Azure · GitHub · Microsoft Entra ID · Jira · Linear
Position Overview
CFGI is seeking a full-time Network/Cloud Infrastructure Security Engineer to join its corporate Information Technology department, reporting to the Director of Information Technology. This hands-on role owns the identity, access, and cloud foundations behind more than 1,400 users across domestic and international offices, including Microsoft Entra ID, Azure, GitHub, Linear, Jira, and other business-critical applications.
As a professional services firm entrusted with sensitive client financial data, CFGI must meet the security expectations of public companies, private equity sponsors, and auditors, and this role turns those expectations into practical, well-documented controls. The engineer is the primary resource for Identity and Access Management (“IAM”) and infrastructure requests from product development, an escalation point for the IT team, and a partner to IT Service Management and functions across the firm.
Core Responsibilities
Cloud Infrastructure and Architecture
Design, build, and maintain secure Azure environments, including landing zones, subscription structure, networking, and resource governance.
Implement and manage infrastructure as code (Terraform, Bicep) and Azure Policy to keep cloud environments consistent, governed, and auditable.
Plan and execute tenant, domain, and workload migrations, including Microsoft 365 tenant-to-tenant moves related to acquisitions and expansion.
Maintain backup and disaster recovery for critical systems, and plan for future multi-cloud expansion, such as AWS.