Sr. Infrastructure Cloud Engineer

Benefits

Additional Information

Axogen is committed to building and maintaining a strong and gratifying company culture that fosters professional growth. Our hands-on and personal approach makes transitioning to a new job a seamless and enjoyable process. Most benefits are effective on day one! Axogen is an equal opportunity employer and does not discriminate against applicants on the basis of race, color, creed, religion, ancestry, age, sex, marital status, national origin, disability or veteran status. Why you'll love working at Axogen: Friendly, open, and fun team culture that values unique perspectives Company-wide dedication to profoundly impacting patients' lives Comprehensive, high-quality benefits package effective on date of hire Educational assistance available for all employees Matching 401(k) retirement plan Paid holidays, including floating holidays, to be used at your discretion Employee Stock Purchase Plan Referral incentive program Axogen Mission and Business Purpose Our business purpose is to restore health and improve quality of life by making restoration of peripheral nerve function an expected standard of care. We aim to lead the markets we serve by always requiring the solutions we offer patients and caregivers provide an improved benefit-to-risk profile as compared to existing standards of care. To ensure we deliver improved benefit-to-risk solutions, we will guide and expect the market and design requirement specifications underlying our engineering, business development, and clinical research activities, objectively target advancements in standards of care. Job Summary of the Sr. Infrastructure & Cloud Engineer The Sr. Infrastructure & Cloud Engineer is a hands-on technical leader and trusted partner to Quality, Security, and Operations. You will own enterprise systems reliability, cloud migration execution, and security hardening while maintaining audit-ready controls. This role blends deep engineering expertise with strong architecture communication-defining standards and roadmaps, influencing stakeholders, and delivering results across several U.S. sites. Requirements of the Sr. Infrastructure & Cloud Engineer Required: 10+ years of experience managing enterprise infrastructure across multi‑site environments. Proven leadership in completing on‑premises or hybrid Active Directory migrations to Azure AD or Azure Active Directory Domain Services, and Intune MDM Extensive hands-on experience with Intune device policies, Conditional Access, and core IAM principles. Deep expertise in Microsoft Server migrations from on‑premises to Azure IaaS, with preference for candidates familiar with transitions from IaaS to PaaS. Demonstrated success implementing MFA and SSO solutions (e.g., Duo, OneLogin, Microsoft Entra based SAML) and enforcing secure Windows endpoint authentication policies. Strong operational proficiency with Cisco Meraki based products, including routing, switching, wireless, SD‑WAN, and RADIUS/Wi‑Fi security. Direct experience operating within compliance‑driven environments; familiarity with 21 CFR Part 11, GxP, and SOX is preferred. Proficient in PowerShell scripting for Microsoft 365 administration. Proven track record in enterprise IT service and change management (e.g., ITIL). Preferred: Certifications such as Microsoft Identity and Access Administrator, Intune Administrator Associate, Azure Solutions Architect Expert, Security Operations Analyst, Endpoint Administrator Associate, Azure Administrator Associate Experience with identity governance, privileged access management, Zero Trust, certificate management (PKI), and encryption standards. Responsibilities of the Sr. Infrastructure & Cloud Engineer The specific duties of the Sr. Infrastructure & Cloud Engineer include but are not limited to: Administer enterprise platforms: Windows Server/AD, Entra ID (Azure AD), Azure IaaS/PaaS, Microsoft 365, Intune, VMware/virtualization, storage, and backup/DR (e.g., Veeam/Azure Backup). Establish patch, vulnerability, and configuration baselines; drive continuous hardening for endpoints and servers. Manage Meraki routing/switching/wireless, SD-WAN/VPN, segmentation/NAC, and performance monitoring. Design and support RADIUS/EAP authentication for wireless; integrate logs into SIEM. Deploy and tune EPP/XDR/SIEM; author runbooks, playbooks, detections, and dashboards. Partner with Security to triage incidents, perform root cause analysis, and lead remediation. Author and maintain SOPs/WIs, architecture standards, cloud governance (identity, cost, security), DR plans, and service provisioning guidelines. Ensure validated change control, periodic access reviews, configuration management, and evidence retention. Build and communicate architecture vision, blueprints, and end-to-end solution roadmaps for infrastructure and cloud services. Provide high-quality documentation: diagrams, standards, and transition plans that enable consistent implementation. Manage IT services vendors