Want to know if this job is worth applying to?
New York, New York, United States
Hybrid
At Armanino, you determine your career path. This means it's possible to pursue challenges you are passionate about, in industries you care about.
Armanino is proud to be Among the top 20 Largest Firms in the Nation and one of the Best Places to Work. We have a community of resources that are ready and willing to support your ideas, build your skills and expand your professional network. We want you to integrate all aspects of your life with your career. At Armanino, we know you don’t check-out of life when you check-in at work. That’s why we’ve created a unique work environment where your passions, work, and family & friends can overlap. We want to help you achieve growth by giving you access to a network of smart and supportive people, willing to listen to your ideas.
Job Responsibilities
Design and maintain cloud architecture, standards, and reference patterns across Azure, Microsoft 365, and hybrid environments
Develop and mature Azure landing zones, governance controls, workload onboarding standards, and tenant configurations
Establish reusable patterns for monitoring, identity, backup, networking, resiliency, endpoint management, and support operations
Support and optimize Microsoft 365 services, including Exchange Online, SharePoint Online, Teams, OneDrive, Entra ID, Intune, Defender, and Purview
Improve cloud and Microsoft 365 operational readiness through monitoring, alerting, dashboards, and service management practices
Define and maintain production readiness standards, including backup, recovery, telemetry, runbooks, and escalation procedures
Develop and maintain cloud engineering standards, governance processes, and onboarding frameworks
Reduce configuration drift and improve consistency through automation, policy enforcement, and standardization
Partner with cybersecurity teams to implement secure configurations, identity protection, endpoint security, and data protection controls
Build resilient cloud and Microsoft 365 solutions that support security, compliance, and business continuity objectives
Strengthen cloud cost governance through tagging standards, budget monitoring, reporting, and optimization efforts
Identify and remediate inefficiencies, unsupported patterns, and opportunities for platform improvement
Collaborate with infrastructure, networking, endpoint, DevOps, security, and operations teams to deliver cloud initiatives
Create and maintain technical documentation, standards, onboarding guides, and operational procedures
Mentor engineers and provide technical guidance, troubleshooting support, and knowledge transfer
Requirements
Bachelor’s degree in Information Technology, Computer Science, Information Systems, or a related field, or equivalent practical experience
Minimum of 7 years of experience in cloud engineering, platform engineering, Microsoft 365 administration, systems engineering, or infrastructure engineering
Hands-on experience with Azure, Microsoft 365, and hybrid infrastructure environments
Experience implementing cloud governance, landing zones, monitoring, automation, and operational support frameworks
Experience with scripting and automation using PowerShell, Python, Bash, or similar technologies
Expertise administering Microsoft 365 technologies including Exchange Online, SharePoint Online, Teams, OneDrive, Entra ID, Intune, Defender, and Purview
Experience designing Azure landing zones, cloud governance frameworks, and enterprise platform standards
Preferred Qualifications
Knowledge of identity and access management, conditional access, role-based access controls, and endpoint management
Experience with cloud networking, hybrid connectivity, DNS, and segmentation
Experience implementing observability, monitoring, alerting, backup, resiliency, and disaster recovery solutions
FinOps experience, including cloud cost optimization, reporting, and budget governance
Industry certifications such as Azure Administrator Associate, Azure Solutions Architect Expert, Microsoft 365 Administrator Expert, Azure Security Engineer Associate, or equivalent
Experience mentoring engineers and driving cloud platform standardization across large enterprise environments
"Armanino" is the brand name under which Armanino LLP and Armanino Advisory LLC, independently owned entities, provide professional services in an alternative practice structure in accordance with law, regulations, and professional standards. Armanino LLP is a licensed independent CPA firm that provides attest services, and Armanino Advisory LLC and its subsidiary entities provide tax, advisory, and business consulting services. Armanino Advisory LLC and its subsidiary entities are not licensed CPA firms.
Armanino provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Armanino complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Armanino expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of Armanino employees to perform their job duties may result in discipline up to and including discharge.
Armanino does not accept unsolicited candidates, referrals, or resumes from any staffing agency, recruiting service, sourcing entity, or third-party paid service at any time. Any referrals, resumes, or candidates submitted to Armanino or any employee or owner of Armanino without a pre-existing agreement signed by both parties covering the submission will be considered the property of Armanino and not subject to any fees or charges. For existing agreements, a role must be approved and open to external search; otherwise, unsolicited and unapproved submittals and referrals will be considered Armanino property and free of fees. In addition, Talent Acquisition is the sole point of contact, and contacting others in our organization without Talent Acquisition’s knowledge will result in termination of contract.
Certain states require us to disclose the pay range and benefits summary for job openings. For Colorado residents, the compensation range for this position: $113,100 - $154,100. For Washington residents, Illinois residents, New York residents, and Southern California residents, the compensation range for this position: $124,500 - $169,500. For Northern California residents, the compensation range for this position: $130,100 - $177,200. Compensation may vary based on skills, role, and location. Eligible employees at certain levels can participate in a discretionary long-term financial incentive plan, subject to plan participation rules.
Armanino has a robust offering of benefits, including:
Medical, dental, vision
Generous PTO plan and paid sick time
Flexible work arrangements
401K with Profit Sharing
Wellness program
Generous parental leave
11 paid holidays
For positions based in San Francisco, consistent with the SF Fair Chance Ordinance, an arrest and conviction record will not automatically disqualify a qualified applicant from consideration.
For Individuals who would be working within the City of Los Angeles, Armanino will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance
To view our Consumer Notice at Collection for job applicants, please visit: https://www.armanino.com/terms/ccpa-employee-notice/
We have a community of resources that are ready and willing to support your ideas, build your skills and expand your professional network.
