Senior Cloud Systems Engineer

Position Function

This position is responsible for maintaining and supporting the bank's infrastructure and participates in various projects to continually improve its efficiency and security. Position requires a high level of technical knowledge to perform problem identification and resolution of hardware, software, network carrier, and security issues. Operates across several computer environments and platforms.

Designs, implements, administers, and supports the Bank's enterprise server, application, and cloud platforms. Performs the core responsibilities of a Senior Systems Engineer across operating systems, application hosting and middleware, identity, endpoint management, Microsoft 365 administration, certificates, deployment, monitoring, and production support, while providing additional senior-level engineering expertise in Microsoft Azure and Amazon Web Services (AWS).

Serves as a senior technical subject matter expert for hybrid systems and cloud solutions. Leads design and implementation of Azure and AWS services, cloud-hosted application platforms, migrations, automation, security controls, identity integration, resiliency, and operational standards. Coordinates with infrastructure-as-a-service and network providers while retaining technical ownership of server, application, cloud, identity, endpoint, and administration outcomes.

Performs all duties and interacts with internal and external customers in a manner that is expressly aligned with the Company's Core Values of approaching all actions with a “Voyaging Spirit” and being “Positively Ohana”. Exhibits core competencies that result in consistent delivery of positive Customer Interactions, Empowerment and Ownership and demonstrates key professional and performance skills such as Active Listening, effective Oral and Written Communication, Action and Solution Oriented and Thoroughness.

Primary Accountabilities

Systems and Application Engineering

Performs senior systems-engineering responsibilities across Windows Server and, where applicable, Linux; Active Directory; DNS; DHCP; application hosting and middleware; application deployment; service accounts; monitoring; patching; and production troubleshooting.

Designs, implements, configures, and administers platforms such as Microsoft IIS, web/application servers, Windows services, Java/JBoss/WildFly or comparable runtimes, scheduled jobs, and supporting application components.

Administers certificates and TLS dependencies including requests, renewals, installation, bindings, trust chains, keystores, expiration monitoring, and troubleshooting.

Leads server and application lifecycle work including technical design, migrations, upgrades, implementation, rollback, validation, operational transition, and root-cause analysis.

Coordinates with infrastructure-as-a-service providers for underlying compute, storage, backup, virtualization, and data-center services while retaining responsibility for systems and application requirements.

Microsoft Endpoint, Identity and M365 Administration

Administers Microsoft Intune for device enrollment, configuration, compliance, application packaging and deployment, endpoint security, update policies, and advanced troubleshooting.

Administers Microsoft Entra ID including users and groups, enterprise applications, Conditional Access, MFA, SSO, RBAC, application registrations, service principals, hybrid identity, and privileged-access controls.

Supports the Microsoft 365 administration suite including Exchange Online, Teams, SharePoint/OneDrive, licensing, tenant configuration, security controls, service health, and issue resolution as assigned.

Integrates endpoint, identity, Microsoft 365, on-premises systems, SaaS, Azure, and AWS services into consistent secure-access and administration patterns.

Network Management Support

Provides network service support such as building servers, switches, routers, and workstations. Performs software testing and upgrades and assisting network users with network related problems. Ensures Enterprise systems are available to internal and external customers for access 24x7 and is operating at peak performance levels. Assists in communication and coordination of network maintenance schedules, backups, and other downtime to users.

Cloud Engineering

Designs, deploys, configures, and administers Azure and AWS services supporting enterprise applications, including compute, storage, networking, load balancing, DNS, private connectivity, backup, monitoring, and appropriate managed platform services.

Designs and supports cloud-hosted application architectures, hybrid integrations, landing-zone patterns, subscriptions/accounts, resource organization, tagging, policy guardrails, and standardized platform configurations.

Implements cloud identity and access using Microsoft Entra ID, AWS IAM, RBAC, federation, SSO, MFA, service identities, application registrations, secrets, and least-privilege access patterns.

Leads cloud migrations and modernization efforts, including workload assessment, dependency mapping, target-state design, migration planning, testing, cutover, rollback, optimization, and operational handoff.

Troubleshoots complex cloud compute, application, identity, networking, security, performance, availability, and integration issues and serves as the senior escalation point for production cloud services.

Automation, Security, Reliability and Technical Leadership

Builds and maintains automation and infrastructure-as-code using PowerShell, Python, APIs, Terraform and/or native cloud tooling such as ARM templates, or AWS CloudFormation to deliver repeatable and auditable deployments.

Implements monitoring, logging, alerting, backup, high availability, disaster recovery, vulnerability remediation, secrets management, encryption, policy compliance, and recovery testing for assigned systems and cloud services.

Produces technical designs, architecture diagrams, standards, runbooks, implementation and rollback plans, support documentation, and audit evidence for systems and cloud platforms.

Provides limited network administration and troubleshooting required for systems and cloud services, including DNS, DHCP, VPC/VNet concepts, routing, firewall and port requirements, private endpoints, VPN connectivity, proxies, and load balancers; coordinates advanced network engineering with the appropriate team or provider.

Mentors engineers and administrators, reviews technical work, evaluates new technologies, and communicates technical risks, tradeoffs, and recommendations to technical and nontechnical stakeholders

Minimum Qualifications

Education

High School Diploma or GED equivalency required.

Bachelor’s Degree from an accredited 4-year university in Computer Science, Information Systems, Engineering, or related field required.

Experience

8+ years of experience in Enterprise Systems Engineering: Progressive experience administering, deploying, maintaining, and troubleshooting Windows Server, Active Directory, DNS, Group Policy, enterprise applications, IIS, middleware, and hybrid infrastructure environments required.

6+ years of experience in Cloud Engineering & Architecture: Hands-on experience designing, implementing, securing, and administering Microsoft Azure and/or AWS environments, including compute, networking, storage, identity, monitoring, backup, and resiliency required.

6+ years of experience in Microsoft Enterprise Technologies: Hands-on experience administering Microsoft Entra ID, Microsoft Intune, and Microsoft 365, including identity management, SSO, MFA, Conditional Access, endpoint management, and enterprise integration required.

6+ years of experience in Enterprise Application & Security Engineering: Experience deploying and supporting enterprise applications, managing PKI and SSL/TLS certificates, implementing system hardening, remediating vulnerabilities, and troubleshooting complex application and authentication dependencies required.

4+ years of experience in Automation, Operations & Resiliency: Experience with PowerShell, Python, or infrastructure-as-code; system monitoring, patch management, backup and recovery, disaster recovery, incident management, and change management processes required.

3+ years of experience in Technical Leadership & Project Execution: Demonstrated experience independently planning, designing, implementing, and documenting complex technical solutions; leading cross-functional initiatives; coordinating vendors; and mentoring technical staff required.

License/Certification

Azure and/or AWS certifications preferred.

Microsoft role-based certification such as Endpoint Administrator, Identity and Access Administrator, or Microsoft 365 Administrator preferred.

Physical Requirements & Working Conditions

• Must be able to perform light physical work and to move or lift items including but not limited to boxes, files and papers up to 20 pounds unless otherwise as indicated.
• Must be able to operate and proficiently use standard office equipment, including phone, copier, personal computer and/or other work related mechanical or electronic devices and applications.
• Must be able to clearly communicate verbally and in writing with all internal and external customers. Must also be able to hear sufficiently to engage in daily discussions and interactions.
• Must be able to read and understand bank-related documents.
• Must be able to work in a conventional office setting, involving sitting at a desk or workstation for long periods of time. Must also be able to adapt to different work environments as needed to perform the job.
• We are proud to be an EEO/AA employer M/F/D/V. We maintain a drug-free workplace and perform pre-employment substance abuse testing.