Job description

Position Overview: The Infrastructure DevOps & Cloud Systems Engineer will support and automate our IT infrastructure across the organization, ensuring high availability, scalability, and security across both on-premises and cloud environments. This role combines system administration, cloud operations, and DevOps automation to drive reliability, efficiency, and compliance across our enterprise stack. Essential Duties and Responsibilities Identity & Access Management • Automate Office 365 / EntraID (Azure AD) integration, including SSO, SCIM provisioning, and user lifecycle management linked to HR systems. • Implement role-based access controls (RBAC) and least privilege policies across cloud and SaaS environments. Systems & Cloud Administration • Provision, configure, and maintain cloud infrastructure (Azure/AWS/GCP), including compute (VMs, containers), storage, and networking resources. • Manage server OS (Windows/Linux) patching, hardening, and compliance. • Streamline Office 365 account provisioning and de-provisioning with automated workflows. • Implement backup and disaster recovery (BC/DR) policies for cloud and on-prem workloads. • Perform system monitoring, performance tuning, and capacity planning/sizing of infrastructure components. Automation & Integration • Develop and maintain automation scripts (PowerShell, Python, Terraform, Ansible) for provisioning, configuration, and patching. • Build API integrations with HR, billing portals, SaaS platforms, and monitoring tools for data aggregation, business insights, reporting, and anomaly detection. Networking & Security • Administer and monitor SD-WAN for connectivity and performance optimization. • Configure firewalls, DNS, domain security protocols (DNSSEC, SPF, DKIM, DMARC). • Monitor and remediate anomalies, intrusions, or endpoint risks through RMM tools and cybersecurity consoles. • Support identity protection, endpoint detection and response (EDR), and vulnerability management. Monitoring & Reliability • Implement system health checks, log aggregation, and alerts (RMM/ MDR Platforms, Azure Monitor, or similar). • Perform incident response and root cause analysis to improve uptime and reliability. • Establish infrastructure as code (IaC) pipelines for repeatable deployments. Operational Support & Governance • Maintain system inventory and enforce audit/compliance policies through automated reporting. • Administer endpoint patch management across servers, desktops, and mobile devices. • Support IT operations, including domain registration, SSL/TLS certificate management, DNS management, and cloud governance controls. • Collaborate with developers and IT staff to ensure secure, reliable, and cost-optimized infrastructure. Qualifications • 5+ years of experience in cloud/system administration and DevOps engineering. • Hands-on expertise in Office365, Azure AD and AWS, identity & access management, and SaaS integrations. Certifications preferred. • Solid experience with PowerShell, Python, or Bash scripting. • Proficiency with infrastructure automation (Terraform, Ansible, CI/CD pipelines). • Strong knowledge of networking (DNS, SD-WAN, VPNs, firewalls) and security best practices. • Familiarity with RMM tools (Atera or equivalent), endpoint patch management, and monitoring solutions. • Strong troubleshooting and incident response skills. Preferred / Nice-to-Have Skills • Microsoft or AWS/Azure certifications (e.g., AZ-104, AZ-500, AWS SysOps). • Experience with containerization (Azure Container Instances, AWS ECS, Docker). • Exposure to compliance frameworks (CIS, NIST, PCI, OWASP). Benefits: • Competitive salary • Comprehensive health, dental, and vision insurance. • 401(k) plan with company matching. • Paid time off, including vacation, sick leave, and holidays. • Professional development opportunities to help you grow within the organization. • A supportive, inclusive, and dynamic workplace culture focused on teamwork and employee well-being. #CGH About Champions Group: Champions Group is a nationwide leading provider of essential home services specializing in heating, air conditioning and plumbing services. With the mission to maintain long term relationships with its customers, Champions Group is dedicated to delivering timely, high-quality services across a comprehensive suite of HVAC, plumbing and electrical products. Champions Group Holdings includes brands from across the country, including Adeedo!, ASI, Bee's Plumbing, Bell Brothers, Fetch-A-Tech, HELP, Hobaica, Howard Air, JW Plumbing Heating and Air, M and M Heating, Cooling, Plumbing & Electrical, McAfee Heating and Air, Moore Home Services, ProSkill Services, Scottsdale Air, Seatown Electric, Plumbing, Heating & Air, Service Champions, Service Wizard, Sierra Air, Swan Plumbing, Heating & Air Conditioning and Timo's Air Conditioning & Heating. We are an equal opportunity employer committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic outlined by federal, state, or local laws. Additionally, we will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the California Fair Chance Act and the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance. Champions Group Privacy Policy

Requirements