Senior Cloud Engineer

Position Summary The Senior Cloud Engineer is a technical individual contributor responsible for designing, implementing, and supporting the organization's cloud infrastructure, modern workplace technologies, and identity management solutions. This role ensures the security, scalability, reliability, and compliance of enterprise platforms while driving automation, operational excellence, and continuous improvement initiatives. Working closely with the Information Technology team and external service providers, the Senior Cloud Engineer serves as a key technical partner, providing advanced expertise, and escalation support to enable business operations. The Senior Cloud Engineer will report to the Senior Director, Information Technology Services and Security Management. Primary Responsibilities Design, deploy, administer, and optimize Microsoft Azure infrastructure, including virtual machines, storage, networking, DNS, access controls, monitoring, patching, and cost managementAdminister Microsoft Entra ID and Active Directory, including identity lifecycle, groups, licensing, MFA, SSO integrations, Conditional Access, RBAC, and privileged access in partnership with Information SecurityDesign and maintain Azure Virtual Desktop (AVD), including host pools, session hosts, image management, user profiles, scaling, application delivery, monitoring, and integration with Entra ID and IntuneEngineer and administer Microsoft Intune, including configuration and compliance policies, Windows Autopilot, application deployment, update management, security baselines, device enrollment, and endpoint automationDesign and maintain Azure backup and disaster recovery solutions, including Azure Backup and Azure Site Recovery; maintain recovery runbooks and execute periodic DR testing against established RTO/RPO requirementsAdminister and optimize Microsoft 365 platforms, including Teams, SharePoint Online, OneDrive, and Exchange Online, and evaluate new Microsoft capabilities and service changesDevelop automation and scripts using PowerShell, Microsoft Graph, Intune Remediations, Power Automate, and Infrastructure as Code where appropriate to improve reliability, security, and operational efficiencyImplement and maintain Azure governance, including subscription and resource organization, RBAC, Azure Policy, tagging, monitoring, security configuration, and cost optimizationServe as the Tier 3 engineering escalation point for complex Azure, identity, AVD, endpoint, and Microsoft 365 issues; lead root-cause analysis and resolution of major technical incidentsLead cloud and infrastructure initiatives from technical design through implementation, testing, documentation, and operational handoff to the IT Service Delivery team and MSPSupport GxP, SOX, audit, and inspection readiness by maintaining required technical controls, documentation, change records, infrastructure qualification evidence, backup/DR evidence, and configuration baselinesMaintain architecture diagrams, technical standards, runbooks, and knowledge documentation; manage technical work and escalations through the Company’s IT ticketing system and provide technical direction to MSP and technology partners Competencies Advanced hands-on expertise with Microsoft Azure infrastructure, including virtual machines, virtual networks, storage, Azure Monitor, RBAC, Azure Policy, backup, disaster recovery, and cost optimizationAdvanced expertise with Azure Virtual Desktop, including host pools, session hosts, image management, FSLogix profiles, application delivery, monitoring, and scalingStrong expertise with Microsoft Entra ID and Active Directory, including MFA, Conditional Access, SSO, RBAC, privileged access, group-based licensing, and identity lifecycle managementAdvanced scripting and automation skills using PowerShell, Microsoft Graph, Intune Remediations, Power Automate, and related Microsoft cloud automation technologiesWorking knowledge of Infrastructure as Code (IaC), including technologies such as Bicep or Terraform and cloud configuration management practicesStrong troubleshooting and root-cause analysis skills across Azure infrastructure, identity, virtual desktop, endpoint, and Microsoft 365 technologiesStrong understanding of cloud security principles, including least privilege, Zero Trust, identity security, endpoint security, encryption, logging, monitoring, and secure configurationWorking knowledge of GxP, SOX, change control, disaster recovery, audit evidence, and technical documentation requirements within regulated environmentsAbility to independently lead complex technical initiatives, manage multiple priorities, work effectively with MSPs and technology vendors, and communicate technical concepts to both technical and non-technical stakeholders Experience Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline; or equivalent combination of education and relevant professional experienceMinimum of 7 years of experience in cloud infrastructure, systems engineering, or related technical roles, including significant hands-on experience designing and administering Microsoft Azure environmentsMinimum of 4 years of hands-on experience with Azure infrastructure technologies such as virtual machines, networking, identity, monitoring, backup, disaster recovery, and Azure Virtual DesktopDemonstrated experience with Microsoft Entra ID, Active Directory, Microsoft 365, Intune, Autopilot, and enterprise identity and endpoint managementDemonstrated experience with PowerShell and automation of Microsoft Azure, Microsoft 365, identity, or endpoint administrationExperience designing, implementing, troubleshooting, and supporting highly available and resilient cloud infrastructureExperience using IT ticketing and IT service management systems for incident, problem, change, and technical work managementStrong hands-on experience with Microsoft Intune and Windows Autopilot, including configuration and compliance policies, application deployment, update management, security baselines, and device enrollmentStrong Microsoft 365 administration experience across Teams, SharePoint Online, OneDrive, and Exchange OnlineExperience in biotechnology, pharmaceutical, life sciences, or another regulated environment preferredMicrosoft certifications such as AZ-104 (Azure Administrator), AZ-305 (Azure Solutions Architect), AZ-140 (Azure Virtual Desktop), SC-300 (Identity and Access), MS-102 (Microsoft 365), or equivalent preferredExperience with Infrastructure as Code technologies such as Bicep or Terraform preferred EEO Statement: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Benefit Statement: All regular-status, full-time employees of Geron are eligible to participate in the Company’s comprehensive benefit program, pursuant to plan terms and conditions. Plan choices include medical, dental, vision, life insurance, flexible spending accounts, disability insurance, supplemental health insurance, a 401(k) retirement savings plan, and an employee stock purchase plan. Geron also provides regular-status, full-time employees with a generous time off program that includes the eligibility to accrue 160 hours of vacation during each full year of employment, 64 hours of sick leave, 9 standard paid holiday days off, and paid leave for certain life events. Geron recognizes that its employees work in many different states and therefore may be affected by different laws. It is Geron’s intention to comply with all applicable federal, state, and local laws that apply to the Company’s employees. Salary Statement: Offered compensation is determined based on market data, internal equity, and an applicant’s relevant skills, experience, and educational background. General Salary Range: $180,000 to $205,000