Systems Engineer - Azure Cloud - Penske Truck Leasing Co., L.P.

Infrastructure Cloud Governance Engineer (CGE) focuses on Azure Infrastructure Governance. This enterprise role is a hands-on technical role with a focus on the enforcement and remediation of Enterprise and Cybersecurity Standards across Azure and Microsoft 365 environments.

In this role, you will be working with Principal Cloud Architects, Cybersecurity Teams, and other Cloud Engineers to implement Governance, Automation, and Observability Solutions which will maintain Penske’s Enterprise Standards & Cybersecurity for Azure and Microsoft 365. This will include the use of Azure Active Directory, Azure Policy, Automation Accounts, Azure Monitor, Log Analytics, and Cybersecurity tools.

This role interfaces regularly with other internal and external team members, Network Administrators, and Technical Services leadership, and is responsible for the monitoring and support of internal and client-facing systems in Azure, cloud-based technologies. He/she will use the skills required for an Architecture role for Azure and Office 365 and have the working knowledge of the skills required to provision, manage, monitor, and decommission Azure-related services. Additional duties consist of standard Enterprise Data Center support of Servers on-prem Exchange with a dotted line to Active Directory. This role is for someone that loves to be hands-on in Microsoft and infrastructure technologies, enjoys working in cloud environments, and wants to be part of an innovative and exciting team.

Responsibilities Include:

• Work with Cloud Architect to enhance Cloud Infrastructure Access Management processes

• Identity Governance (Azure Active Directory, Azure ADDS, B2C, B2B, Conditional Access Policies)

• Work with Cloud Architect and Cybersecurity on Data Governance Solutions such as Microsoft Purview and Palo Alto

• Deployment of Azure Policy to provide Governance Controls to maintain standards

• Work with stakeholders to remediate compliance with Penske Enterprise Standards

• Work with Cybersecurity Team to adopt and enforce Cybersecurity Standards such as CIS, NIST

• Work with Cybersecurity, Engineering, Development, and Operations Teams to enhance Observability with Azure Log Analytics, Azure Monitor, Azure Data Explorer, Synapse, Microsoft Sentinel

• Use Azure Security Tools such as Microsoft Defender for Cloud to review environments and plan remediations

• Developing and Maintaining Infrastructure as Code and automation

• Maintain Privileged Access to Workstations

• Maintain Operating System standards for Windows and Linux using Azure Automation

• Adhering to Microsoft’s Well-Architected Frameworks

• Using Agile Methodologies and working to improve workflows and processes within Azure DevOps

• Troubleshooting and resolving Azure environment performance issues, connectivity issues, security issues, etc.

• Working with teams to integrate Azure infrastructure components into processes and procedures

• Additional duties as assigned

• Ability to work with minimal supervision

• Availability to work night and weekend hours on occasion as required

Qualifications:

• Bachelor’s Degree in computer science, information technology, or related field, or 7 or more years of equivalent experience

• 3 years or more of experience in supporting applications and functions in the Azure Cloud

• Certification(s) related to the cloud environment preferred, such as MCSE, AZ 305: Cloud Platform and Infrastructure and Networking cert such as CCNA Cloud Preferred

Skills:

• Strong experience with PowerShell is a must.

• Strong experience with Azure Active Directory, Active Directory, and Identity Governance within a Large Enterprise

• Strong experience with Windows Server and Linux (RHEL) Operating Systems

• Strong experience with server patch management at scale

• Strong experience with Group Policy, Azure Policy

• Awareness/Familiarity with standards such as NIST, CIS

• Experience with Azure DevOps and Agile Methodologies a plus

• Experience with Azure Active Directory, Service Principals, Managed Identities, and Cloud Infrastructure Access Management using Least Privileges and Just In Time Access

• Experience with Azure Monitor and KQL a plus

• Experience with ARM or Bicep Templates and/or Ansible or Terraform automation platforms is preferred.

• Strong knowledge of Backup, Restore, Recovery, and high availability strategies for Microsoft Azure environments.

• Advanced knowledge of DNS, DHCP, Azure Private Link, and Azure Private Endpoints

• Knowledge of network protocols such as DNS, SMTP, SNMP, SSH, SFTP

• Knowledge of Network and TCP/IP routing/subnetting.

• Knowledge of F5/ Palo Alto network equipment/IOS: routing, switching, and firewalls a plus

• Knowledge of Windows and Linux operating systems.

• Working knowledge of VPN connectivity and client troubleshooting.

The candidate must work well with a team of Infrastructure, Network, Cybersecurity, Data Engineers, & Developers under the guidance of a Principal Cloud Architect. They should have excellent written and verbal skills and be able to express complex ideas clearly and succinctly. The candidate should also be self-motivated, should be able to solve challenges without significant assistance, and should proactively seek to help the rest of the Azure team reach their goals.

Physical Requirements:

-The physical and mental demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

-The associate will be required to: read; communicate verbally and/or in written form; remember and analyze certain information; and remember and understand certain instructions or guidelines.

-While performing the duties of this job, the associate may be required to stand, walk, and sit. The associate is frequently required to use hands to touch, handle, and feel, and to reach with hands and arms. The associate must be able to occasionally lift and/or move up to 25lbs/12kg.

-Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception and the ability to adjust focus.

Penske is an Equal Opportunity Employer.

Job Category: Information Technology

Job Function: Software Engineering

Job Family: Information Technology

Address: 100 Gundy Drive

Primary Location: US-PA-Reading

Employer: Penske Truck Leasing Co., L.P.

Req ID: 2401371