Sr. Cloud Applications Engineer

Overview

Sr. Cloud Applications Engineer

• Reports to: Chief Information Officer (CIO)
• Location: Hybrid/Remote
• Department: Information Technology
  
• Salary range: $00/year depending upon experience

Position Summary

• The Sr. Cloud Applications Engineer will lead the design development integration and support of Azure-hosted applications and enterprise cloud services. The role is central to AADs technology transformation with a focus on AI-enabled patient services clinical and business application integrations and Azure platform capabilities.
• The role will operate with significant autonomy bringing deep expertise in cloud engineering integration architecture and automation. The engineer independently establishes technical direction drives implementation and provides practical recommendations to leadership while owning the reliability and continuous improvement of all cloud applications and integrations.
• Key responsibilities include Azure application architecture API integrations automation monitoring and operational support with technical leadership across AI-enabled patient services and clinical integrations and partners with peers - Security Director Network Architect application vendors and Managed Service Provider across AADs multi-state dermatology and pathology operations.

This is a remote position but we will only consider candidates who live in the following states: PA MD VA NC TN GA or FL. Candidates from any other states will not be considered.

Responsibilities

O365 PLATFORM ADMINISTRATION

• Provide technical administration and operational support for Exchange Online mailbox management mail flow rules transport security distribution groups and hybrid connectivity.
• Support SharePoint Online and OneDrive administration site architecture permissions governance information architecture retention policies and storage management across all AAD entities.
• Support Microsoft Teams administration team lifecycle governance guest access policies calling plans meeting room configuration and compliance settings.
• Administer and integrate Entra ID capabilities needed by cloud applications user provisioning group management role-based access control Conditional Access policies and identity governance across all AAD entities.
• Support Microsoft Intune integrations and application deployment requirements device enrollment compliance policies configuration profiles app deployment and Conditional Access enforcement across clinic and administrative endpoints.
• Coordinate Microsoft 365 licensing and application requirements with the M365 platform owner license assignment E3/F3 optimization cost accountability and lifecycle management
• Implement and govern SSO for all SaaS applications establishing a standard process for application onboarding API configuration and SSO federation.
• Build and support application workflows and integrations using Power Automate Power Apps and Power BI in alignment with the enterprise Power Platform governance model.
• Implement application-facing M365 governance requirements in partnership with the platform owner naming conventions retention and DLP policies sensitivity labels Purview configuration and audit logging.
• Lead technical onboarding and integration of new SaaS applications API configuration provisioning automation and connection to AADs identity and security stack.
• Partner with the Microsoft 365 platform owner on collaboration and productivity standards and M365-adjacent integrations

AZURE CLOUD APPLICATIONS & PLATFORM ENGINEERING

• Design build deploy and support Azure-hosted applications and workloads; elect and configure appropriate Azure compute storage networking and application services.
• Apply secure-by-design practices to Azure applications and services including identity secrets management network controls logging vulnerability remediation and HIPAA-aligned safeguards in coordination with the Security Director
• Implement application monitoring alerting diagnostics deployment automation and operational runbooks using Azure Monitor Azure Automation and related Azure services.
• Maintain identity and application provisioning automation integrating ADP HR events with Entra ID/Active Directory via Aquera
• Partner with the Network Architect and MSP on cloud networking VPN connectivity and DNS across all AAD locations

AI-ENABLED APPLICATIONS & AUTOMATION

• Serve as the primary technical application owner for AADs conversational AI patient services platform configure integrate test deploy and support patient-facing workflows for scheduling & billing inquiries
• Integrate the AI patient services platform with the RingCentral enterprise telephony environment.
• Evaluate pilot and integrate emerging Microsoft AI capabilities (Copilot Azure OpenAI) aligned to AADs clinical and operational workflows.
• Develop and maintain automation scripting using Azure Automation PowerShell and Power Platform

CLINICAL & ENTERPRISE SYSTEMS INTEGRATION

• Serve as ITs senior technical integration lead for enterprise clinical application integrations including the LIS evaluation and implementation defining HL7/FHIR interfaces EMR connectivity data exchange integration testing & monitoring
• Support integration architecture for clinical applications connecting to EHR billing and practice management systems.
• Optimize the ITSM platform configure workflows automations SLA rules and integrations with other enterprise systems.

GOVERNANCE DOCUMENTATION & TEAM LEADERSHIP

• Maintain technical documentation for all cloud platforms integration architecture and application configurations.
• Participate in IT steering meetings and provide senior technical input to roadmap planning vendor evaluations and budget discussions.
• Support HIPAA compliance CAP/CLIA inspection readiness and multi-state lab compliance from a cloud and application infrastructure perspective.
• Mentor and provide technical guidance to the existing IT infrastructure team during the transition from legacy to cloud-native systems.

DOCUMENTATION & STANDARDS

• Update diagrams site inventories device configurations and SOPs.
• Maintain organized consistent documentation to support operations and troubleshooting.

Qualifications

TECHNICAL SKILLS

• Azure application engineering: Azure App Services Functions API Management Logic Apps Storage Key Vault Azure Monitor and related application services
• Azure platform: Virtual Machines Azure App Services Azure Functions Azure Storage Azure Networking Azure Automation and monitoring
• Identity and application security: Entra ID application registrations managed identities service principals RBAC Conditional Access MFA Key Vault and SSO federation
• Integration and automation: REST APIs webhooks Logic Apps Power Automate PowerShell Microsoft Graph API and Azure CLI
• Scripting and automation: PowerShell Microsoft Graph API Azure CLI or comparable tooling
• Enterprise application integration: REST APIs webhooks HL7/FHIR interfaces API management event-driven integration and SaaS application onboarding
• AI application configuration: conversational AI or AI-enabled workflow platform - Microsoft Copilot Studio Claude ChatGPT Gemini

SOFT SKILLS

• Effective communication and teamwork skills.
• Customer-service mindset and ability to support end users professionally.
• Solid organizational habits diligence and follow-through.
• Ability to manage multiple tasks and respond quickly to issues.

Licensure/Certifications/Education

REQUIRED QUALIFICATIONS

• 5 years of direct experience in Azure cloud application engineering cloud platform engineering enterprise application integration or a directly comparable senior-level role
• Experience supporting Microsoft 365 services and integrating cloud applications with Entra ID Exchange Online SharePoint Online Teams and Intune
• 5 years of direct Microsoft Azure experience designing deploying integrating and supporting Azure-hosted applications and services.
• Strong experience with Microsoft Entra ID including application registrations service principals managed identities RBAC Conditional Access SSO and identity governance.
• Experience integrating enterprise applications with identity access endpoint and security controls including Microsoft Intune and Conditional Access
• Direct experience with application workflow automation and integration using Power Platform Azure services or comparable tools.
• Experience designing and implementing cloud application integrations using REST APIs webhooks event-driven patterns SSO and/or healthcare interoperability standards.

• Experience in integrating enterprise applications via APIs including REST APIs webhooks or HL7/FHIR healthcare data interfaces.
• Demonstrated experience in HIPAA-regulated healthcare environments with ability to translate compliance requirements into platform-level technical controls.
• Bachelors degree in computer science Information Technology Information Systems or a related field or equivalent professional experience

PREFERRED QUALIFICATIONS

• AZ-104 Azure Administrator Associate MS-102 M365 Enterprise Administrator Expert (Preferred)
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) strongly preferred at hire.
• Microsoft Certified: Identity and Access Administrator (SC-300)
• Experience with a conversational AI or AI patient engagement platform in a healthcare or patient-facing context (e.g. Microsoft Copilot Studio or equivalent)
• Experience with RingCentral or a comparable enterprise UCaaS / telephony platform including API-level integration.
• Familiarity with HL7 or FHIR healthcare data standards and direct experience with clinical system integrations (LIS EHR or Practice Management)
• Experience supporting a multi-site multi-state healthcare organization.
• Experience with Aquera Okta or a comparable identity lifecycle automation platform
• Familiarity with CLIA CAP or laboratory compliance requirements from an IT infrastructure perspective
• Experience supporting or participating in a HIPAA Security Risk Assessment (SRA)

WORKING CONDITIONS

• Standard business hours with occasional after-hours maintenance as needed.
• Participation in on-call rotation.
• Occasional travel to remote office locations and data centers.

Benefits are offered to employees working 30 hours per week:

• Medical Dental & Vision insurance effective 1 st of the month after date of start
• Short-term and long-term disability Voluntary life (employee spouse and child) Critical Illness and Hospital Indemnity Effective the 1 st of the month following date of hire
• Company provided Basic Life/AD&D insurance
• Paid time off
• Paid holidays
• Retirement Savings account
• Employee discount on cosmetic services and products

Required Experience:

Senior IC