Azure Network/Systems Engineer

• Serves as lead engineer and architect for EDUCAUSE cloud infrastructure.  
• Leads the configuration and management of EDUCAUSE Azure Active Directory and its integration with legacy Active Directory services and processes. 
• Leads the maintenance and further development of EDUCAUSE cloud infrastructure in collaboration with colleagues across the association. 
• Secures network traffic by owning the configuration and monitoring of virtual Palo Alto firewall infrastructure.  
• Leads the design and maintenance of traffic routing, tunneling, and network segmentation. 
• Leads infrastructure-as-code efforts to build a disaster-tolerant infrastructure using Ansible, Terraform, and related tools. 
• Serves as subject matter expert for DNS across the association. 
• Leads system administration efforts for Windows and Linux servers.  
• Serves as subject matter expert for Linux OS, mentoring other staff as needed.
• Manages secure and responsible use of certificates for traffic security, both within Azure and with authorized SaaS tenancies. 
• Owns configuration of Azure AD-based Single Sign-On, including engineering support to integrate new SaaS offerings into the system. 
• Owns configuration of multiple email transport systems, championing the use of modern email transport standards like DMARC. 
• Owns data backup processes and procedures for servers and endpoints. Operates backups, restores data upon request, recommends and implements enhancements to backup processes, schedules, and technologies, from snapshotting to Azure Availability Sets and Availability Zones. 
• Supports security efforts, including but not limited to anti-malware, secure configuration, security scanning, security education, multi-factor authentication (MFA), and anti-phishing / security education tools.  
• Supports EDUCAUSE’s Enterprise Reporting and Data team with expertise in SQL Server configuration, replication, reporting, and related technologies. 
• Administers and leads efforts to secure the configuration of EDUCAUSE Office 365 and GSuite for Education tenancies. 

• Leads efforts to maintain and secure mobile device management services to provide EDUCAUSE employees with reliable, secure, and performant laptop hardware and required software for both Mac and Windows platforms. 
• Leads configuration management for patch management system on endpoints. Advises on and implements changes and enhancements to endpoint patch management in service of maintaining EDUCAUSE security standards. 
• Maintains and secures any and all EDUCAUSE-owned laptops, tablets, and other mobile devices using the appropriate Mobile Device Management software ecosystem. 

• Participate in EDUCAUSE events and activities as needed. Travel may be required to support EDUCAUSE conferences/events, research team operations, and external events relevant to the position.  
• Act as a departmental liaison with employees, members, volunteers, volunteer groups, and clients. 
• EDUCAUSE recognizes that the unique backgrounds, talents, skills, and contributions of every individual improve and enhance the quality of the organization. Creating an environment of inclusion is each employee's responsibility. 

The salary range for this position starts at $90,000/annually and includes full benefits including medical and dental insurance, a generous retirement match, and paid time off.