Infrastructure and Cloud Engineer

Job Description

Reports to: VP Information Technology

\n

Department: Information Technology

\n

\n

About the Role

\n

\n

We are seeking an Infrastructure and Cloud Engineer with strong Azure and Microsoft systems experience, particularly Windows Server, Active Directory, Entra ID, and hybrid identity. Candidates should also bring working knowledge of Microsoft 365 and Intune.

\n

Hands-on VMware administration and practical AWS knowledge are supporting requirements. The role maintains reliable hybrid infrastructure, resolves complex issues, and leads assigned initiatives within a small team. Security responsibilities focus on implementing approved controls and remediation in coordination with Cybersecurity.

\n

Key Responsibilities

\n

\n
• Hybrid infrastructure. Administer assigned cloud, virtualization, and server services, covering compute, storage, networking, availability, and lifecycle maintenance. Monitor performance and capacity, address alerts, and improve resource utilization and cloud costs.
\n
• Identity and workplace services. Maintain directory services, hybrid identity, access policies, and supporting infrastructure services. Administer assigned messaging, collaboration, and endpoint management services, including configuration, licensing, and migrations.
\n
• Security implementation. Apply approved access controls, MFA, Conditional Access, privileged access, hardening, and patching. Work with Cybersecurity to remediate vulnerabilities, support data protection controls, and provide technical assistance during incidents.
\n
• Backup and recovery. Maintain backup configurations and recovery procedures; investigate failures, perform restore tests, and support disaster recovery exercises against agreed recovery objectives.
\n
• Troubleshooting and automation. Provide advanced support for infrastructure, identity, and collaboration services. Investigate root causes, resolve recurring issues, and use PowerShell to automate routine administration and improve consistency.
\n
• Changes and initiatives. Lead assigned upgrades, migrations, and improvements with teammates and vendors. Document implementation and rollback plans, test changes, validate outcomes, and complete operational handover.
\n
• Documentation and operations. Maintain diagrams, configuration records, runbooks, and audit evidence. Follow change and incident processes, share knowledge, and participate in scheduled maintenance and shared critical-incident coverage.
\n

\n

\n

Required Experience

\n

\n
• Practical delivery. Demonstrated experience administering production infrastructure, troubleshooting complex issues, and delivering technical changes safely. Assessment emphasizes relevant hands-on capability and sound judgment.
\n
• Cloud and virtualization. Strong Azure administration skills across virtual machines, storage, virtual networks, access management, and monitoring. Hands-on VMware vSphere experience with vCenter, ESXi, availability, patching, and troubleshooting, plus practical AWS knowledge of compute, storage, IAM, and VPC networking.
\n
• Microsoft systems and identity. Strong Windows Server, Active Directory, Group Policy, DNS, Entra ID, and hybrid identity experience. Working experience administering Exchange Online, SharePoint Online, Teams, OneDrive, and Intune.
\n
• Security and resilience. Experience implementing identity and endpoint controls, maintaining backups, validating recovery, and remediating infrastructure vulnerabilities in coordination with security teams.
\n
• Automation and networking. Practical PowerShell scripting and understanding of TCP/IP, DNS, routing, segmentation, and cloud network controls sufficient to diagnose infrastructure issues and coordinate network changes.
\n
• Teamwork and communication. Ability to work independently, communicate technical issues clearly, maintain useful documentation, and coordinate competing operational and project priorities within a small team.
\n
• Regulated environments. Experience in banking or another regulated organization, including audit support, documented change control, and evidence of security remediation.
\n
• Additional technical skills. Experience with Microsoft Defender, Microsoft Purview, or repeatable infrastructure deployment using tools such as Terraform or Bicep.
\n
• Certifications. Relevant Microsoft, AWS, or VMware certifications are a plus; or demonstrated practical experience.
\n

\n

\n

Reporting and Communication:

\n

\n
• Report infrastructure health, service availability, incident summaries, and initiative progress to IT management.
\n
• Translate technical issues into clear business impact, risks, and recommended actions.
\n
• Support internal audits, regulatory examinations, and third-party assessments with technical evidence, documentation, and control walkthroughs.
\n

\n

Partner with IT and Cybersecurity teams to remediate findings, communicate progress, and incorporate improvements into daily operations

\n

\n

Pibank is an equal opportunity employer