Axos
Sr Systems Engineer - Azure
HQ - San Diego, CA, USA · Senior · Contract
Sponsorship not specifiedDetected 24 days ago
PythonPowerShellAzureCloud PlatformsCybersecurityMicrosoft DefenderForecastingSystems EngineeringVariance Analysis
About the role
- Axos Bank Target Range: $120,000.00 /Yr. - $150,000.00 /Yr.
- Actual starting pay will vary based on factors including, but not limited to, geographic location, experience, skills, specialty, and education.
- About This Job Axos Bank is seeking an experienced and technically deep Sr.
Responsibilities
- Design, deploy, and maintain Azure subscription architecture including management groups, resource groups, and naming and tagging governance across all subscriptions
- Manage IaaS and PaaS resource lifecycle - provisioning, scaling, monitoring, and decommission - with full change management documentation in ServiceNow
- Maintain the documented baseline state of the Azure environment; identify and remediate configuration drift from established standards on a defined cycle
- Manage Privileged Identity Management (PIM) including role activation policy, access reviews for privileged accounts, and just-in-time access configuration
- Own Defender for Cloud operational posture - monitor, prioritize, and drive hands-on remediation of high and critical recommendations, not dashboard observation alone
- Design and maintain RBAC assignments across Azure resources in alignment with least-privilege principles; document all role assignments with business justification
- Own and administer Azure Virtual Network topology including hub-spoke design, VNets, subnets, NSGs, route tables, and VNet peering aligned to bank security requirements
- Manage Azure Policy assignments for baseline compliance enforcement; author and test policy definitions as bank requirements evolve
- Maintain working knowledge of FFIEC IT examination guidance and align Azure governance practices accordingly
- Own Azure Cost Management analysis, reporting, budget alert configuration, and anomaly detection across all Azure subscriptions
Requirements
- Bachelor's degree in Computer Science, Information Technology, Information Systems, or a directly related field
- 7+ years of hands-on, production-environment experience administering and engineering Microsoft Azure infrastructure and Microsoft identity technologies
- 5+ years administering Active Directory Domain Services in a multi-domain enterprise environment - Group Policy, OU structure, trust relationships, and schema-level understanding
- Demonstrated experience with Defender for Cloud and Azure Policy including hands-on security recommendation remediation - not limited to monitoring
- Demonstrated experience with Azure Cost Management including budget configuration, cost anomaly detection, and spend forecasting across multiple subscriptions
- Proficiency in PowerShell scripting for Azure and Active Directory automation - scripts that are maintainable and executable by other engineers
- Required Certification
Nice to have
- Axos Bank is seeking an experienced and technically deep Sr.
- Microsoft Azure Engineer to join the Microsoft Operations team in San Diego.
- This is a senior individual contributor role with full ownership of the Azure cloud platform and a primary partnership role alongside our Sr.
- Engineer and Technology Architect covering the broader Microsoft environment.
- This is not a ticket-closing role.
- You will serve as technical peer and backup to our Sr.
Skills
- $120,000.00 /Yr. - $150,000.00 /Yr.
Compensation
- Conduct and document semi-annual Azure RBAC assignment reviews and deliver findings to the Audit and Compliance Engineer
- These discretionary target bonuses may be awarded semi-annually based upon your achievement of performance goals and targets.
Benefits
- Medical, Dental, Vision, and Life Insurance
- Paid Sick Leave, 3 weeks' Vacation, and Holidays (about 11 a year)
- HSA or FSA account and other voluntary benefits
- 401(k) Retirement Saving Plan with Employer Match Program and 529 Savings Plan
- Administer and maintain Entra ID (Azure Active Directory) tenancy health - user lifecycle, group management, application registrations, and service principal governance
- Monitor and maintain Azure AD Connect synchronization health; resolve sync conflicts; coordinate with the Sr.
- Configure and maintain Azure Monitor alerts, Log Analytics workspaces, and operational dashboards for infrastructure health and performance visibility
Company info
- Axos is an Equal Opportunity employer.
- We are committed to providing equal employment opportunities to all employees and applicants without regard to race, religious creed, color, sex (including pregnancy, breast feeding and related medical conditions), gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship status, military and veteran status, marital status, age, protected medical condition, genetic information, physical disability, mental disability, or any other protected status in accordance with all applicable federal, state, and local laws.
Equal opportunity
- Job Functions and Work Environment:
- While performing the duties of this position, the employee is required to sit for extended periods of time.
- Manual dexterity and coordination are required while operating standard office equipment such as computer keyboard and mouse, calculator, telephone, copiers, etc.
- The work environment characteristics described here are representative of those an employee may encounter while performing the essential functions of this position.
Visa & Work Authorization
- related medical conditions), gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship status, military and veteran status, marital status, age, protected medical condition, g
This listing is sourced directly from Axos's careers page and normalized into a canonical job model.