Senior Cloud Operations Engineer

Company Description: Pathstone is a growing wealth management firm serving ultra-high net worth families, single family offices, foundations, and endowments. We are united by a clear purpose: to help clients pursue their Preferred Life — with clarity, confidence, and long-term support across the full landscape of wealth and well-being. Our services include investment advisory, as well as integrated planning and coordination across key areas such as tax strategy, risk management guidance, wealth and estate planning support, philanthropic planning, and family governance — helping clients navigate complexity and make informed decisions aligned with their goals. With more than 20 office locations and over $100 billion in client assets under management, advisory, administration, and related services, Pathstone has expanded significantly over the past five years, reflecting sustained momentum and continued investment in our team and platform. Pathstone is committed to making a meaningful difference for clients and their families, while fostering a supportive, purpose-driven environment for our professionals. Team members are encouraged to pursue their interests and contribute to the firm’s culture through committees and initiatives that help shape our shared mission. Our people are our greatest asset, and we offer a competitive, flexible benefits program designed to support life both inside and outside of work. Benefits include comprehensive medical, vision, and dental coverage, flexible spending options, flexible PTO, life insurance, education support, a 401(k) plan, parental leave, and more. Job Description: We are seeking an experienced Cloud Operations Engineer (Azure) to design, implement, and operate secure, scalable, and highly available cloud infrastructure within Microsoft Azure. This is a hands-on role focused on operational excellence—driving stability, performance, automation, cost optimization, security hardening, and resilient recovery strategies across a modern cloud platform. In this role, you will be responsible for maintaining and continuously improving cloud environments that support enterprise applications, ensuring alignment with security, compliance, and operational best practices. You will collaborate closely with engineering, security, and DevOps teams to ensure cloud services are deployed safely, monitored effectively, and enhanced continuously. The ideal candidate brings a strong combination of Azure administration, architectural awareness, and DevOps integration, with deep expertise in identity, security, and automation. You will play a key role in enabling rapid and reliable delivery through Azure DevOps and robust CI/CD pipelines while advancing the maturity and efficiency of the organization’s cloud operations. Key Responsibilities: Azure Infrastructure & Cloud Operations Administer and optimize Azure environments across IaaS and PaaS services, ensuring scalability, reliability, and performance. Deploy and manage Azure services including computer, networking, storage, and platform services. Monitor system health, availability, and performance using Azure-native and third party tools. Provide support for production systems, including incident response and root cause analysis. Maintain SLAs and ensure systems meet uptime and resiliency requirements. Own operational lifecycle management for Azure app registrations, enterprise applications, service principals, client secrets, certificates, Key Vault integrations, and related monitoring/alerting to prevent expiration-related outages. Support Azure networking resources including VNets, peering, private endpoints, private DNS zones, VPN connectivity, NSGs, routing, and firewall/security integration. Deploy and operate Azure SQL Database / Azure SQL Managed Instance services, including secure connectivity, backups, performance monitoring, availability options, and recovery validation. Create and maintain technical documentation, architecture diagrams, operational runbooks, and support handoff materials for Azure, identity, automation, and application platform services. Cloud-Centric Application Design Collaborate with application teams to design cloud-native and cloud-optimized solutions. Leverage Azure PaaS services such as: Azure App Service Azure Functions Azure Logic Apps Azure API Management Ensure applications are designed for high availability, fault tolerance, and scalability. Implement patterns such as microservices, event-driven architecture, and API-first integration. DevOps & Azure DevOps Enablement Partner with development teams to implement and manage CI/CD pipelines using Azure DevOps and enforce DevOps best practices. Support infrastructure provisioning. Automate deployment, configuration, and scaling processes. Ensure consistent environments across development, staging, and production. Identity, Access & Okta Integration Integrate and manage identity across Azure Entra ID and Okta. Design and maintain SSO, MFA, and federation between platforms. Implement role-based access control (RBAC) and least privilege principles. Manage user access provisioning, deprovisioning, and periodic access reviews. Support identity lifecycle governance and audit readiness. Security & Compliance Implement and maintain a security-first architecture, aligned with Zero Trust principles. Enforce policies for endpoint, network, and cloud workload protection. Utilize tools such as: Crowdstrike Falcon Platform Netskope Azure Policies Conditional Access Support regulatory compliance initiatives (e.g., SEC, NIST-aligned controls). Participate in security assessments, vulnerability management, and incident response. High Availability & Resiliency Design and maintain highly available and fault-tolerant systems across regions and availability zones. Implement backup, disaster recovery, and business continuity strategies. Validate recovery objectives (RTO/RPO) through regular testing. Ensure redundancy across critical systems and services. AI Enablement in Azure (Ops-focused) Support the deployment and operationalization of AI solutions including Copilot technologies, Azure OpenAI, and other modern LLM options (e.g., Claude) where appropriate. Implement secure-by-design AI patterns: access controls, data boundary protections, logging, monitoring, cost governance, and safe experimentation environments. Cost Management & Optimization Monitor and optimize Azure spending through: Resource right-sizing Reserved Instances and Savings Plans Auto-scaling configurations Ongoing audits of existing deployments Implement tagging and cost allocation strategies. Provide regular reporting and recommendations to leadership. Balance performance, reliability, and cost efficiency. Integration & Enterprise Systems Integrate cloud services with enterprise platforms and third-party systems. Support API-based integrations and hybrid connectivity. Collaborate with vendors and internal teams to deliver secure and scalable solutions. Required Qualifications: 4–7+ years of experience in IT infrastructure, cloud administration, or systems engineering. Extensive hands-on experience with Microsoft Azure (IaaS, PaaS, networking, identity). Experience with Azure DevOps and CI/CD pipelines. Strong knowledge of identity management (Entra ID / Okta integration). Experience with scripting/automation (PowerShell, Python, or similar). Solid understanding of networking concepts (DNS, TCP/IP, firewalls, VPNs). Preferred Qualifications: Azure certifications (Administrator, Security Engineer, or DevOps Engineer). Experience implementing Zero Trust architecture. Familiarity with Infrastructure as Code. Experience supporting regulated environments (financial services, healthcare, etc.). Knowledge of monitoring and observability tools (Azure Monitor, LogicMonitor). Bachelor’s degree in information technology related field. Key Competencies: Strong analytical and problem-solving skills. Effective cross-functional collaboration and communication. Ability to translate business requirements into technical solutions. Detail-oriented with a focus on security and compliance. Continuous improvement mindset with a focus on automation and efficiency. What Success Looks Like: Secure, stable, and highly available Azure environment. Efficient, automated deployment pipelines. Well-governed identity and access management. Optimized cloud spending aligned with business needs. Strong alignment between infrastructure, security, and application teams. Pay Transparency: Pathstone’s expected starting base compensation range for the position as of the time of this posting is $120,000 - $140,000 per year. The actual base compensation selected for this role will be set based on a variety of factors, including (but not limited to) experience, education, specialty and training. The successful candidate(s) may also be eligible for a discretionary bonus award. Visa Sponsorship: Please note, we are unable to provide visa sponsorship for the position offered. Accordingly, we are unable to hire individuals who require, or will require, employment visa sponsorship either now or in the future. Pathstone is proud to be an equal opportunity employer. As you explore opportunities, know that Pathstone communicates with candidates exclusively through an @pathstone.com email address. We do not make unsolicited job offers, and we will never ask for personal or financial information through email or web forms. If you receive outreach that appears to be from Pathstone but originates from a different domain, please disregard it. #LI-Hybrid