Cloud Systems Engineer

Objectives of the Role

Responsibilities

• Configure and maintain Microsoft Entra ID, including users, groups, roles, Conditional Access policies, MFA, and identity lifecycle processes.
• Administer and support Azure infrastructure including virtual machines, storage accounts, networking, and platform services.
• Manage Windows Server environments hosted in Azure virtual machines, including Active Directory domain controllers, DNS, DHCP, and file servers.
• Implement and support identity integrations for enterprise and SaaS applications using SAML, OAuth, and OpenID Connect.
• Support file storage solutions including Azure Files, SharePoint Online, and VM-based file services, ensuring appropriate access controls and data protection.
• Monitor system performance and availability using Azure Monitor, Log Analytics, and related tools; respond to and resolve incidents within defined service levels.
• Execute system updates, patching, vulnerability remediation, and configuration changes across cloud and identity platforms.
• Support engineering and development teams by provisioning resources, managing access, and troubleshooting infrastructure and identity issues.
• Manage and resolve infrastructure and identity-related tickets through the service management system, ensuring accurate documentation and timely resolution.
• Track and contribute to project work, including executing assigned tasks, updating progress, and identifying risks or blockers.
• Collaborate with security teams on compliance, risk management, and implementation of security best practices aligned with Zero Trust principles.
• Maintain operational documentation, runbooks, and procedures to ensure consistency and knowledge sharing.
• Participate in change management processes including planning, testing, and documenting changes in alignment with ITIL practices.
• Provide escalation support for complex technical issues and participate in on-call support as needed.

Qualifications and Experience

• Bachelor’s degree in Computer Science, Information Technology, or a related field; equivalent experience considered.
• 5–8+ years of experience in systems administration, with strong experience in Microsoft Azure cloud environments.
• Azure certifications: AZ-104 (required), AZ-305 (preferred) and/or identity certifications SC-300 (preferred).
• Hands-on experience managing Windows Server workloads including Entra ID, DNS, DHCP, and file services in cloud-hosted environments.
• Strong experience administering Microsoft Entra ID, including Conditional Access, MFA, and identity governance concepts.
• Experience supporting Microsoft 365 services including Exchange Online, SharePoint Online, and Teams.
• Proficiency with PowerShell and/or Azure CLI for automation and administration.
• Strong troubleshooting skills across cloud infrastructure, Windows systems, and identity platforms.
• Understanding of authentication and identity protocols including SAML, OAuth, and OpenID Connect.
• Experience working within ticketing systems and tracking operational and project-based work.
• Ability to work effectively in cross-functional teams and support both operational and project-based initiatives.
• Ability to work independently and remain flexible in a changing environment.
• Ability to prioritize and manage multiple projects with strong attention to detail.
• At Bridgespan, we are committed to diversity, equity, and inclusion because we are passionate about helping our clients achieve breakthrough results. An organization that reflects the diversity of our clients and their beneficiaries will produce deeper relationships, engagement, and insights. Bridgespan is committed to providing equal opportunities. We serve diverse organizations and are committed to non-discrimination. Bridgespan will not discriminate against any employee with respect to any term or condition of employment, including but not limited to less favorable treatment, exclusion from employment or employment opportunities (including hiring, assignment, performance assessment and promotion) on the basis of race, color, religion, national origin, citizenship, ancestry, gender (including pregnancy), gender identity, age, disability, marital status, sexual orientation, expression, veteran’s status or other protected characteristics or status. We actively partner with organizations representing minority concerns and interests to build high-performing teams that mirror the communities we serve.
• All company sponsored programs including training, job, social and recreational activities are required to be nondiscriminatory and all human resource practices are monitored to ensure equal opportunity.