Cloud Engineer

About TRS

Since 1917, the Teachers’ Retirement System of the City of New York (TRS) has been securing better futures for NYC educators. With a pension fund valued at approximately $123 billion, TRS serves over 274,000 members, providing them with retirement, disability, and death benefit services.

At TRS, we seek dedicated professionals who are passionate about their work and committed to excellence. We pride ourselves on our member-centric culture, focused on delivering outstanding service and support to our members.

Position Summary

We are seeking a Cloud Engineer to design, implement, and support Microsoft 365 and Azure environments. This role leads Exchange Online and Entra ID operations, drives automation using PowerShell, and ensures secure, compliant collaboration across Teams, SharePoint, and OneDrive.

The Cloud Engineer will also support hybrid identity, Azure infrastructure, and PKI, serving as a subject matter expert and escalation point for cloud services.

Key Responsibilities

Exchange Online Administration

• Manage mail flow, transport rules, spam/phishing protection, and connectors
• Administer mailboxes, archives, permissions, and delegated access
• Troubleshoot mail flow and delivery issues (NDRs, routing, permissions, logs)
• Develop automation and report using PowerShell

Microsoft 365 Management

• Support OneDrive lifecycle, policies, and provisioning
• Assist with Teams and SharePoint governance and access control
• Configure and maintain Security & Compliance features (DLP, retention, eDiscovery)

Entra ID (Azure AD)

• Manage users, groups, and role-based access (RBAC)
• Configure Conditional Access and multi-factor authentication (MFA)
• Support SSO integrations and federation troubleshooting

Infrastructure & Azure

• Support Windows Server, Active Directory, DNS, and DHCP
• Maintain hybrid identity environments and support domain migrations
• Support Azure IaaS, including virtual machines, storage and networking

Security & Automation

• Support M365 security, including Defender for Office 365
• Maintain configurations aligned with CIS and NIST standards
• Develop and maintain PowerShell automation

Collaboration & Projects

• Contribute to M365 and cloud initiatives (migrations, governance, tenant configuration)
• Partner with senior engineers on escalations and complex issues
• Document processes and share knowledge across the team

IT INFRASTRUCTURE ENGINEER - 06796

• A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to the projects and policies required for the particular position; or,
• Education and/or experience which is equivalent to "1" above.