IT Cloud Engineer (6 Month Contract)

• People Inc. seeks an experienced IT Cloud Engineer to support, maintain, and modernize enterprise infrastructure during data‑center decommissioning and cloud migrations. You will own Windows Server operations, identity integrations (Okta–AD/Azure-AD), automation, and hybrid cloud services across on‑prem and AWS/Azure/GCP
• 40 hours a week
• Start date: ASAP
• End date: 6 months with potential to extend
• Windows Servers: Administer 200+ servers; own patching SLAs, monitoring (Prometheus/Grafana), capacity/lifecycle plans, and vulnerability remediations
• Directory & Identity: Operate AD/Azure AD; serve as Okta–AD SSO/MFA integration owner (health, upgrades, certificates, lifecycle)
• Infrastructure & Migrations: Execute NYC data‑center app migrations; assist Nutanix decommission; administer Rubrik backups and Sectigo certificates
• Monitoring & Reporting: Build dashboards and alerts; define SLOs with app owners; deliver monthly system inventory, ownership, and compliance reports
• Networking & Peripheral Support: Manage enterprise DNS (non‑Route 53); support ClearPass and printer authentication integrations
• Cloud Operations: Manage AWS/Azure/GCP workloads (VMs, IAM, storage/compute, networking, connectivity); optimize cost, reliability, and security
• Automation: Deliver PowerShell/Python/Bash tooling for patching, configuration, and repetitive operations; champion IaC/Config‑as‑Code where feasible
• Active Directory Migration:
• Plan & governance: define scope/success/rollback, RFC/CAB approvals, stakeholder comms, risk register, clear ownership and SLAs
• Baseline & readiness: full AD/GPO/OUs/trusts/DC health (dcdiag/repadmin), security posture (tiering/LAPS/NTLM), backups/DR tested
• Identity & SSO design: source of truth + JML, AAD Connect (PHS/PTA, sourceAnchor, staging/writeback), Okta agents/MFA/policies, UPN/sAMAccountName strategy
• App/data/network prep + pilot: catalog LDAP/Kerberos apps/SPNs, file/print ACLs, DNS/DHCP validation; run a scoped pilot with helpdesk scripts and rollback
• Execute, monitor, cutover, close: wave-based moves with replication checks, live auth monitoring, cutover steps, post‑validation, cleanup/decommission, docs/CMDB updates, PIRs and metrics
• Change Management & Governance:
• Follow ITIL‑aligned change process: RFC tickets with peer review, test evidence, implementation/backout plans, and maintenance windows; attend CAB as required
• Track changes in Jira; update CMDB/asset records within 7 days of change; complete PIRs within 5 business days for failed/high‑risk changes
• Enforce progressive delivery: phased rollouts, canaries, and checkpoint validation; document rollback criteria and success gates upfront
• Documentation & Knowledge Management:
• Maintain current runbooks, architecture/network diagrams, standard operating procedures, DR playbooks, and “How We Operate” docs in a versioned repository
• Treat documentation as acceptance criteria: every change/migration updates docs before closure; keep system ownership and escalation paths explicit
• Publish weekly change summaries and quarterly service health reviews to stakeholders
• Accountability & Metrics:
• Change quality: change failure rate ≤5%; PIR completion SLA met.
• CMDB accuracy: ≥98% CI correctness; ownership fields populated for 100% tier‑1 services
• Observability coverage: dashboards/alerts for 100% tier‑1 apps with on‑call playbooks
• Patch compliance: ≥95% critical within 14 days; ≥95% standard within 30 days
• Backup posture: ≥99% successful jobs; quarterly restore tests with evidence
• Incremental Delivery:
• Plan migrations and decommissioning as small, testable increments with clear exit/rollback; demonstrate progress via bi‑weekly demos and burn‑up charts
• Use feature flags/guardrails where applicable; prefer automate‑then‑standardize over one‑off fixes
• Maintain a visible improvement backlog (automation debt, toil reduction, cost optimizations) with quarterly goals

Benefits

• Complete medical/dental benefits
• Generous vacation and sick time
• Commuter program
• Discounted gym memberships
• Pet insurance
• 401(K) retirement plan

• Monitoring/logging with Prometheus/Grafana, Loki, Splunk, or ELK
• Familiarity with Docker/containers
• Excellent troubleshooting and stakeholder communication
• 5+ years in systems administration or infrastructure engineering
• Hands‑on with AWS, Azure, or GCP (IAM, compute/storage, networking)
• Preferred: Cloud‑migration background, ITIL knowledge, Microsoft Administrator or cloud certifications
• Strong Windows Server and patch automation experience
• Experience with Linux, Nutanix, Rubrik
• Deep knowledge of Okta, Active Directory, Azure AD integrations
• Scripting with PowerShell (preferred), plus Python or Bash