Senior Cloud Operations Engineer

Company Description: Pathstone is a growing wealth management firm serving ultra-high net worth families, single family offices, foundations, and endowments. We are united by a clear purpose: to help clients pursue their Preferred Life — with clarity, confidence, and long-term support across the full landscape of wealth and well-being. Our services include investment advisory, as well as integrated planning and coordination across key areas such as tax strategy, risk management guidance, wealth and estate planning support, philanthropic planning, and family governance — helping clients navigate complexity and make informed decisions aligned with their goals. With more than 20 office locations and over $100 billion in client assets under management, advisory, administration, and related services, Pathstone has expanded significantly over the past five years, reflecting sustained momentum and continued investment in our team and platform. Pathstone is committed to making a meaningful difference for clients and their families, while fostering a supportive, purpose-driven environment for our professionals. Team members are encouraged to pursue their interests and contribute to the firm’s culture through committees and initiatives that help shape our shared mission. Our people are our greatest asset, and we offer a competitive, flexible benefits program designed to support life both inside and outside of work. Benefits include comprehensive medical, vision, and dental coverage, flexible spending options, flexible PTO, life insurance, education support, a 401(k) plan, parental leave, and more. Job Description : We are seeking an experienced Cloud Operations Engineer (Azure) to design, implement, and operate secure, scalable, and highly available cloud infrastructure within Microsoft Azure. This is a hands-on role focused on operational excellence—driving stability, performance, automation, cost optimization, security hardening, and resilient recovery strategies across a modern cloud platform. In this role, you will be responsible for maintaining and continuously improving cloud environments that support enterprise applications, ensuring alignment with security, compliance, and operational best practices. You will collaborate closely with engineering, security, and DevOps teams to ensure cloud services are deployed safely, monitored effectively, and enhanced continuously. The ideal candidate brings a strong combination of Azure administration, architectural awareness, and DevOps integration, with deep expertise in identity, security, and automation. You will play a key role in enabling rapid and reliable delivery through Azure DevOps and robust CI/CD pipelines while advancing the maturity and efficiency of the organization’s cloud operations. Key Responsibilities:  Azure Infrastructure & Cloud Operations Administer and optimize Azure environments across IaaS and PaaS services, ensuring scalability, reliability, and performance. Deploy and manage Azure services including computer, networking, storage, and platform services. Monitor system health, availability, and performance using Azure-native and third party tools. Provide support for production systems, including incident response and root cause analysis. Maintain SLAs and ensure systems meet uptime and resiliency requirements. Own operational lifecycle management for Azure app registrations, enterprise applications, service principals, client secrets, certificates, Key Vault integrations, and related monitoring/alerting to prevent expiration-related outages. Support Azure networking resources including VNets, peering, private endpoints, private DNS zones, VPN connectivity, NSGs, routing, and firewall/security integration. Deploy and operate Azure SQL Database / Azure SQL Managed Instance services, including secure connectivity, backups, performance monitoring, availability options, and recovery validation. Create and maintain technical documentation, architecture diagrams, operational runbooks, and support handoff materials for Azure, identity, automation, and application platform services. Cloud-Centric Application Design Collaborate with application teams to design cloud-native and cloud-optimized solutions. Leverage Azure PaaS services such as: Azure App Service Azure Functions Azure Logic Apps Azure API Management Ensure applications are designed for high availability, fault tolerance, and scalability. Implement patterns such as microservices, event-driven architecture, and API-first integration. DevOps & Azure DevOps Enablement Partner with development teams to implement and manage CI/CD pipelines using Azure DevOps and enforce DevOps best practices. Support infrastructure provisioning. Automate deployment, configuration, and scaling processes. Ensure consistent environments across development, staging, and production. Identity, Access & Okta Integration Integrate and manage identity across Azure Entra ID and Okta. Design and maintain SSO, MFA, and federation between platforms. Implement role-based access control (RBAC) and least privilege principles. Manage user access provisioning, deprovisioning, and periodic access reviews. Support identity lifecycle governance and audit readiness. Security & Compliance Implement and maintain a security-first architecture, aligned with Zero Trust principles. Enforce policies for endpoint, network, and cloud workload protection. Utilize tools such as: Crowdstrike Falcon Platform Netskope Azure Policies Conditional Access Support regulatory compliance initiatives (e.g., SEC, NIST-aligned controls). Participate in security assessments, vulnerability management, and incident response. High Availability & Resiliency Design and maintain highly available and fault-tolerant systems across regions and availability zones. Implement backup, disaster recovery,