• Design and maintain enterprise cloud architecture frameworks and roadmaps spanning Azure and hybrid environments, translating enterprise requirements into scalable and secure platform architectures. • Publish and maintain enterprise cloud reference architectures and platform design patterns through the Cloud Center of Excellence (CCoE) to guide consistent engineering implementation. • Provide cloud architecture governance for enterprise initiatives, reviewing solution designs for enterprise cloud standardization, platform architectures, and operational guardrails. • Define enterprise cloud platform structure and governance models including landing zone architecture, tenant and subscription structures, resource organization models, policy enforcement, workload integration patterns, and architecture for tenant and subscription consolidation. • Define enterprise cloud platform technical standards including Azure security and operational baselines (RBAC, Azure Policy, workload identity, logging), hybrid networking models, container and Kubernetes platforms, and enforcement through infrastructure-as-code and CI/CD pipelines. • Lead enterprise Azure inventory and baseline assessments across tenants and subscriptions and establish cloud governance and FinOps architecture including tagging standards, cost allocation models, lifecycle governance, and consumption visibility.

• Support development, test and production environments including after-hours support, release management, and monitoring server usage and up-time. • Monitor system performance, availability, cost, and reliability; proactively identify and resolve issues. • Design, implement, maintain, and support cloud-based infrastructure in both Azure and AWS. • Automate infrastructure provisioning, configuration, and deployment using Infrastructure as Code (IaC) and scripting tools. • Migrate customer data from retiring colocation data center infrastructure to cloud environments. • Support IT compliance and security requirements, including auditing, logging, access controls, and regulatory standards. • Participate in on-call and after-hours support rotations as required to ensure high availability and uptime. • Perform all responsibilities in adherence to change management policies and procedures.

• Handle Entra ID administration and cloud identity tasks, including tenant configuration and common identity integrations. • Assist with Conditional Access and other policy work within established patterns. • Administer Microsoft 365 services (Exchange, SharePoint, OneDrive, Teams) and tenant configuration tasks. • Configure Intune device management tasks tied to cloud service delivery (profiles, compliance, baseline enforcement). • Contribute to Azure work under guidance, including VMs, storage, networking, and AVD within established designs. • Implement approved changes via Change Requests, including validation and clear documentation of outcomes. • Use existing RMM automation and tooling; write small task-level scripts when appropriate. • Execute patch management and lifecycle workflows within standards, including remediation work under guidance. • Maintain strong operational hygiene in tickets, notes, and documentation; create new KBs/runbooks/SOPs when gaps are found. • Participate in client calls as needed for troubleshooting, change discussions, and project work.

• Own Entra ID and cloud identity work across client environments, including integrations and authentication flows. • Design and implement Conditional Access patterns, MFA posture, and break-glass access approaches within standards. • Lead Microsoft 365 workstreams, including tenant configuration improvements and governance-related implementations. • Own Azure delivery work within the approved stack (VMs, storage, networking, AVD), including troubleshooting and remediation. • Lead projects end-to-end, including rollout planning, rollback planning, validation, and closure. • Regularly create SOPs, runbooks, KBs, and diagrams that improve delivery and supportability. • Build and improve reusable automation (PowerShell, Graph, workflow tooling) and refine existing patterns. • Drive permanent fixes for recurring issues and reduce repeat incidents through standards, documentation, and automation. • Participate in client calls as needed and communicate clearly about status, risks, and next steps.