IT Cloud Engineer

This assignment posting is for an Agency Worker opportunity with People Inc. The Agency Worker is paid by a staffing agency employer. Agency Workers will receive a W2 from the staffing agency reporting their earnings for tax purposes.

IT Cloud Engineer

People Inc. seeks an experienced IT Cloud Engineer to support, maintain, and modernize enterprise infrastructure during data‑center decommissioning and cloud migrations. You will own Windows Server operations, identity integrations (Okta–AD/Azure-AD), automation, and hybrid cloud services across on‑prem and AWS/Azure/GCP.

Assignment Details:

40 hours a week

Start date: ASAP

End date: 6 months with potential to extend

Hourly Rate: $60-65

Location: Remote - US

Key Responsibilities

• Windows Servers: Administer 200+ servers; own patching SLAs, monitoring (Prometheus/Grafana), capacity/lifecycle plans, and vulnerability remediations.
• Directory & Identity: Operate AD/Azure AD; serve as Okta–AD SSO/MFA integration owner (health, upgrades, certificates, lifecycle).
• Infrastructure & Migrations: Execute NYC data‑center app migrations; assist Nutanix decommission; administer Rubrik backups and Sectigo certificates.
• Monitoring & Reporting: Build dashboards and alerts; define SLOs with app owners; deliver monthly system inventory, ownership, and compliance reports.
• Networking & Peripheral Support: Manage enterprise DNS (non‑Route 53); support ClearPass and printer authentication integrations.
• Cloud Operations: Manage AWS/Azure/GCP workloads (VMs, IAM, storage/compute, networking, connectivity); optimize cost, reliability, and security.
• Automation: Deliver PowerShell/Python/Bash tooling for patching, configuration, and repetitive operations; champion IaC/Config‑as‑Code where feasible.
• Active Directory Migration
• Plan & governance: define scope/success/rollback, RFC/CAB approvals, stakeholder comms, risk register, clear ownership and SLAs.
• Baseline & readiness: full AD/GPO/OUs/trusts/DC health (dcdiag/repadmin), security posture (tiering/LAPS/NTLM), backups/DR tested.
• Identity & SSO design: source of truth + JML, AAD Connect (PHS/PTA, sourceAnchor, staging/writeback), Okta agents/MFA/policies, UPN/sAMAccountName strategy.
• App/data/network prep + pilot: catalog LDAP/Kerberos apps/SPNs, file/print ACLs, DNS/DHCP validation; run a scoped pilot with helpdesk scripts and rollback.
• Execute, monitor, cutover, close: wave-based moves with replication checks, live auth monitoring, cutover steps, post‑validation, cleanup/decommission, docs/CMDB updates, PIRs and metrics.
• Change Management & Governance
• Follow ITIL‑aligned change process: RFC tickets with peer review, test evidence, implementation/backout plans, and maintenance windows; attend CAB as required.
• Track changes in Jira; update CMDB/asset records within 7 days of change; complete PIRs within 5 business days for failed/high‑risk changes.
• Enforce progressive delivery: phased rollouts, canaries, and checkpoint validation; document rollback criteria and success gates upfront.
• Documentation & Knowledge Management
• Maintain current runbooks, architecture/network diagrams, standard operating procedures, DR playbooks, and “How We Operate” docs in a versioned repository.
• Treat documentation as acceptance criteria: every change/migration updates docs before closure; keep system ownership and escalation paths explicit.
• Publish weekly change summaries and quarterly service health reviews to stakeholders.
• Accountability & Metrics
• Change quality: change failure rate ≤5%; PIR completion SLA met..
• CMDB accuracy: ≥98% CI correctness; ownership fields populated for 100% tier‑1 services.
• Observability coverage: dashboards/alerts for 100% tier‑1 apps with on‑call playbooks.
• Patch compliance: ≥95% critical within 14 days; ≥95% standard within 30 days.
• Backup posture: ≥99% successful jobs; quarterly restore tests with evidence.
• Incremental Delivery
• Plan migrations and decommissioning as small, testable increments with clear exit/rollback; demonstrate progress via bi‑weekly demos and burn‑up charts.
• Use feature flags/guardrails where applicable; prefer automate‑then‑standardize over one‑off fixes.
• Maintain a visible improvement backlog (automation debt, toil reduction, cost optimizations) with quarterly goals.

Qualifications

• 5+ years in systems administration or infrastructure engineering.
• Strong Windows Server and patch automation experience.
• Hands‑on with AWS, Azure, or GCP (IAM, compute/storage, networking).
• Deep knowledge of Okta, Active Directory, Azure AD integrations.
• Scripting with PowerShell (preferred), plus Python or Bash.
• Experience with Linux, Nutanix, Rubrik.
• Familiarity with Docker/containers.
• Monitoring/logging with Prometheus/Grafana, Loki, Splunk, or ELK.
• Excellent troubleshooting and stakeholder communication.
• Preferred: Cloud‑migration background, ITIL knowledge, Microsoft Administrator or cloud certifications.
• People Inc. is the largest print and digital publisher in America. Nearly 200 million people trust us each month to help them make decisions, take action, and find inspiration. People Inc.'s over 40 iconic brands include PEOPLE, Better Homes & Gardens, Verywell, Food & Wine, Travel + Leisure, Allrecipes, REAL SIMPLE, Investopedia, and Southern Living.
• Please be aware of fraudulent recruiters offering opportunities at People Inc. If you are in conversations about a job opportunity and wish to confirm its validity, please reach out directly to [email protected].