Cloud Support Engineer

Salary: $30,000 - 55,000 per year Requirements: We typically look for a bachelors degree in Computer Science, Information Technology, or a related discipline. Professional certifications in relevant technologies or infrastructure management are preferred. We usually seek 6-10 years of experience. We want proven experience securing and managing FedRAMP High-compliant environments. We look for strong hands-on expertise in Azure identity, access, logging, incident handling, and configuration management. We expect deep knowledge of Microsoft Entra ID/Azure AD, Active Directory, MFA using security keys or smartcards, Just-in-Time access, RBAC, and AAA concepts. We value experience with Azure security alerts, audit log review, log analytics, alert triage, and incident response practices. We need the ability to build and maintain data and asset inventories, track baseline configurations, and safeguard configuration plans. Strong technical writing and coordination skills are important for producing oversight documentation, runbooks, and reports. We look for experience partnering with security, engineering, compliance, and vendor teams in production environments. Preferred background includes operating Azure in enterprise or regulated environments, familiarity with security control frameworks and continuous monitoring, experience with Microsoft Defender for Cloud or similar tools, and knowledge of least-privilege design patterns and privileged access management. Responsibilities: We operate and optimize cloud infrastructure in line with FedRAMP High controls, including monitoring, incident response, configuration management, backups, and patching to support continuous compliance. We support privacy impact activities and ensure data flows follow our data handling and protection standards within approved Azure boundaries. We manage identity, access, and authorization controls such as Microsoft Entra ID, Active Directory, MFA, role-based access control, and Just-In-Time access to uphold least privilege and access hygiene. We monitor Azure logs and alerts, triage and escalate incidents, participate in incident response testing and post-incident reviews, and enable relevant Azure security services. We coordinate oversight of third-party service providers that interact with our data or services, ensuring policy compliance and supporting independent reviews. We define and enforce acceptable use restrictions for mobile code and communications technologies, while maintaining clear documentation and cross-team coordination. Technologies: AI Active Directory Azure Cloud Support Mobile RBAC Security More: We are BNY, a leading global financial services company at the center of the global financial system, influencing nearly 20% of the worlds investible assets. Our culture supports employee growth and success, and we use advanced AI and breakthrough technologies to deliver transformative solutions for clients worldwide. We are recognized as a destination for innovators, and this Cloud Support Engineer role sits within our Technology team in Pittsburgh, PA or Lake Mary, FL. We offer highly competitive compensation, benefits, and wellbeing programs, along with flexible global resources, generous paid leave, and paid volunteer time. We are also an Equal Employment Opportunity/Affirmative Action employer. last updated 35 week of 2026