Description

SUMMARY OF POSITION:

The Cloud Engineer is responsible for designing, implementing, and maintaining the company's enterprise cloud infrastructure and services. This role involves working closely with various teams to ensure that the cloud environment is robust, scalable, and aligned with the company’s business objectives.

In addition to cloud-specific responsibilities, the Cloud Engineer is also expected to have a strong background in systems engineering. The incumbent will design, implement, and maintain the company’s broader enterprise infrastructure, which includes both cloud and on-premises systems. This includes participating in the planning, administration, and maintenance of programs that support disaster recovery, security, and networking.

The Cloud Engineer will play a key role in ensuring that the company's infrastructure is secure and resilient, capable of supporting critical business operations. They will also be responsible for providing high-level support for escalated help desk requests, ensuring that complex technical issues are resolved in a timely and effective manner.

PRINCIPAL FUNCTIONS and ACCOUNTABLILITIES:

• Design, implement, and maintain the company’s enterprise cloud infrastructure.

• Collaborate with various teams to ensure cloud solutions are scalable, secure, and aligned with business goals.

• Performs periodic performance reporting to support short-term and long-term capacity planning

• Provides technical support to helpdesk requests and prioritize support requirements in an appropriate manner based on level and severity of impact.

• Acts as a project team member and/or provide technical support for projects in support of TFCU requirements, including developing specifications, evaluating options and developing project plans to ensure appropriate coordination and sequencing of tasks.

• Contributes to developing and maintaining system standards.

• Establishes and manages reliable backup procedures for the systems in the environment. Ensure that complete system documentation is maintained and updated regularly. Plans and executes disaster recovery testing within the parameters established by Tower's DR/BCP Plan and in the event of a disaster, implements disaster recovery procedures to restore computer systems and networks.

• Keeps current on new technology methods and systems by attending training classes, professional meetings and reading professional periodicals available in the department. May be required to complete various additional coursework or certifications outlined in the Competencies Summary as determined by the AVP, BackOffice Technology.

• Administers and manages security of TFCU infrastructure. Directs or performs specific duties that are required to maintain security including analyzing the network for potential risks, ensuring regulatory compliance and implementing corrective actions as needed across the infrastructure by using repeatable industry best practices and standards.

• Performs related duties when assigned.

REQUIRED QUALIFICATIONS:

• Bachelors or Master’s degree in Information Systems or related field with 5 years relevant work experience. Without a degree, at least 10 years directly applicable relevant leadership and work experience plus relevant technical certifications

• Hold or ability to obtain Azure Administrator Associate within first six months of employment

• Hold or ability to obtain Azure Solutions Architect Expert within 18 months of employment

COMPETENCIES:

• Strong understanding of cloud computing principles, with a focus on designing scalable, resilient, and secure architectures on Microsoft Azure.

• Ability to design and implement solutions that leverage Azure services such as Virtual Machines, Azure Storage, Azure Networking, Azure Active Directory, and Azure DevOps.

• Experience in designing and managing hybrid cloud environments and integrating on-premises systems with Azure.

• Proficiency in using Infrastructure as Code (IaC) tools such as Azure Resource Manager (ARM) templates, Terraform, or Bicep to automate the deployment and management of Azure resources.

• Competence in scripting languages like PowerShell or Python for automation and orchestration tasks.

• Strong in managing and optimizing the performance of Windows and Linux servers within the Azure environment.

• Advanced knowledge of Azure networking components, including Virtual Networks (VNets), Azure Load Balancers, Application Gateways, Network Security Groups (NSGs), and ExpressRoute.

• Ability to design and implement secure and efficient network architectures within Azure.

• In-depth knowledge of Azure security best practices, including identity and access management (IAM), encryption, and network security.

• Experience in implementing and managing Azure Security Center, Azure Key Vault, and Azure Policy to ensure compliance with organizational and regulatory standards.

• Proficiency in using Azure Monitor, Log Analytics, and Application Insights to monitor, analyze, and optimize the performance and health of Azure resources.

• Demonstrated ability to diagnose and resolve complex technical issues within the Azure environment.

• Strong analytical skills with the ability to evaluate and implement new technologies to enhance system performance and reliability.

• Has knowledge of and adheres to credit union policies and procedures and all regulations related to the Bank Secrecy Act, the USA PATRIOT Act and OFAC.

WORKING CONDITIONS:

• Ability to sit, stand and walk for extended periods and demonstrate sufficient dexterity and vision to operate a variety of office equipment.

• Ability to lift up to 15 lbs. with or without assistance.

• Ability to work the hours needed which may extend beyond the defined work schedule when operating conditions dictate

• Ability to work extended hours, including evenings and weekends as needed

• Ability to arrive at work routinely and promptly

• Must be willing to travel to remote worksites including DR/BCP centers, branches and vendor sites

• Responsible for being available 24x7 to support Tower’s operations

• Must be able to visually and physically check/inspect cabling beneath and/or behind objects such as desks, personal computers, printers, etc. This may include moving or lifting computer equipment from or to a desk, floor, or table.

• Must be able to pass and maintain RCA Clearance