Job Title Professional Services Engineer (Cloud) Department Professional Services Reports To Professional Services Manager Employment Type Full-Time Location Onsite / Client Sites FLSA Status Non-Exempt Last Updated June 2026                                                                       Role Summary   The Professional Services Engineer (Cloud) is a senior delivery role focused on designing and implementing complex cloud solutions for ASG clients. This engineer owns the technical execution of Azure-centric engagements, including IaaS deployments, identity and access management, and hybrid Microsoft 365 integrations. Unlike the PS Engineer I role, this position leads cloud projects end-to-end, serves as the internal expert that other engineers escalate to on cloud architecture, and brings the depth to operate independently on high-complexity work with minimal supervision. A successful PS Engineer II at ASG combines hands-on technical execution with strong client communication and a track record of delivering cloud projects cleanly and on scope.     Responsibilities   Cloud Technical Delivery * Lead the design and implementation of Azure IaaS solutions including virtual machines, virtual networking, storage, and backup architecture. * Deploy and manage Azure AD (Entra ID) environments including conditional access policies, identity governance, SSO integrations, and hybrid identity configurations. * Architect and execute Microsoft 365 and Azure integration projects including hybrid Exchange, Teams deployments, SharePoint, and Entra-connected environments. * Perform cloud migrations including lift-and-shift, workload modernization, and tenant-to-tenant migrations. * Serve as technical lead on assigned cloud projects, providing direction to PS Engineer I staff working alongside you on engagements. * Validate solution design and architecture against ASG standards and client requirements before implementation begins.   Client Engagement * Communicate directly with client stakeholders throughout cloud project delivery, including technical discovery, design review, and go-live walkthroughs. * Explain complex cloud concepts in clear, business-appropriate terms to clients at varying levels of technical sophistication. * Participate in pre-sales scoping calls to validate technical requirements and flag architecture concerns before SOW sign-off. * Maintain professionalism and client confidence during high-visibility or high-complexity engagements.   Documentation & Handoff * Produce complete and accurate technical documentation for every engagement, including architecture diagrams, configuration records, and runbooks. * Ensure all completed cloud work is documented thoroughly enough for the Service Desk and TAM teams to support the environment without escalating back to PS. * Contribute to ASG cloud standards, reference architectures, and delivery templates. * Conduct formal handoff sessions with Service Desk and TAM teams at project closeout.   Internal Expertise & Collaboration * Serve as the go-to escalation resource for PS Engineer I staff on cloud architecture and Azure implementation questions. * Work closely with the PS Manager and TPM to scope cloud projects accurately and identify risks before work begins. * Support Sales and vCIO teams during cloud solution design and client roadmap conversations. * Stay current on Azure platform updates, Microsoft licensing changes, and evolving best practices, and bring relevant changes to the team. * Contribute to internal knowledge sharing through documentation, team training, and peer review of cloud deliverables.     KPIs   These are the measurable outcomes that define success in this role.   KPI / Metric Target Project delivery Cloud projects completed on time and within scope Client satisfaction Post-project CSAT score of 95% or above Documentation quality Complete architecture documentation and Service Desk handoff confirmed on every project closeout Rework rate Minimal post-delivery rework or escalations back to PS attributable to implementation quality Billable utilization Consistent achievement of billable utilization targets Escalation support PS Engineer I escalations resolved with clear guidance; no unresolved cloud blockers sitting idle     What Good Looks Like   * Cloud projects run cleanly from kickoff to handoff with no last-minute surprises. * Clients come out of every engagement, understanding what was built and confident the environment is solid. * Documentation is thorough enough that the Service Desk can support the environment without calling back to PS. * Other engineers on the team grow because this person is willing to teach, not just execute. * Scope issues and architecture risks are flagged before the project starts, not discovered mid-implementation. * The PS Manager trusts this engineer to run a complex cloud engagement without needing to check in.     Required Experience & Qualifications   * 4+ years of hands-on IT engineering experience with at least 2 years focused on Azure and cloud infrastructure. * Deep working knowledge of Azure IaaS including VMs, virtual networking (VNets, NSGs, peering), storage accounts, and Azure Backup. * Strong experience with Azure AD (Entra ID) including hybrid identity, conditional access, MFA, PIM, and SSO integrations. * Hands-on experience with Microsoft 365 and Azure integration including hybrid Exchange, Teams, SharePoint Online, and Entra-connected workloads. * Demonstrated ability to lead cloud projects independently from design through client handoff. * Strong technical documentation skills include architecture diagrams and configuration runbooks. * Excellent client-facing communication skills with the ability to present technical concepts clearly to non-technical stakeholders. * Experience working in an MSP or multi-client IT services environment preferred.     Preferred Qualifications   * Microsoft Azure certifications: AZ-104 (Azure Administrator) or AZ-305 (Azure Solutions Architect) preferred. * Microsoft 365 certifications: MS-102, MD-102, or equivalent. * Experience with Azure security tooling including Defender for Cloud, Defender for Endpoint, or Microsoft Sentinel. * Experience with ConnectWise Manage or a comparable PSA platform. * Familiarity with IT Glue or similar documentation platforms.