• Partner with engineering teams to review cloud and compute architecture design changes • Establish threat models for cloud and compute paved roads to identify security risks • Develop or adopt open-source tools to monitor and harden cloud Infrastructure • Apply expert knowledge of security best practices for AWS and Kubernetes to inform remediations • Drive the definition and implementation of security policies and monitor in conformance to policies • Write code for automations that support security requirements like threat detection • Conduct initial incident triage and participate in the incident response process

Role Description The Infrastructure and Enterprise Systems practice group (IES) at Kraft Kennedy provides strategic guidance, technology planning, and systems design and integration services for organizations of all sizes. Within Kraft Kennedy, the IES is responsible for all cloud and on-premises infrastructure, data center technologies, enterprise applications (e.g. messaging systems, unified communications, etc.), identity services, cloud security and compliance, and more. We are looking for an experienced technology professional with strong experience in Microsoft’s cloud infrastructure, security, and collaboration technologies to provide the highest degree of service to our clients. You must live in one of these locations to be considered for this remote position: Connecticut, Delaware, Florida, Georgia, Illinois, Maryland, Massachusetts, New York, Nevada, South Carolina, North Carolina, Tennessee, Texas, Utah, Virginia, Vermont, DC, Kentucky, Pennsylvania, Ohio, or Washington. Duties/Responsibilities - Implement and support infrastructure technologies such as Microsoft Azure, VMware, and networking technologies. - Execute migrations of on-premises platforms to cloud infrastructure. - Manage enterprise support requests from clients subscribing to Kraft Kennedy’s enterprise managed services. - Execute planned evening and weekend maintenance tasks in support of Kraft Kennedy’s enterprise managed services clients, when necessary. - Participate in weekly on-call rotation for evening and weekend support assistance, as requested by enterprise managed services clients. - Escalate to internal and, when necessary, external resources in an appropriate time frame to manage the resolution of complex client issues. - Provide on-site support, as necessary. Qualifications - Microsoft Azure Infrastructure with a heavy focus on Azure Networking, including firewalls, site-to-site VPNs, load balancing, private endpoints, traffic managers, application gateways. - Networking (Cisco, Palo Alto, Meraki, etc.) - Active Directory and Entra ID - Microsoft Windows Server 2016 and higher - PowerShell - Experience in a technology support organization Requirements - Additional Microsoft 365 products (Intune, OneDrive for Business, etc.) - VMware - Citrix - Azure Virtual Desktop - Microsoft Certified: Azure Solutions Architect Expert and/or related technical certifications Education and Experience - Bachelor’s degree - 5 plus years of experience in IT - Excellent verbal and written communication skills - Very organized and detail-oriented, with a high degree of accuracy and follow-up - Strong problem-solving and technical troubleshooting skills Compensation The base pay for this position has a salary range of $85,000 to $140,000. The actual salary offer will take into account a wide range of factors including the individual’s qualifications, experience, as well as location. In addition, certain positions are eligible for bonuses or commissions. Physical Requirements - Prolonged periods of sitting at a desk and working on a computer. - Periodic after hours work. Benefits - Medical, dental, life, and disability insurance - 401k with company match - Holidays/vacation/sick days - Cutting edge training on the latest technologies - Employee referral bonus program - Phone reimbursement Kraft Kennedy is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity, sexual orientation, national origin, ethnicity, age, disability, marital status, veteran status, or any other characteristic protected by law.

• Lead projects that improve the maintainability and scalability of our cloud infrastructure • Own day-to-day infrastructure operations, solving problems directly or making sure they are dispatched to the right team • Coach other tech team members on how to best leverage the capabilities of our cloud infrastructure

• Support the application teams: turn around infra requests (permissions, roles, service setup, project peering) so product engineers stay focused on shipping. • Own CI/CD and deployments: maintain and extend our GitHub Actions workflows and help migrate toward a dedicated CD tool with proper permissioning — the goal is fully automated, locked-down deploys via service accounts, no direct engineer access to production. • Build and maintain infrastructure as code: author and update Terraform modules for new and existing services across GCP environments. • Run Kubernetes the right way: manage service deployments via Helm (we're on Helm 4) keep async workloads healthy on Dagster. • Unify observability (likely first project): consolidate today's per-team alerting into a single view — system-to-system dashboards plus incident alerting that routes upstream service/vendor failures to the right impacted teams and on-call rotations. • Advance resilience: help move us toward a fully region- and cloud-agnostic posture so services can pick up and move if something fails. • Strengthen security & access: apply IAM, secrets management, least privilege, and auditability; contribute to SOC 2 readiness. • Automate with AI: build agent skills / agents.md so routine tasks (provisioning access, simple changes) can be handled by an agent instead of human engineering hours, and use AI to reason through bigger problems.