Cloud and Infrastructure Engineer

Position Summary:

At CMIT Solutions of Boise, Cloud and Infrastructure Engineers are responsible for designing, implementing, securing, and supporting cloud and on-premises infrastructure for multiple managed services clients. This role serves as a technical resource responsible for complex projects, infrastructure modernization, security improvements, and automation.

Success in this position requires strong technical expertise, excellent communication skills, sound judgment, and the ability to balance competing priorities across multiple client environments. The engineer is expected to develop long-term technical strategies that improve reliability, security, scalability, and operational efficiency while delivering exceptional client experiences.

As part of a collaborative small-business environment, all technical team members are expected to support the broader service organization as needed. This includes assisting with technical escalations, mentoring other resources, responding to incoming client calls, and providing service desk coverage during periods of high demand.

While not the primary focus of this role, flexibility and a willingness to contribute wherever needed are essential to the team’s success.

Primary Responsibilities

Infrastructure Architecture

• Design, deploy, and maintain secure, scalable, and highly available cloud and on-premises infrastructure for managed services clients.
• Evaluate existing client environments and develop strategic roadmaps for infrastructure improvements, lifecycle management, and cloud transformation.
• Develop technical standards, best practices, and reference architecture across client environments.
• Design, deploy, and administer Microsoft cloud-based solutions that include Microsoft Azure, Microsoft 365, and Microsoft Entra ID resources with a focus on the Well-Architected Framework.
• Implement and support hybrid identity, Microsoft Entra Connect Cloud Sync, Hybrid Azure AD Join, and cloud-native identity solutions.
• Configure and maintain Conditional Access, Multi-Factor Authentication (MFA), Identity Protection, Privileged Identity Management (PIM), Single Sign-On (SSO), and Microsoft Defender security controls.
• Plan and execute tenant migrations, Microsoft 365 migrations, Exchange Online migrations, and Azure workload migrations.

Endpoint Management

• Design and administer Microsoft Intune environments for endpoint management, compliance, application deployment, and endpoint security.
• Implement and maintain Windows Autopilot and Microsoft Entra ID solutions for zero-touch provisioning and hybrid or cloud-native Windows device enrollment.
• Deploy, administer, and maintain Windows Server and hybrid infrastructure including Active Directory, Group Policy, and Virtualization.
• Implement high availability, failover clustering, storage solutions, and disaster recovery architectures.
• Perform server migrations, upgrades, and lifecycle management while minimizing client downtime.

Networking & Security

• Design, configure, and troubleshoot enterprise networking solutions including VLANs, VPNs, routing, switching, wireless infrastructure, SD-WAN, and network segmentation.
• Deploy and maintain enterprise firewall platforms including Fortinet, SonicWall, Meraki, and similar technologies.
• Configure site-to-site VPNs, remote access VPNs, and secure connectivity between cloud and on-premises environments.
• Work with Internet service providers and third-party vendors to resolve connectivity and infrastructure issues.
• Implement security best practices aligned with CIS Controls, Microsoft Secure Score recommendations, and Zero Trust principles.
• Deploy and manage Microsoft Defender for Endpoint, Defender for Office 365, Microsoft Purview, BitLocker, and endpoint security solutions.
• Assist clients in meeting cybersecurity insurance, HIPAA, PCI-DSS, CIS, NIST, CMMC, and other regulatory or compliance requirements.
• Participate in incident response, forensic investigations, and post-incident remediation activities.

Operational Efficiency

• Develop and maintain scripts to automate standard work and repeatable tasks.
• Champion multi-tenant cloud management tools (CIPP, Lighthouse).
• Maintain accurate technical documentation, including network diagrams, infrastructure documentation, standard operating procedures, disaster recovery plans, and configuration standards.
• Continuously evaluate emerging technologies and recommend improvements that enhance security, reliability, scalability, and operational efficiency.
• Share knowledge with other engineers and help establish technical standards and best practices.

Preferred Experience

• 5+ years supporting Windows server infrastructure.
• 3+ years administering Microsoft Azure.
• 5+ years in Microsoft 365 administration.
• Experience in a Managed Services Provider (MSP) environment.
• Experience supporting multiple client environments simultaneously.
• Experience leading technical projects.
• Experience with enterprise networking.
• Experience with virtualization platforms.
• Experience performing cloud migrations.
• Experience implementing cybersecurity best practices.

Preferred Certifications

While not required, candidates who hold one or more of the following certifications will be given strong preference during the hiring process. CMIT Solutions is committed to professional development and will reimburse the cost of approved certifications that align with an employee's role and our business objectives.

· AZ-104 Azure Administrator Associate

· AZ-305 Azure Solutions Architect Expert

· AZ-700 Azure Network Engineer Associate

· AZ-802 Windows Server Administrator Associate

· MD-102 Endpoint Administrator Associate

· SC-100 Cybersecurity Architect Expert

· SC-200 Security Operations Analyst Associate

· SC-300 Identity and Access Administrator Associate

· SC-401 Information Security Administrator Associate

· SC-500 Cloud and AI Security Engineer Associate

Pay: $65,000.00 - $90,000.00 per year

Benefits:

• 401(k)
• Health insurance
• Health savings account
• Paid time off
• Professional development assistance
• Referral program

Experience:

• IT Technician : 5 years (Required)

Shift availability:

• Day Shift (Required)

Ability to Commute:

• Meridian, ID 83642 (Required)

Work Location: In person