Cloud Engineer

Office of Information Technology

Annual Salary Range for IT Analyst II: $91,169 - $121,559

Annual Salary Range for Senior IT Analyst: $95,737 - $127,644

FLSA Exempt / Union Represented

About the Office:

Information Technology (IT) is responsible for applications development and support, infrastructure support, telecommunications, and video conferencing resources that support the work of the State Bar. This is accomplished via Applications, Operations and related project and web management.

The Ideal Candidate:

The State Bar of California is looking for an experienced Cloud Engineer who is a creative thinker, thrives on innovation and thinking outside the box. We are looking for a candidate with strong hands-on technical background and excellent communication skills such as Azure with multi-regions. This position is a new role created for the migration of VMware On-Premises datacenters to Azure AVS. Once the migration is complete, the role will be responsible for maintaining, optimizing and hardening of the Azure Cloud environment. This hybrid role allows for up to three days of remote work per week.

Responsibilities:

• Develop solutions integrating Microsoft Azure clouds with services hosted on-premises and in other clouds
• Learn and apply new Microsoft Azure cloud technologies
• Identify and define system security requirements
• Working alongside key vendors (Microsoft, VMware, Etc.) to drive the development and deployment of their technologies within the environment
• Build migration solution from on-prem to Microsoft Azure cloud
• Extensive operational experience implementing and supporting Microsoft cloud security technologies and services such as Defender for Endpoints, Microsoft Cloud App Security, Azure Sentinel, Azure Defender, Microsoft Defender for Office 365
• Contribute to architecture and infrastructure designs
• Write automation code (IaC) and developing CI/CD pipelines
• Engineer, implement and monitor security measures for the protection of computer systems, networks and information
• Establish and implement monitoring and management infrastructure for both availability and performance management
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks
• Design and implement data protection options, including HA and BCP protection in Azure

Preferred Qualifications:

• 5+ Years in Enterprise Windows Datacenter Background supporting .Net,.Net Core,ASP.Net, MVC, IIS, SQL infrastructure
• 5+ years of experience with CI/CD tools and concepts (e.g. Azure Pipelines, GitHub Action, etc.)
• 3+ Experience working with Virtualization including VMWare, ESXi, HyperV, Docker Infrastructure
• 3+ Experience in infrastructure as a code: Logic Apps, Azure Resource Manager, Terraform, Ansible development engineering optimization and testing
• 2+ Vulnerability Management, System Hardening, L3-L7 Firewalls, EDR, Micro Segmentation
• 2+ Years of Performance Analytics Experience with Azure Cloud Platform working with Azure Log Analytics, Azure Security Center, Azure Sentinel
• 2+ years’ Experience in Security debugging, optimizing automated Virtualization Infrastructure / container native cloud deployments issues
• Experience with networking and security concepts, methods and technologies in large scale, production Azure and hybrid environments
• Azure Associate Level Certificate or higher is prefer

Your skills and experience:

• Strong understanding of cloud computing and hands-on experience of migrating workloads to Azure (Azure Migrate or other tools)
• Thorough understanding of the latest security principles, techniques, and protocols
• Infrastructure as Code (IaC) experience - scripting and automation via AZ CLI/PowerShell, Bash, Bicep, JSON templates, …
• Understand VMWare technologies such as NSX-T, HCX, VMware motion, Distributed Switches, Load Balancer
• Knowledge or experience with CI/CD tools, preferably Azure DevOps
• Ensure solution architecture meets present and future performance, security, reliability, resiliency, and extensibility needs.
• Logical thinking, troubleshooting, presentation, and communication skills with strong drive for results
• Hands-on experience with Azure Security stack
• Understanding of MITRE ATT&CK Framework and well known APT's
• Interest for Microsoft technologies, Azure cloud and will to constantly grow, learn and enhancing the skills in this area
• Networking principles and protocols such as IP subnetting, Network Security Groups, routing, Azure Firewall, ExpressRoute, load balancer, DNS, etc.
• Logical thinking, troubleshooting, presentation, and communication skills with strong drive for results
• Interest for Microsoft technologies, Azure cloud and will to constantly grow, learn and enhancing the skills in this area
• Outstanding understanding of application, server, and network security and compliance requirements
• Experience with setup of Disaster Recovery and High Availability
• Build automated processes using well-known languages and frameworks such as PowerShell, CLI, python, YML, JSON, Terraform, Azure Templates
• Demonstrate experience leading or developing high quality, enterprise scale IT system or Software projects.
• Hardworking, result oriented with outstanding problem-solving skills