Cloud Support Engineer

ing.

• Administer Entra ID and Active Directory: Conditional Access, user lifecycle, domain controller decommissioning, M365 group management, and Azure RBAC across subscriptions.
• Manage resources across multiple Azure subscriptions (governance, networking, security, capacity). Administer Azure Files with a view toward eventual SharePoint migration.

Automation & workflows

• Build and maintain PowerShell and Python automation via Microsoft Graph API to reduce manual toil across M365, Entra ID, and Azure.
• Own the reliability and evolution of Power Automate flows supporting business operations, including the employee onboarding workflow.

Operations

• Execute production Salesforce deployments as the IT Operations rep. Per separation of duties, IT ops runs the deployment; engineering handles the code.
• Administer Mac endpoints via JAMF and Windows devices via Intune. Maintain policy compliance, software deployment, and consistent end-user experience.
• Own Azure cost management, M365 license rightsizing, and the ongoing reduction of Google Workspace licensing as users migrate to free-tier accounts.
• Support GWS administration during wind-down, including Chrome Browser Cloud Management for the organization's Chrome fleet.
• Rotating on-call (~1 week per 5-6 weeks). Escalation point for complex issues spanning identity, infrastructure, networking, and endpoints.

Team & operations

• Maintain runbooks and technical documentation that enable team scalability and preserve institutional knowledge.
• Guide IT team members on cloud platforms, automation, and operational practices. Not a people-management role.
• Own IT vendor and SaaS provider relationships, including contract oversight, renewals, and escalations.

What you'll need:

• Minimum of 5-7+ years in IT or infrastructure with a strong focus on Microsoft cloud (Azure, M365, and related services)
• Deep hands-on M365 administration experience: Exchange Online, Teams, SharePoint, Intune, and Entra ID
• Solid understanding of on-premises Active Directory, including domain controller management and decommissioning
• PowerShell and/or Python scripting for automation, with comfort using the Microsoft Graph API
• Power Automate experience - building, maintaining, and extending automated workflows
• Familiarity with dynamic and static M365 group management and Azure RBAC role assignments
• Azure infrastructure experience: cost management, resource governance, networking fundamentals, and security posture
• Experience with structured release management or Salesforce deployment processes
• Strong troubleshooting skills across identity, infrastructure, endpoints, and networking layers
• Comfortable working independently on complex, ambiguous problems with minimal day-to-day direction
• Clear communicator who can translate technical context for non-technical stakeholders at any level
• Bachelor's degree in computer science, Information Systems, or a related field - or equivalent practical experience

Compensation, Benefits, & Additional Details:

Health-E Commerce's compensation philosophy is grounded in market data and internal equity to ensure fairness and consistency across the team. Individuals new to the company should generally expect offers to fall between the entry point and midpoint of the salary range. Our goal is to provide an offer that supports growth potential within the role and allows for future salary progression.

• Compensation: $120,000 - $150,000
• Discretionary Annual Bonus Eligibility: Up to 10%
• Medical, Dental, Vision, and 401K with a company match
• Dependent Care, FSA & HSA accounts
• Paid Parental & Bonding Leave
• Flexible PTO & office closure on all major holidays
• Monthly wellness & internet reimbursements
• Professional development including certification support & leadership coaching
• Mental Health resources
• 100% remote within the United States
• Must be able to work EST hours

Candidate Privacy Notice