L3 Cloud Services Engineer

Position Overview  

Align is seeking a skilled and motivated L3 Cloud Services Engineer to join our expanding Managed Services team. The ideal candidate will bring 5 to 8+ years of relevant experience, particularly in managing and supporting Microsoft Entra ID (Azure AD) and distributed systems. This role is instrumental in the administration, implementation, and ongoing support of Microsoft-based infrastructures, with a primary focus on Office 365, Microsoft 365, and Azure.  

As a L3 Cloud Services Engineer, you’ll collaborate with our IT Service Desk to resolve complex technical issues, contribute to client onboarding processes, and deliver white-glove VIP support. You'll also play a key role in training new clients and maintaining a stable, secure IT environment.  

• This is a remote position with hybrid work as needed. We are currently hiring candidates who reside in the following states: Utah and Arizona 
• You will be required to participate in a rotational on-call schedule that includes overnights and weekends 
• This is a full-time position offering a competitive salary, full benefits, paid training, and performance-based bonuses. 

Key Responsibilities

• Provide advanced administration and support for Office 365, Microsoft 365, and Entra ID (Azure AD) 
• Act as a Level 3 escalation for the IT Service Desk, resolving complex technical issues 
• Collaborate with Cloud Engineers and Architects to support and improve cloud infrastructure 
• Administer Windows Server environments (2019/2022/2025) 
• Deploy and manage Azure Virtual Desktop environments 
• Troubleshoot and manage Azure MFA, Conditional Access policies, and Exchange Online configurations 
• Assist with onboarding activities including technical assessments and new client training 
• Ensure accurate and thorough documentation of systems, procedures, and policies 
• Address post-project support tickets escalated by Level 2 and Level 3 operations teams 
• Maintain infrastructure integrity through proactive maintenance and compliance efforts 
• Lead or assist with client disaster recovery tests and associated documentation 

Required Qualifications

• 5–8+ years of experience in Microsoft Windows-based systems administration and support 
• Strong knowledge of Windows Server, Active Directory, Group Policies, DNS, DHCP, and IIS 
• Hands-on experience managing and troubleshooting Office 365 and Azure AD 
• Experience with Azure AD Connect, hybrid environments, and access management 
• Proficiency with Exchange Online, including mail flow rules and retention policies 
• Working knowledge of Microsoft Cloud App Security, including alert response and configuration 
• Familiarity with the configuration and management of endpoints via Microsoft Intune and JAMF 
• Experience with multi-site Active Directory environments 
• Exposure to diverse hardware platforms (e.g., Cisco, Dell, IBM, HP, blade servers) 
• Solid understanding of core networking concepts and services (TCP/IP, DHCP/DNS, IIS) 
• Experience with file sharing technologies such as Azure Storage Accounts, Azure File shares, and DFS 
• Experience with the deployment and configuration of Azure Virtual Desktop 
• Excellent communication skills, with the ability to translate complex technical concepts to various business units  
• Self-motivated, with the willingness to go the extra mile  

Preferred Qualifications

• Knowledge of security policies, compliance standards, and server hardening best practices 
• Background in documenting builds, configurations, and support processes 
• Microsoft certifications (e.g., Azure Administrative Associate, AZ-104, Azure Solutions Architect, AZ-305) are a plus  

To support a fair, consistent, and high-quality hiring experience, some interviews may be recorded. These recordings help our team focus fully on the conversation at hand, rather than note-taking, and allow us to better evaluate and improve our recruitment process. Recordings are used solely for internal purposes such as training, quality assurance, and process improvement. Candidates will be informed in advance and asked to provide consent before any recording takes place. 

Tier 3