Sr. Cloud Applications Engineer

Sr. Cloud Applications Engineer

• Reports to: Chief Information Officer (CIO)
• Location: Hybrid/Remote
• Department: Information Technology
• Salary range: $130,000-155,000/year, depending upon experience 

Position Summary

• The Sr. Cloud Applications Engineer will lead the design, development, integration, and support of Azure-hosted applications and enterprise cloud services. The role is central to AAD’s technology transformation, with a focus on AI-enabled patient services, clinical and business application integrations, and Azure platform capabilities.
• The role will operate with significant autonomy, bringing deep expertise in cloud engineering, integration architecture, and automation. The engineer independently establishes technical direction, drives implementation, and provides practical recommendations to leadership while owning the reliability and continuous improvement of all cloud applications and integrations.
• Key responsibilities include Azure application architecture, API integrations, automation, monitoring, and operational support, with technical leadership across AI-enabled patient services, and clinical integrations, and partners with peers - Security Director, Network Architect, application vendors, and Managed Service Provider across AAD’s multi-state dermatology and pathology operations.

This is a remote position but we will only consider candidates who live in the following states: PA, MD, VA, NC, TN, GA or FL. Candidates from any other states will not be considered. 

O365 PLATFORM ADMINISTRATION

• Provide technical administration and operational support for Exchange Online — mailbox management, mail flow rules, transport security, distribution groups, and hybrid connectivity.
• Support SharePoint Online and OneDrive administration — site architecture, permissions governance, information architecture, retention policies, and storage management across all AAD entities.
• Support Microsoft Teams administration — team lifecycle governance, guest access policies, calling plans, meeting room configuration, and compliance settings.
• Administer and integrate Entra ID capabilities needed by cloud applications — user provisioning, group management, role-based access control, Conditional Access policies, and identity governance across all AAD entities.
• Support Microsoft Intune integrations and application deployment requirements — device enrollment, compliance policies, configuration profiles, app deployment, and Conditional Access enforcement across clinic and administrative endpoints.
• Coordinate Microsoft 365 licensing and application requirements with the M365 platform owner — license assignment, E3/F3 optimization, cost accountability, and lifecycle management
• Implement and govern SSO for all SaaS applications — establishing a standard process for application onboarding, API configuration, and SSO federation.
• Build and support application workflows and integrations using Power Automate, Power Apps, and Power BI, in alignment with the enterprise Power Platform governance model.
• Implement application-facing M365 governance requirements in partnership with the platform owner — naming conventions, retention and DLP policies, sensitivity labels, Purview configuration, and audit logging.
• Lead technical onboarding and integration of new SaaS applications — API configuration, provisioning automation, and connection to AAD's identity and security stack.
• Partner with the Microsoft 365 platform owner on collaboration and productivity standards and M365-adjacent integrations

AZURE CLOUD APPLICATIONS & PLATFORM ENGINEERING

• Design, build, deploy, and support Azure-hosted applications and workloads; elect and configure appropriate Azure compute, storage, networking, and application services.
• Apply secure-by-design practices to Azure applications and services, including identity, secrets management, network controls, logging, vulnerability remediation, and HIPAA-aligned safeguards in coordination with the Security Director
• Implement application monitoring, alerting, diagnostics, deployment automation, and operational runbooks using Azure Monitor, Azure Automation, and related Azure services.
• Maintain identity and application provisioning automation integrating ADP HR events with Entra ID/Active Directory via Aquera
• Partner with the Network Architect and MSP on cloud networking, VPN connectivity, and DNS across all AAD locations

AI-ENABLED APPLICATIONS & AUTOMATION

• Serve as the primary technical application owner for AAD's conversational AI patient services platform — configure, integrate, test, deploy, and support patient-facing workflows for scheduling, & billing inquiries
• Integrate the AI patient services platform with the RingCentral enterprise telephony environment.
• Evaluate, pilot, and integrate emerging Microsoft AI capabilities (Copilot, Azure OpenAI) aligned to AAD's clinical and operational workflows.
• Develop and maintain automation scripting using Azure Automation, PowerShell, and Power Platform

CLINICAL & ENTERPRISE SYSTEMS INTEGRATION

• Serve as IT's senior technical integration lead for enterprise clinical application integrations, including the LIS evaluation and implementation — defining HL7/FHIR interfaces, EMR connectivity, data exchange, integration testing, & monitoring
• Support integration architecture for clinical applications connecting to EHR, billing, and practice management systems.
• Optimize the ITSM platform — configure workflows, automations, SLA rules, and integrations with other enterprise systems.

GOVERNANCE, DOCUMENTATION & TEAM LEADERSHIP

• Maintain technical documentation for all cloud platforms, integration architecture, and application configurations.
• Participate in IT steering meetings and provide senior technical input to roadmap planning, vendor evaluations, and budget discussions.
• Support HIPAA compliance, CAP/CLIA inspection readiness, and multi-state lab compliance from a cloud and application infrastructure perspective.
• Mentor and provide technical guidance to the existing IT infrastructure team during the transition from legacy to cloud-native systems.

DOCUMENTATION & STANDARDS

• Update diagrams, site inventories, device configurations, and SOPs.
• Maintain organized, consistent documentation to support operations and troubleshooting.

TECHNICAL SKILLS

• Azure application engineering: Azure App Services, Functions, API Management, Logic Apps, Storage, Key Vault, Azure Monitor, and related application services
• Azure platform: Virtual Machines, Azure App Services, Azure Functions, Azure Storage, Azure Networking, Azure Automation, and monitoring
• Identity and application security: Entra ID, application registrations, managed identities, service principals, RBAC, Conditional Access, MFA, Key Vault, and SSO federation
• Integration and automation: REST APIs, webhooks, Logic Apps, Power Automate, PowerShell, Microsoft Graph API, and Azure CLI
• Scripting and automation: PowerShell, Microsoft Graph API, Azure CLI, or comparable tooling
• Enterprise application integration: REST APIs, webhooks, HL7/FHIR interfaces, API management, event-driven integration, and SaaS application onboarding
• AI application configuration: conversational AI or AI-enabled workflow platform - Microsoft Copilot Studio, Claude, ChatGPT, Gemini

SOFT SKILLS

• Effective communication and teamwork skills.
• Customer-service mindset and ability to support end users professionally.
• Solid organizational habits, diligence, and follow-through.
• Ability to manage multiple tasks and respond quickly to issues.

REQUIRED QUALIFICATIONS

• 5+ years of direct experience in Azure cloud application engineering, cloud platform engineering, enterprise application integration, or a directly comparable senior-level role
• Experience supporting Microsoft 365 services and integrating cloud applications with Entra ID, Exchange Online, SharePoint Online, Teams, and Intune
• 5+ years of direct Microsoft Azure experience designing, deploying, integrating, and supporting Azure-hosted applications and services.
• Strong experience with Microsoft Entra ID, including application registrations, service principals, managed identities, RBAC, Conditional Access, SSO, and identity governance.
• Experience integrating enterprise applications with identity, access, endpoint, and security controls, including Microsoft Intune and Conditional Access
• Direct experience with application workflow automation and integration using Power Platform, Azure services, or comparable tools.
• Experience designing and implementing cloud application integrations using REST APIs, webhooks, event-driven patterns, SSO, and/or healthcare interoperability standards.

• Experience in integrating enterprise applications via APIs, including REST APIs, webhooks, or HL7/FHIR healthcare data interfaces.
• Demonstrated experience in HIPAA-regulated healthcare environments with ability to translate compliance requirements into platform-level technical controls.
• Bachelor’s degree in computer science, Information Technology, Information Systems, or a related field — or equivalent professional experience

PREFERRED QUALIFICATIONS

• AZ-104 — Azure Administrator Associate | MS-102 — M365 Enterprise Administrator Expert (Preferred)
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) strongly preferred at hire.
• Microsoft Certified: Identity and Access Administrator (SC-300)
• Experience with a conversational AI or AI patient engagement platform in a healthcare or patient-facing context (e.g., Microsoft Copilot Studio or equivalent)
• Experience with RingCentral or a comparable enterprise UCaaS / telephony platform, including API-level integration.
• Familiarity with HL7 or FHIR healthcare data standards and direct experience with clinical system integrations (LIS, EHR, or Practice Management)
• Experience supporting a multi-site, multi-state healthcare organization.
• Experience with Aquera, Okta, or a comparable identity lifecycle automation platform
• Familiarity with CLIA, CAP, or laboratory compliance requirements from an IT infrastructure perspective
• Experience supporting or participating in a HIPAA Security Risk Assessment (SRA)

WORKING CONDITIONS

• Standard business hours with occasional after-hours maintenance as needed.
• Participation in on-call rotation.
• Occasional travel to remote office locations and data centers.

Benefits are offered to employees working 30+ hours per week:

• Medical, Dental & Vision insurance – effective 1st of the month after date of start
• Short-term and long-term disability, Voluntary life (employee, spouse, and child), Critical Illness, and Hospital Indemnity – Effective the 1st of the month following date of hire
• Company provided Basic Life/AD&D insurance
• Paid time off
• Paid holidays
• Retirement Savings account
• Employee discount on cosmetic services and products