Easy Apply
KPA helps organizations keep people safe, protect their business, and elevate compliance.
The Role
The Senior Cloud & Systems Engineer leads infrastructure modernization, manages cloud workloads, oversees identity governance, administers Microsoft 365, and builds automation tools while ensuring security and compliance.
Summary Generated by Built In
Position Description:
The Senior Cloud & Systems Engineer reports directly to the Director of Security & Technology and serves as the technical right hand for the IT and systems function at KPA. This role sits at the intersection of DevOps, helpdesk, and security, owning the infrastructure, identity, and automation layer that connects them. We are looking for a senior engineer who leads by example, drives large projects independently, makes sound technical recommendations without being asked, and sets the standard for how IT work gets done at KPA.
Responsibilities:
- Lead infrastructure modernization - own the transition from hybrid on-premises and Azure to a fully cloud-native, domain-free environment; manage Azure and AWS workloads outside of DevOps scope; drive identity and platform consolidation as the company evolves
- Own identity governance end to end - Entra ID, Active Directory, hybrid identity, Azure AD Connect, conditional access, and access lifecycle
- Own the full Microsoft 365 tenant including Exchange Online, SharePoint, Teams, and licensing; administer Intune and Autopilot for endpoint lifecycle management across Windows, macOS, iOS, and Android.
- Own the traditional systems administration layer that underpins the business - Windows Server, Hyper-V, DNS, DHCP, Group Policy, patching, firmware, and backup administration
- Build and own automation that makes the business more agile - PowerShell, API integrations, and AI-assisted development to reduce manual work and accelerate delivery
- Own network infrastructure across all office locations - Cisco Meraki switching, wireless, VLANs, DHCP, ISP management, and VPN connectivity; maintain PRTG monitoring and respond proactively to infrastructure health issues; keep firmware current across all network hardware
- Evaluate, recommend, and lead the migration to a modern cloud telephony platform; own the current phone system through the transition including user provisioning, call routing, and licensing
- Partner with the DevOps, helpdesk and security team on complex escalations, identify root causes rather than symptoms, and build solutions that prevent repeat issues
Qualifications:
- Bachelor’s degree in computer science, information technology, or equivalent experience; Certifications such as CompTIA Security+, Microsoft AZ-104 or MS-102 are a strong plus
- 5+ years of experience in systems administration or infrastructure engineering with meaningful time in hybrid Windows and Azure environments; you have done real sysadmin work and you also know your way around modern cloud
- Strong hands-on Azure experience required - Entra ID, Azure Virtual Desktop, Azure Files, Azure Arc, Azure Update Manager, and IaaS VM administration; solid Microsoft 365 administration across Exchange Online, SharePoint, Teams, Intune, and Autopilot
- PowerShell proficiency including Microsoft Graph API, Active Directory automation, and Exchange Online management; comfortable with API integrations and scripted workflows; experience using AI tools to accelerate engineering
- Solid on-premises Windows Server background including AD DS, DNS, DHCP, and Group Policy; you are not afraid of legacy infrastructure and know how to manage it safely while moving toward something better
- Experience with enterprise backup platforms and restore validation practices; working knowledge of Cisco Meraki or equivalent enterprise network platform
- Strong security awareness and good judgment around security decisions; familiarity with SOC 2 or similar compliance frameworks is a plus
- AWS experience is a plus — legacy workloads exist in AWS; disciplined about change management and documenting infrastructure changes before executing them
Success Criteria:
- Ownership and execution - identifies what needs to be done, builds a plan, executes it, and closes the loop without needing to be followed up with; nothing goes into the environment undocumented or untested
- Strong communication - leadership knows what is happening without having to ask; blockers and risks are surfaced early; ideas and recommendations come from you proactively
- Forward thinking - understands where the company is heading and makes decisions that move toward it; brings a point of view on what should be done next and why; sees a complex environment mid-transformation as an opportunity
- Work ethic that corresponds with KPA’s core values: Integrity - Helpful - Excellence - Agile - Respectful - Teamwork
Physical Requirements:
- Working at a computer typing and view a screen - Constantly
- Stationary sitting or standing - Constantly
- Visual Recognition - Constantly
- Hearing/Listening - Occasionally
- Communicating verbally and/or in writing - Occasionally
- Travel - Seldom
Physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Compensation:
- Annual base salary range between $110-125k commensurate with experience.
- Bonus potential of 10% annually
Skills Required
- Bachelor's degree in computer science, information technology, or equivalent experience.
- 5+ years of experience in systems administration or infrastructure engineering.
- Strong hands-on Azure experience required.
- PowerShell proficiency including Microsoft Graph API.
- Solid on-premises Windows Server background.
- Experience with enterprise backup platforms.
What the Team is Saying
Brandon
Client Support Manager
Marnie
Office Manager
.jpeg)
Jordan
Talent Acquisition Partner
Meghan
Human Resources Generalist
Matt
Client Success Manager
Emma
Senior Financial Analyst
.jpeg)
KPA Compensation & Benefits Highlights
-
Retirement Support — A 401(k) with company match is part of the package, with dollar‑for‑dollar up to 6% and immediate vesting cited in public listings. This supports long‑term savings and strengthens overall total rewards.
-
Leave & Time Off Breadth — PTO, paid holidays, and paid volunteer days are included, alongside remote‑first flexibility and flexible schedules for many roles. This breadth of time‑off options supports work‑life balance.
-
Wellbeing & Lifestyle Benefits — Coverage spans health, dental, vision, FSA/HSA, life and disability insurance, EAP/mental‑health resources, wellness programs, and pet insurance. Professional development funds and learning access add to the overall lifestyle support.
KPA Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
KPA solutions help clients identify, remedy, and prevent workplace safety and compliance problems across their entire enterprise. The combination of KPA’s easy-to-use software platforms, consulting services, and award-winning training content helps organizations minimize risk so they can focus on what’s important—their core business. For nearly 40 years, KPA has helped 10,000+ clients achieve regulatory compliance, protect their business, and keep people safe.
Why Work With Us
Since 1986 we have been refining the core values with which we work together as a team and with our clients. Do you align with our core values of Integrity, Helpfulness, Excellence, Agility, Respectfulness, and Teamwork? It is these core values that promote our success through both organic growth and integrating acquisitions.
Gallery
KPA Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
KPA operates in a hybrid, remote-first work environment where daily office attendance is optional and teams get together in-person for collaboration.
Typical time on-site:
Flexible
Westminster, CO
Our headquarters is located in the CirclePoint Corporate Center in Westminster, right off US 36 between 104th and 112th. Minutes from the Westminster Promenade, a major entertainment and food hub.
