Cloud Systems Engineer
The Bridgespan Group
Skill Required
Key highlights
- Azure certifications: AZ-104 (required), AZ-305 (preferred) and/or identity certifications SC-300 (preferred)
- 5–8+ years of experience in systems administration, with strong experience in Microsoft Azure cloud environments
- ITIL practices alignment
- Zero Trust principles alignment
- Support for containerized workloads and cloud-native platforms including Azure Kubernetes Service (AKS) and Docker-based deployments
- Mentoring of junior team members
Role overview
The Cloud Systems Engineer role is a cloud-first, execution-focused position within The Bridgespan Group's IT Infrastructure team. Responsible for administering, configuring, and operating modern IT infrastructure with a primary emphasis on Microsoft Azure and identity services within Microsoft Entra ID, the position also contributes to cloud engineering and architecture initiatives, infrastructure automation, cloud governance, scalability planning, and modernization. The ideal candidate combines strong operational expertise with hands-on cloud engineering and automation experience. Part of the IT Infrastructure team, this position ensures cloud and identity platforms are reliable, secure, and aligned with established architectural direction.
Responsibilities
- Configure and maintain Microsoft Entra ID, including users, groups, roles, Conditional Access policies, MFA, and identity lifecycle processes.
- Administer and support Azure infrastructure including virtual machines, storage accounts, networking, and platform services.
- Manage Windows Server environments hosted in Azure virtual machines, including Active Directory domain controllers, DNS, DHCP, and file servers.
- Implement and support identity integrations for enterprise and SaaS applications using SAML, OAuth, and OpenID Connect.
- Support file storage solutions including Azure Files, SharePoint Online, and VM-based file services, ensuring appropriate access controls and data protection.
- Monitor system performance and availability using Azure Monitor, Log Analytics, and related tools; respond to and resolve incidents within defined service levels.
- Execute system updates, patching, vulnerability remediation, and configuration changes across cloud and identity platforms.
- Support engineering and development teams by provisioning resources, managing access, and troubleshooting infrastructure and identity issues.
- Manage and resolve infrastructure and identity-related tickets through the service management system, ensuring accurate documentation and timely resolution.
- Track and contribute to project work, including executing assigned tasks, updating progress, and identifying risks or blockers.
- Collaborate with security teams on compliance, risk management, and implementation of security best practices aligned with Zero Trust principles.
- Maintain operational documentation, runbooks, and procedures to ensure consistency and knowledge sharing.
- Participate in change management processes including planning, testing, and documenting changes in alignment with ITIL practices.
- Provide escalation support for complex technical issues and participate in on-call support as needed.
Requirements
- Bachelor's degree in Computer Science, Information Technology, or a related field; equivalent experience considered.
- 5–8+ years of experience in systems administration, with strong experience in Microsoft Azure cloud environments.
- Azure certifications: AZ-104 (required), AZ-305 (preferred) and/or identity certifications SC-300 (preferred).
- Hands-on experience managing Windows Server workloads including Entra ID, DNS, DHCP, and file services in cloud-hosted environments.
- Strong experience administering Microsoft Entra ID, including Conditional Access, MFA, and identity governance concepts.
- Experience supporting Microsoft 365 services including Exchange Online, SharePoint Online, and Teams.
- Proficiency with PowerShell and/or Azure CLI for automation and administration.
- Strong troubleshooting skills across cloud infrastructure, Windows systems, and identity platforms.
- Understanding of authentication and identity protocols including SAML, OAuth, and OpenID Connect.
- Experience working within ticketing systems and tracking operational and project-based work.
- Ability to work effectively in cross-functional teams and support both operational and project-based initiatives.
- Ability to work independently and remain flexible in a changing environment.
- Ability to prioritize and manage multiple projects with strong attention to detail.
Benefits
- All company sponsored programs including training, job, social and recreational activities are required to be nondiscriminatory
Additional details
- The Bridgespan Group ('Bridgespan') is a global nonprofit that aims to build a better world by strengthening the ability of mission-driven organizations, philanthropists, impact investors, and corporations to achieve breakthrough results in addressing society's most important challenges and opportunities.
- Founded in 2000, Bridgespan has offices in Boston, Johannesburg, Mumbai, New York, San Francisco, and Singapore.
- The Cloud Systems Engineer role is part of the IT Infrastructure team.
- The role contributes to cloud engineering and architecture initiatives, infrastructure automation, cloud governance, scalability planning, and modernization.
- Develop and maintain Infrastructure as Code (IaC) solutions using Terraform, Bicep, or ARM templates to standardize and automate repeatable, scalable cloud infrastructure deployments.
- Implements and maintains Azure governance including Azure Policy, RBAC standards, tagging, resource organization, and cost optimization.
- Contribute significantly to cloud modernization and automation initiatives that improve scalability, resiliency, and operational efficiency.
- Enhance monitoring, alerting, and observability to proactively identify and resolve infrastructure issues, minimizing downtime and user impact.
- Collaborate with engineering and DevOps teams to support CI/CD pipelines and automated deployment workflows using Azure DevOps and/or GitHub Action.
- Support containerized workloads and cloud-native platforms including Azure Kubernetes Service (AKS) and Docker-based deployments.
- Support and mentor junior team members while contributing to a culture of continuous improvement.
- Bridgespan aims for a world where all people have the opportunity to flourish.
- Bridgespan is committed to equity, specifically to doing work to help ensure that race, gender, and other dimensions of identity are not determinants of life outcomes.
- Bridgespan is committed to providing equal opportunities and will not discriminate against any employee with respect to any term or condition of employment on the basis of race, color, religion, national origin, citizenship, ancestry, gender (including pregnancy), gender identity, age, disability, marital status, sexual orientation, expression, veteran's status or other protected characteristics or status.
- All human resource practices are monitored to ensure equal opportunity.