Senior Cloud Engineer

Position Summary

The Senior Cloud Engineer is a technical individual contributor responsible for designing, implementing, and supporting the organization's cloud infrastructure, modern workplace technologies, and identity management solutions. This role ensures the security, scalability, reliability, and compliance of enterprise platforms while driving automation, operational excellence, and continuous improvement initiatives. Working closely with the Information Technology team and external service providers, the Senior Cloud Engineer serves as a key technical partner, providing advanced expertise, and escalation support to enable business operations. 

The Senior Cloud Engineer will report to the Senior Director, Information Technology Services and Security Management.

Primary Responsibilities

• Design, deploy, administer, and optimize Microsoft Azure infrastructure, including virtual machines, storage, networking, DNS, access controls, monitoring, patching, and cost management
• Administer Microsoft Entra ID and Active Directory, including identity lifecycle, groups, licensing, MFA, SSO integrations, Conditional Access, RBAC, and privileged access in partnership with Information Security
• Design and maintain Azure Virtual Desktop (AVD), including host pools, session hosts, image management, user profiles, scaling, application delivery, monitoring, and integration with Entra ID and Intune
• Engineer and administer Microsoft Intune, including configuration and compliance policies, Windows Autopilot, application deployment, update management, security baselines, device enrollment, and endpoint automation
• Design and maintain Azure backup and disaster recovery solutions, including Azure Backup and Azure Site Recovery; maintain recovery runbooks and execute periodic DR testing against established RTO/RPO requirements
• Administer and optimize Microsoft 365 platforms, including Teams, SharePoint Online, OneDrive, and Exchange Online, and evaluate new Microsoft capabilities and service changes
• Develop automation and scripts using PowerShell, Microsoft Graph, Intune Remediations, Power Automate, and Infrastructure as Code where appropriate to improve reliability, security, and operational efficiency
• Implement and maintain Azure governance, including subscription and resource organization, RBAC, Azure Policy, tagging, monitoring, security configuration, and cost optimization
• Serve as the Tier 3 engineering escalation point for complex Azure, identity, AVD, endpoint, and Microsoft 365 issues; lead root-cause analysis and resolution of major technical incidents
• Lead cloud and infrastructure initiatives from technical design through implementation, testing, documentation, and operational handoff to the IT Service Delivery team and MSP
• Support GxP, SOX, audit, and inspection readiness by maintaining required technical controls, documentation, change records, infrastructure qualification evidence, backup/DR evidence, and configuration baselines
• Maintain architecture diagrams, technical standards, runbooks, and knowledge documentation; manage technical work and escalations through the Company’s IT ticketing system and provide technical direction to MSP and technology partners

Competencies

• Advanced hands-on expertise with Microsoft Azure infrastructure, including virtual machines, virtual networks, storage, Azure Monitor, RBAC, Azure Policy, backup, disaster recovery, and cost optimization
• Advanced expertise with Azure Virtual Desktop, including host pools, session hosts, image management, FSLogix profiles, application delivery, monitoring, and scaling
• Strong expertise with Microsoft Entra ID and Active Directory, including MFA, Conditional Access, SSO, RBAC, privileged access, group-based licensing, and identity lifecycle management
• Advanced scripting and automation skills using PowerShell, Microsoft Graph, Intune Remediations, Power Automate, and related Microsoft cloud automation technologies
• Working knowledge of Infrastructure as Code (IaC), including technologies such as Bicep or Terraform and cloud configuration management practices
• Strong troubleshooting and root-cause analysis skills across Azure infrastructure, identity, virtual desktop, endpoint, and Microsoft 365 technologies
• Strong understanding of cloud security principles, including least privilege, Zero Trust, identity security, endpoint security, encryption, logging, monitoring, and secure configuration
• Working knowledge of GxP, SOX, change control, disaster recovery, audit evidence, and technical documentation requirements within regulated environments
• Ability to independently lead complex technical initiatives, manage multiple priorities, work effectively with MSPs and technology vendors, and communicate technical concepts to both technical and non-technical stakeholders

Experience

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline; or equivalent combination of education and relevant professional experience
• Minimum of 7 years of experience in cloud infrastructure, systems engineering, or related technical roles, including significant hands-on experience designing and administering Microsoft Azure environments
• Minimum of 4 years of hands-on experience with Azure infrastructure technologies such as virtual machines, networking, identity, monitoring, backup, disaster recovery, and Azure Virtual Desktop
• Demonstrated experience with Microsoft Entra ID, Active Directory, Microsoft 365, Intune, Autopilot, and enterprise identity and endpoint management
• Demonstrated experience with PowerShell and automation of Microsoft Azure, Microsoft 365, identity, or endpoint administration
• Experience designing, implementing, troubleshooting, and supporting highly available and resilient cloud infrastructure
• Experience using IT ticketing and IT service management systems for incident, problem, change, and technical work management
• Strong hands-on experience with Microsoft Intune and Windows Autopilot, including configuration and compliance policies, application deployment, update management, security baselines, and device enrollment
• Strong Microsoft 365 administration experience across Teams, SharePoint Online, OneDrive, and Exchange Online
• Experience in biotechnology, pharmaceutical, life sciences, or another regulated environment preferred
• Microsoft certifications such as AZ-104 (Azure Administrator), AZ-305 (Azure Solutions Architect), AZ-140 (Azure Virtual Desktop), SC-300 (Identity and Access), MS-102 (Microsoft 365), or equivalent preferred
• Experience with Infrastructure as Code technologies such as Bicep or Terraform preferred

EEO Statement: 

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. 

Benefit Statement:

All regular-status, full-time employees of Geron are eligible to participate in the Company’s comprehensive benefit program, pursuant to plan terms and conditions. Plan choices include medical, dental, vision, life insurance, flexible spending accounts, disability insurance, supplemental health insurance, a 401(k) retirement savings plan, and an employee stock purchase plan. Geron also provides regular-status, full-time employees with a generous time off program that includes the eligibility to accrue 160 hours of vacation during each full year of employment, 64 hours of sick leave, 9 standard paid holiday days off, and paid leave for certain life events. Geron recognizes that its employees work in many different states and therefore may be affected by different laws. It is Geron’s intention to comply with all applicable federal, state, and local laws that apply to the Company’s employees.

Salary Statement:

Offered compensation is determined based on market data, internal equity, and an applicant’s relevant skills, experience, and educational background. 

General Salary Range: $180,000 to $205,000