks.
• Coordinating with remote support teams.

Required Qualifications:

• 3+ years of experience administering Microsoft 365 (Outlook, Teams, SharePoint, Entra, Purview).
• 3+ years of experience in cloud infrastructure role (Azure and others)
• Strong understanding of Azure infrastructure and security principles.
• Familiarity with SaaS application management and security.
• Proficiency in Azure services including Azure Data Factory, Azure Synapse, Azure SQL, Azure Blob Storage, Azure Purview. Entra ID, RBAC, Azure Key Vault, and secure linked services
• Experience with Microsoft Fabric, Power BI, and cloud-based reporting tools.
• Experience with scripting languages (Python, Bash, PowerShell).
• Experience providing hands-on technical support in a multi-office environment.
• Bachelor's degree in Computer Science, Information Technology, or commensurate experience.

Preferred Skills:

• Microsoft Certified: Azure Administrator Associate (highly preferred)
• Microsoft Certified: Security, Compliance, and Identity Fundamentals (highly preferred)
• CompTIA Security+ or CISSP
• Certifications such as AZ-104 Azure Fundamentals or AZ-305 Designing Azure Infrastructure.
• Experience in GCP infrastructure
• Familiarity with security frameworks and penetration testing protocols.
• Good understanding of Wireless networks
• Excellent problem-solving, communication, and collaboration skills.
• Ability to work independently and manage support requests efficiently.

What Orveon Offers You:

• "Hybrid First" Model – 3 days per week in office, balancing virtual and face-to-face interactions.
• "Work From Anywhere" – Freedom to work six (6) weeks annually from the location of your choice.
• Complimentary Products – Free and discounted products on new releases and fan-favorites.
• Professional Development – Exposure to senior leadership, learning and development programs, and career advancement opportunities.
• Community Engagement – Volunteer opportunities in the communities in which we live and work.

Pay Transparency - One of our values is Stark Honesty and the following represents a good faith estimate of the compensation range for this position.

At Orveon Global, we carefully consider a wide range of non-discriminatory factors when determining salary. Actual salaries will vary depending on factors including but not limited to location, education, experience, and qualifications.

The pay range for this position is $98,000-$130,000. Supplemented with all the amazing benefits above for full-time employees!

Equal Opportunities and Accommodations:

Orveon is deeply committed to building a workplace and global community where inclusion is not only valued but prioritized. We strive to build and nurture a culture where a focus on diversity, equity, and inclusion is instinctive. Our deep sense of passion and pride in what we do, both as individuals and as a collective, unifies our shared commitment to "changing beauty for the better". Therefore, all qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, family status, marital status, sexual orientation, national origin, genetics, neurodiversity, disability, age, or veteran status, or any other non-merit based or legally protected grounds. We recognize and celebrate different ideas, perspectives, and backgrounds and know they create a more robust and creative work environment.

BE AWARE OF FRAUD! Please be aware of potentially fraudulent job postings or suspicious recruiter activity by persons that are posing as Orveon Global Recruiters/HR. Please confirm that the person you are working with has an @orveonglobal.com email address. Additionally, Orveon Global does NOT request financial information or payments from candidates at any point during the hiring process. If you suspect fraudulent activity, please visit the Orveon Global Careers Site at to verify the posting and apply through our secure online portal.