Sr. Cloud Applications Engineer

Accountabilities: As the senior technical owner of cloud applications and enterprise integrations, you will guide architecture, implementation, administration, and operational improvements across Microsoft and Azure environments. Your responsibilities will include: Microsoft 365 Platform Administration Administer and support Exchange Online, including mailbox management, mail flow rules, transport security, distribution groups, and hybrid connectivity. Support SharePoint Online and OneDrive, overseeing site architecture, permissions, information management, retention policies, and storage. Manage Microsoft Teams administration, including team lifecycle governance, guest access, calling plans, meeting room configurations, and compliance settings. Administer Microsoft Entra ID capabilities for cloud applications, including user provisioning, group management, role-based access control, Conditional Access, and identity governance. Support Microsoft Intune integrations and application deployment, including device enrollment, compliance policies, configuration profiles, and endpoint application management. Coordinate Microsoft 365 licensing and application requirements with the platform owner, supporting license assignment, optimization, cost accountability, and lifecycle management. Implement and govern single sign-on (SSO) for SaaS applications, establishing consistent onboarding, API configuration, and federation processes. Build and maintain workflows and integrations using Power Automate, Power Apps, and Power BI in accordance with enterprise governance standards. Apply M365-related governance requirements, including naming conventions, retention and data loss prevention policies, sensitivity labels, Microsoft Purview configuration, and audit logging. Lead the technical onboarding and integration of new SaaS applications, connecting them to identity and security systems. Collaborate with the Microsoft 365 platform owner to establish productivity standards and manage related integrations. Azure Cloud Applications and Platform Engineering Design, develop, deploy, and support Azure-hosted applications and workloads, selecting and configuring appropriate compute, storage, networking, and application services. Apply secure-by-design principles across cloud applications, covering identity, secrets management, network controls, logging, vulnerability remediation, and HIPAA-aligned safeguards. Implement application monitoring, alerting, diagnostics, deployment automation, and operational runbooks using Azure Monitor, Azure Automation, and related services. Maintain identity and application provisioning automation by integrating HR events from ADP with Entra ID and Active Directory through Aquera. Partner with networking specialists and managed service providers on cloud networking, VPN connectivity, and DNS across multiple locations. AI-Enabled Applications and Automation Own the technical configuration, integration, testing, deployment, and support of a conversational AI patient services platform. Develop and maintain patient-facing workflows for appointment scheduling and billing inquiries. Integrate AI-enabled patient services with the enterprise RingCentral telephony environment. Evaluate, pilot, and integrate emerging Microsoft AI capabilities, including Copilot and Azure OpenAI, into clinical and operational workflows. Develop and maintain automation scripts and workflows using Azure Automation, PowerShell, and the Power Platform. Clinical and Enterprise Systems Integration Lead technical integration initiatives for enterprise clinical applications, including laboratory information system (LIS) evaluation and implementation. Define and support HL7/FHIR interfaces, EHR connectivity, data exchange processes, integration testing, and monitoring. Develop and maintain integration architecture connecting clinical applications with EHR, billing, and practice management systems. Optimize the IT service management (ITSM) platform through workflow configuration, automation, service-level agreement rules, and enterprise integrations. Governance, Documentation, and Technical Leadership Maintain comprehensive technical documentation covering cloud platforms, application configurations, and integration architecture. Participate in IT steering meetings, contributing technical expertise to roadmap planning, vendor evaluations, and budget discussions. Support HIPAA compliance, CAP/CLIA inspection readiness, and multi-state laboratory compliance from a cloud and application infrastructure perspective. Mentor and guide the IT infrastructure team through the transition from legacy systems to cloud-native technologies. Keep technical diagrams, site inventories, device configurations, and standard operating procedures accurate and up to date. Establish consistent documentation practices that support troubleshooting, operational continuity, and knowledge sharing. Requirements The ideal candidate combines extensive Microsoft Azure engineering experience with strong enterprise integration, identity management, and automation capabilities. You should be comfortable working independently, collaborating across technical teams, and translating business and compliance requirements into reliable cloud solutions. At least 5 years of direct experience in Azure cloud application engineering, cloud platform engineering, enterprise application integration, or a comparable senior-level role. At least 5 years of hands-on Microsoft Azure experience designing, deploying, integrating, and supporting cloud-hosted applications and services. Experience administering Microsoft 365 services and integrating cloud applications with Entra ID, Exchange Online, SharePoint Online, Teams, and Intune. Strong expertise in Microsoft Entra ID, including application registrations, service principals, managed identities, role-based access control, Conditional Access, SSO, and identity governance. Experience integrating enterprise applications with identity, access, endpoint, and security controls, including Microsoft Intune and Conditional Access. Demonstrated experience implementing application workflows and integrations using the Power Platform, Azure services, or comparable technologies. Strong knowledge of cloud application integration patterns, including REST APIs, webhooks, event-driven architecture, SSO, and healthcare interoperability standards. Proficiency with Azure application engineering services such as Azure App Services, Functions, API Management, Logic Apps, Storage, Key Vault, and Azure Monitor. Familiarity with Azure platform capabilities, including virtual machines, networking, storage, automation, and monitoring. Experience with PowerShell, Microsoft Graph API, Azure CLI, or comparable scripting and automation tools. Understanding of identity and application security principles, including MFA, RBAC, managed identities, service principals, and secrets management. Experience integrating enterprise applications through APIs, including REST APIs, webhooks, or HL7/FHIR healthcare data interfaces. Demonstrated experience in HIPAA-regulated healthcare environments and the ability to translate compliance requirements into technical platform controls. Bachelor's degree in Computer Science, Information Technology, Information Systems, or a related discipline, or equivalent professional experience. Strong communication and collaboration skills, with the ability to work effectively with technical teams, vendors, leadership, and end users. A customer-focused mindset, sound organizational skills, attention to detail, and reliable follow-through. Ability to manage multiple priorities and respond effectively to operational issues. Preferred Qualifications Microsoft Certified: Azure Administrator Associate (AZ-104). Microsoft 365 Certified: Administrator Expert (MS-102). Microsoft Certified: Azure Solutions Architect Expert (AZ-305), strongly preferred at the time of hire. Microsoft Certified: Identity and Access Administrator Associate (SC-300). Experience with conversational AI or AI-powered patient engagement platforms in healthcare or other patient-facing environments, such as Microsoft Copilot Studio. Experience with RingCentral or a comparable enterprise unified communications and telephony platform, including API-level integrations. Familiarity with HL7 and FHIR standards and hands-on experience integrating clinical systems such as LIS, EHR, or practice management platforms. Experience supporting multi-site, multi-state healthcare organizations. Experience with Aquera, Okta, or comparable identity lifecycle automation platforms. Familiarity with CLIA, CAP, or laboratory compliance requirements from an IT infrastructure perspective. Experience supporting or participating in HIPAA Security Risk Assessments (SRA). Working Conditions Standard business hours, with occasional after-hours maintenance as required. Participation in an on-call rotation. Occasional travel to remote office locations and data centers. Remote work arrangement, with candidates required to reside in Pennsylvania, Maryland, Virginia, North Carolina, Tennessee, Georgia, or Florida. Applicants residing in other states will not be considered. Benefits Benefits are available to employees working at least 30 hours per week and include: Annual salary range of $130,000–$155,000, depending on experience. Medical, dental, and vision insurance, effective on the first day of the month following the start date. Short-term and long-term disability insurance. Voluntary life insurance coverage for employees, spouses, and children. Critical illness and hospital indemnity coverage. Company-provided basic life and AD&D insurance. Paid time off. Paid holidays. Retirement savings account. Employee discounts on cosmetic services and products.