About:
ARCHER Systems is a leading technology enabled legal services company that provides pre-settlement and post- settlement administration services for single event, mass tort, and class action cases with the goal of helping claimants access their settlementproceeds more efficiently and quickly. The company plans to continue leveraging technology and top tier talent to enhance customerservice and offer new productlines and services.
This is a hands-on, breadth-oriented role for an engineer who wants to run a real production environment, modernize how infrastructure is built and operated, and work closely with security and development to ship and run software safely. As lead infrastructure engineer for company's multi-tenant Azure estate and Windows server fleet, this role works in close daily partnership with company's Senior Security Infrastructure Engineer, who acts as the technical sounding board, security reviewer, and sign-off authority on significant infrastructure decisions. This role operates under a matrix reporting structure, with a functional reporting line to the CTO, Omni Agent Solutions (USA) and an administrative reporting line to the Associate Director IT (India).
Responsibilities:
- Operate as the lead infrastructure engineer in close daily partnership with Omni's Senior Security Infrastructure Engineer, who provides technical direction, conducts security review, and signs off on significant infrastructure decisions before they reach production.
- Run and modernize Omni's Azure environment, including compute, networking, identity, Azure App Services, Azure SQL, Microsoft WAF, Azure Virtual Desktop and Windows 365, and Azure Monitor.
- Own the Windows Server fleet end-to-end: provisioning, patching cadence, Group Policy and Active Directory operations, lifecycle planning, and end-of-support migrations.
- Own Microsoft 365 license allocation and Azure subscription management across Omni's multi-tenant environment, including license assignment and recovery, subscription and tenant governance, cost visibility, and ongoing right-sizing.
- Modernize the infrastructure-as-code practice. Propose tooling and patterns for joint review with the Senior Security Infrastructure Engineer, and incrementally bring infrastructure under code with security guardrails built in from the start.
- Partner with the senior developer and broader development team to extend modern CI/CD patterns from application code into infrastructure deployment, and to design systems that scale securely as the business grows.
- Work closely with Omni's security team and managed SOC on hardening, vulnerability remediation, identity controls, endpoint protection through SentinelOne, and compliance evidence.
- Cross-train into the security workstreams the Senior Security Infrastructure Engineer manages day-to-day, including endpoint detection and response, SASE and ZTNA networking, SIEM, and the managed SOC's tooling, so the two roles can back each other up across disciplines.
- Manage observability across Datadog and Azure Monitor, including alerting, on-call signal hygiene, and runbook development.
- Maintain the homegrown line-of-business application infrastructure (Azure App Services, Azure SQL, and Microsoft WAF).
- Run day-to-day business continuity and disaster recovery operations within Omni's defined RPO and RTO targets. Maintain DR runbooks and run periodic failover and tabletop exercises.
- Build and maintain runbooks, architecture diagrams, and change records so the environment can be supported by anyone on the team.
- Partner with Omni's co-managed MSP as a shared delivery team across day-to-day operations and escalations, rather than treating the MSP as an outside vendor.
- Provide escalation support to internal end users for infrastructure-impacting tickets routed through the helpdesk and the co-managed MSP.
- Participate in an after-hours rotation covering monthly maintenance windows and incident response, and co-lead post-incident reviews. Formalizing the rotation is part of the role, in partnership with the Senior Security Infrastructure Engineer.
Skills:
- 8+ years of cloud engineering experience, with significant Azure depth.
- 3+ years operating Windows Server environments at production scale.
- Hands-on experience with hybrid identity, including Active Directory, Group Policy, and Entra ID, in a Windows-centric environment.
- Strong cloud and hybrid networking experience, including firewall change management, network segmentation, cross-tenant routing, IPsec and SSL VPN, NSGs, and subnet design.
- Experience operating to defined RPO and RTO targets, including DR runbook maintenance and failover testing.
- Strong infrastructure-as-code experience. Terraform preferred, with openness to Azure-native equivalents such as Bicep or ARM templates.
- Demonstrated ability to modernize engineering practices in close collaboration with security counterparts, partnering on the final shape of the practice rather than dictating it.
- Comfort operating in a role where a security peer reviews and signs off on significant infrastructure decisions, and where outcomes are defined jointly rather than independently.
- Comfort cross-training across infrastructure and security disciplines, holding a primary area of focus while providing secondary coverage of the other.
- Track record of partnering closely with security and development teams to ship and operate software safely and at scale.
Preferred Qualification:
- Familiarity with Microsoft 365 Copilot or other enterprise AI rollouts.
- Exposure to NIST CSF, CIS Controls, or ISO/IEC 27001, and how these frameworks apply to both cloud and on-premises or Group Policy deployment.
- Familiarity with SOC 2 control operation and evidence collection.
- Working knowledge of California privacy regulation (CCPA / CPRA). HIPAA exposure also a plus.
- Microsoft partnership program exposure (CSP, Solutions Partner designations).
- Secondary cloud and SaaS familiarity beyond Azure, including Google Workspace, Google Cloud Storage, and Wasabi object storage.
- Exposure to thin-client deployments and cloud browser management.
- Cloudflare familiarity (edge, DNS, security).
- Next-generation firewall platform experience (Palo Alto Networks, Fortinet FortiGate, or comparable).
- Enterprise backup and DR platform experience (Veeam, Axcient, Azure Backup, or comparable).
- Experience migrating workloads from traditional VMs to serverless or cloud-native application platforms.
- SQL Server DBA exposure for day-to-day database operations (not a primary focus of the role).
- IIS management experience.
- AWS, Kubernetes, or serverless experience.
- Experience operating in a small infrastructure team where breadth matters more than depth in any one area.
