Title: Cloud Engineer

Office: Los Angeles

Reports to: Head of IT, US

TBWA\Media Arts Lab (or MAL as you’ll hear us called) is the bespoke global advertising agency dedicated solely to Apple. Our mission is to create smart, simple, and iconic work that transforms business and makes culture for the world’s best brand.

We believe that what MAL creates belongs to everyone; and everyone belongs at MAL. We think creativity lives in open, safe, and brave spaces, where diverse perspectives can come together, free of prejudice and discrimination. We strive to be a partnership of equals. Everyone has a role to play here, and we invite you to bring your fully authentic and crazy selves to this space. Together, we’ll do the best work we’ve ever done.

We’re headquartered in Los Angeles, California, with 5 further international hubs and over 800 people making great work for Apple in 26 markets around the globe. We’d love to meet you!

We are looking for a Cloud Engineer to join our IT team, which provides solutions and technology support to the agency. Reporting to the Head of IT, US. they will have responsibility for leading the systems management, development, maintenance and support to ensure production teams can function and scale effectively.

This is an opportunity to join a friendly team in a fast and challenging environment that provides support and innovation, in the form of new projects and platforms, to aid the creative processes of the business. The incumbent will join a team that provides support and development of the company’s cloud infrastructure in O365 and AWS with a high priority on end user service and security. The successful candidate will have an extensive knowledge of Exchange online, security best practices and multiplatform cloud environments.

This is a fantastic opportunity to join a dynamic global team, work with emerging technologies and make a difference to the business we are building.

The successful candidate will have at least 5 years’ experience working in Microsoft O365, Azure and AWS in a creative industry. They will also be a strong communicator, have the ability to stay calm under pressure, be able to solve problems logically and manage their team’s priorities effectively. They will be passionate about the industry and have boundless energy for problem solving and developing new ways of working.

Responsibilities:

• As part of a team, maintain cloud infrastructure and security standards across technical capabilities. (Infrastructure, Identity and Access Management, Application Security, Encryption, Networking, and Security Monitoring)
• Lead and/or drive the planning, requirements gathering, design, and engineering of cloud solutions and security.
• Discover and design migrations involving Microsoft on-premises to cloud infrastructure
• Serve as an escalation point for other engineers related to Microsoft and AWS services and solutions
• Ensure efficient functioning of data storage and processing functions in accordance with company security policies and best practices in cloud security
• Identify, analyze, and resolve infrastructure vulnerabilities and application deployment issues
• Advise and support Microsoft Endpoint Manager, Intune, and Azure
• Engineer, implement and support Microsoft cloud applications, including Office 365, Exchange Online, Azure AD, and Teams
• Build a robust methodology and processes to deliver improvements to products and services
• Deliver effective communication to technical leadership
• Identify and solve complex challenges ranging from rapidly growing infrastructure to high-velocity product/feature development demands
• Meet with peers to understand and communicate best practices related to cost optimization
• Provide mentorship of other systems administrators
• Stay current with industry trends and standards.

Requirements:

• At least 2 years prior experience in maintaining an On-prem AD and Azure AD environment.
• A working knowledge of Microsoft Office 365 security and Compliance Center.
• An Understanding of Identity and Access Management, including Azure AD, Azure AD Connect, SSO, or other IAM platforms.
• System administration / engineering experience supporting cloud or hybrid IT infrastructure in a corporate environment.

Additional desirable skills for this position may include:

• JAMF
• Understanding of Apple products and infrastructure
• High proficiency in virtualized environment and cloud infrastructure technology
• Atlassian Suite (JIRA, Confluence)
• CloudFront
• VPN
• Terminal Services
• Scripting (PowerShell, YAML, Bash)
• AWS HaaS and IaaS
• AWS Cloud experience with implementations, migrations, and upgrades
• Active Directory including Group Policy
• Experience in securing data and environments: encryption, logging, compliance reporting, etc
• Ability to be both highly organized with attention to detail but also able to think big picture strategy
• Excellent technical documentation skills (e.g., design documents, procedural documentation, assessment reports)