Senior Cloud Systems Administrator

📋 Job Overview

The Senior Cloud Systems Administrator is responsible for the secure, reliable, cost-effective administration and strategic development of Energy Trust’s Microsoft cloud environment, including Microsoft Azure, Microsoft 365, Microsoft Entra ID, and related services. This role partners with IT leadership, infrastructure team members, and the software development team to ensure major cloud initiatives, architectural decisions, and align with goals. The primary focus of this position is to work collaboratively with existing system owners to modernize cloud services, balancing cloud best practices with operational continuity and supportability across hybrid environments.

🏢 About Energy Trust of Oregon

Energy Trust of Oregon is an independent nonprofit organization dedicated to energy efficiency and renewable energy development. We serve Oregon customers of Portland General Electric, Pacific Power, NW Natural, Cascade Natural Gas and Avista, and SW Washington customers of NW Natural. Year over year Energy Trust is recognized as one of the 100 Best Nonprofits to Work for in Oregon.

🎯 The Role

This individual reports to the IT Infrastructure Manager and serves as a senior technical advisor to IT leadership, project teams, and business partners. This position is expected to report to the Portland office quarterly at a minimum for all staff and other in-person meetings. Occasional travel may be required for meetings, training, or technology implementation activities.

✅ Key Responsibilities

• Assess Microsoft Azure, Microsoft 365, Microsoft Entra ID, and related services; identify configuration, security, governance, reliability, and cost-management gaps; and lead prioritized remediation efforts.
• Establish, advise upon, and maintain cloud governance standards, including resource and group naming conventions, tagging, ownership, lifecycle management, documentation, change control, and environment separation.
• Review Microsoft defaults and existing configurations that may increase the risk of data loss, inappropriate access, uncontrolled service adoption, or shadow IT, and implement appropriate controls.
• Design and administer identity and access controls using least-privileged and role-based access principles, including administrative roles, privileged access, Conditional Access, multifactor authentication, service accounts, enterprise applications, and access reviews.
• Develop standards and migration plans for modernizing on-premises Active Directory security groups and Microsoft Entra ID groups, including appropriate use of assigned and dynamic membership.
• Design, implement, and maintain dynamic group rules, group ownership and review processes, directory synchronization, and supported writeback capabilities between Microsoft Entra ID and on-premises Active Directory.
• Design group-based and automated licensing practices that align access and services with job responsibilities and approved business needs.
• Partner with business and technical stakeholders to translate needs into secure, supportable, and cost-effective cloud architecture and implementation plans.
• Design, implement, and support Azure-hosted forms, websites, integrations, workflows, and related solutions that may exchange data with Microsoft Dynamics 365 environments and other business systems.

🎁 Benefits

Competitive starting salary is $118,800 - $153,300. annually commensurate with skills and experience, Full Pay Range: $118,800 - $187,700. *Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skill set, depth of experience, and certifications in the pay equity assessment to determine equitable salary placement. Candidates should expect compensation offers within the starting compensation range. The full pay range is included to show the potential earnings for this position with sustained high performance.