5-7 years of experience in cloud systems administration, specifically with Microsoft Azure.
Strong understanding of Microsoft's Cloud Adoption Framework and Well-Architected principles.
Proficiency in managing Azure services such as App Services, Functions, SQL, and Monitor.
Experience with cloud migration strategies including rehost, replatform, and refactor.
Knowledge of Azure networking concepts and secure network configurations.
Ability to implement cloud security best practices and manage identity access controls.
Familiarity with data and analytics services like Azure Data Factory and Azure Databricks.
Responsibilities
Design and enhance Azure cloud infrastructure for corporate and property environments.
Optimize enterprise-level Azure architecture and management practices.
Manage various Azure services and maintain their performance.
Define compute and platform patterns for cloud services and resources.
Configure Azure networking to ensure secure and efficient connectivity.
Assist in migration processes and ensure smooth transitions to the cloud.
Implement security measures while maintaining compliance with policies and best practices.
Benefits
Opportunities for professional development and certifications.
Access to cutting-edge projects and technologies.
Collaborative work environment with a focus on innovation.
Comprehensive healthcare and wellness programs.
Flexible work arrangements to support work-life balance.
Full Job Description
Senior Cloud Systems Administrator New York, NY
ESSENTIAL FUNCTIONS AND DUTIES Cloud Infrastructure, Architecture & Governance
Design, deploy, maintain, and continuously improve Cipriani's Microsoft Azure cloud infrastructure across corporate and property environments.
Support enterprise-scale Azure architecture aligned with Microsoft Cloud Adoption Framework and Well-Architected principles, including Management Groups, subscriptions, Azure Policy, RBAC, naming standards, tagging, resource organization, and platform automation.
Manage and optimize Azure services including Azure App Services, Azure Functions, Azure SQL, Azure Storage, Azure Redis, Azure Service Bus, Azure Key Vault, Azure Monitor, Application Insights, Log Analytics, and related services.
Define and support compute and platform patterns including virtual machines, VM scale sets, App Services, Functions, Azure Container Registry, and AKS/Kubernetes where applicable.
Design, configure, and maintain Azure networking, including Virtual Networks, Private Endpoints, Network Security Groups, DNS, peering, routing, gateways, firewalls, VPNs, and hybrid connectivity.
Support secure network topologies such as hub-and-spoke or Virtual WAN, including Azure Firewall, Application Gateway/WAF, Private Link, ExpressRoute/VPN, and DDoS Protection where needed.
Implement scalable, resilient, secure, and cost-effective cloud architectures aligned with business, security, and operational requirements.
Maintain clear architecture documentation, cloud diagrams, technical standards, support runbooks, and knowledge base materials.
Support cloud migration and modernization efforts across on-premises-to-Azure, cloud-to-cloud, hybrid, and legacy application environments.
Participate in discovery and assessment activities including workload inventory, dependency mapping, application readiness, rehost/replatform/refactor recommendations, and migration wave planning.
Support cutover execution and post-migration hypercare, including replication monitoring, test migrations, rollback planning, stakeholder communication, and stabilization.
Support Azure data and analytics workloads, including Azure Data Factory, Azure Databricks, Azure SQL, and related data movement or processing platforms.
Support emerging Microsoft cloud initiatives, including Azure OpenAI, Copilot readiness/governance, automation, analytics, and business intelligence workloads where applicable.
Identity, Security & Compliance
Implement and maintain cloud security best practices, least-privilege access, secure infrastructure patterns, and identity-based access models.
Administer Microsoft Entra ID/Azure AD, including Conditional Access, Privileged Identity Management, RBAC, app registrations, enterprise applications, hybrid identity, Entra Connect/Clou
