Cloud Infrastructure Engineer

Who We Are Lowenstein Sandler is one of the most sophisticated law firms in the United States, with over 400 lawyers and 300 business services professionals serving clients from offices in New York, Palo Alto, Roseland, Salt Lake City, San Francisco, Washington, D.C., and Wilmington. We recruit candidates who seek a collaborative, entrepreneurial culture that prioritizes our clients, our colleagues, and the communities where we work and live. Committed to career development and to an inclusive workplace, the firm offers many programs and opportunities for personal and professional growth. We seek professionals for our business services group who share these values. What You Will Do Responsible for the day‑to‑day design, administration, and optimization of the firm’s cloud and hybrid infrastructure, with a primary focus on Microsoft Azure. Responds to platform alerts and incidents to troubleshoot and correct issues and maintain availability of essential systems. Partners with security, endpoint, network, and application teams to deploy and maintain production services in alignment with operational standards, governance, and compliance requirements. Essential Job Requirements Design and architect end‑to‑end Azure infrastructure solutions aligned with business, security and technical requirements. Lead cloud deployment initiatives, and work with the Director of Information Security to secure applications on Azure and other cloud platforms. Assist in the development and enforcement of cloud architecture standards, governance frameworks, and best practices. Collaborate with infrastructure, endpoint, security, and software engineering teams to ensure scalable and secure infrastructure design and compliance of cloud infrastructure systems. Optimize cloud environments for cost, performance, scalability, and reliability. Work with infrastructure engineers to implement and secure cloud networking solutions including VNets, VPNs, ExpressRoute, and hybrid connectivity. Implement and maintain monitoring and observability across the Azure estate using Azure Monitor, Log Analytics, diagnostic settings, workbooks, and action groups; tune alerting for platform health, performance, capacity, and cost. Work with the Director of Security to define and deploy Azure Policy and other initiatives to enforce governance, security baselines, resource tagging, and regulatory compliance; author custom policies and remediation tasks where built‑in definitions fall short. Administer Entra ID at scale: Conditional Access, Privileged Identity Management (PIM), named locations, passwordless / FIDO2 / YubiKey, administrative units, and Graph API automation. Automate routine tasks and workflows using PowerShell, including modules, error handling, REST API consumption, and Microsoft Graph SDK. Deliver infrastructure as code using Bicep, Terraform, or equivalent tooling. Support and enhance Microsoft 365 services including Exchange Online, Teams, SharePoint, and Intune. Implement and maintain hybrid environments integrating on‑premises systems with Azure AD. Troubleshoot complex infrastructure issues and provide root cause analysis. Collaborate with security team to enforce compliance, patching, and vulnerability management. Support backup, disaster recovery, and business continuity strategies. Evaluate emerging technologies and recommend improvements to cloud architecture strategy. Participate in infrastructure projects, upgrades, and migrations. Respond to system and security alerts as required to maintain up‑time and system performance. Participate in on‑call rotation once a month. Skills, Knowledge, and Abilities Minimum 5 years experience designing cloud architecture and contributing to cloud strategy and standards. Experience designing and supporting Azure infrastructure (IaaS, PaaS, networking, and identity). Experience using Azure Monitor, Log Analytics, and related tools to monitor and troubleshoot platform health. Experience implementing governance and compliance controls using Azure Policy and related standards. Familiarity with best practices for securing cloud infrastructure and applications. Experience administering Entra ID, including Conditional Access, Privileged Identity Management (PIM), and passwordless authentication (FIDO2 / YubiKey). Experience delivering infrastructure as code using Bicep, Terraform, or equivalent tools. Proficiency with PowerShell scripting and automation, including Microsoft Graph SDK. Strong Windows Server administration skills and experience supporting hybrid environments. Experience administering Active Directory and Group Policy in an enterprise environment. Experience supporting Microsoft 365 services such as Exchange Online, Teams, SharePoint, and Intune. Strong knowledge of security best practices and ability to apply standards in a production environment. Experience optimizing cloud environments for cost, performance, and reliability. Experience supporting backup, disaster recovery, and business continuity practices. BS degree or equivalent experience and IT certifications. Office Location: Roseland, NJ (Hybrid). Schedule: Full‑time, Monday through Friday, 9:00 am – 5:00 pm ET. Amount of Travel Required: Minimum one annual visit to the firm’s multiple offices as required. The expected salary range for candidates meeting the requirements of this position is $165,000 to $175,000. The range provided is the salary that Lowenstein Sandler in good faith believes at the time of this posting that it is willing to pay for the advertised position. Exact compensation will be determined based on individual candidate qualifications and location. Our benefits package includes coverage options for medical, dental, vision, prescription drug, life insurance, disability, FSAs, 401K, and paid time off. Disclaimers This job description is not designed to cover or contain a comprehensive listing of all activities, duties or responsibilities required by an employee. Lowenstein Sandler LLP is committed to equal employment opportunity and providing reasonable accommodations to applicants with physical and/or mental disabilities. We value and encourage diversity and solicit applications from all qualified applicants without regard to race, color, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, veteran status, gender identity, genetic information, or any other characteristic protected by federal, state, or local law. #J-18808-Ljbffr