Logo
Galaxy USA

Senior Microsoft Cloud Engineer

Galaxy USA, New York, New York, us, 10261

Save Job

Overview

Galaxy is a global leader in digital assets and data center infrastructure, delivering solutions that accelerate progress in finance and artificial intelligence. We believe that blockchain and digital asset innovation will transform how value moves through the world and were building the products and services to make that future a reality. Our institutional digital assets platform spans trading, investment banking, asset management, staking, self-custody, and tokenization technology. We also operate data center infrastructure to power AI and high-performance computing, addressing the growing demand for scalable energy and compute in the U.S. Galaxy is headquartered in New York City, with offices across North America, Europe, the Middle East, and Asia. To learn more about our businesses and products, visit www.galaxy.com. What We Value We are a diverse team of free thinkers and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission-first approach. Our culture shapes our way of working and gets us where we want to be. Be Selective To Be Effective. Be Highly Aligned, Loosely Coupled. Disagree Transparently. Build Dream Teams. What Youll Do As a key member of our Infrastructure Engineering team, youll lead the design, automation, and lifecycle management of hybrid cloud environments with a heavy focus on Infrastructure as Code and cloud-native operations. Youll drive reliability, security, and scalability across enterprise platforms while working collaboratively with DevOps, Security, and App Engineering teams. Architect, deploy, and maintain hybrid Active Directory environments, including on-prem Domain Controllers, Azure AD, and Entra integrations. Manage and automate GPO/OU structures, identity governance, Conditional Access, and Privileged Identity Management (PIM) using policy-as-code principles. Design, secure, and support core Windows Server services: Certificate Services, Print, NPS, and File Serversusing repeatable and declarative configurations. Administer and optimize Microsoft 365 environments including Exchange Online, SharePoint, OneDrive, Intune, Defender for 365, and mail hygiene tools. Engineer resilient email security infrastructure (SPF, DKIM, DMARC), and apply advanced threat protection strategies. Drive Azure infrastructure design including Landing Zones, policy enforcement, governance, tagging standards, and cloud migrations. Automate infrastructure and operations using PowerShell, Python, Bicep, ARM, and Terraform; integrate with CI/CD pipelines for continuous delivery of infrastructure. Evaluate and integrate AI/ML-powered IT automation and Copilot experiences across IT services and user support. Develop and enforce policies for IAM, DLP, sensitivity labels, and ensure compliance with standards such as GDPR, HIPAA, and other regulatory frameworks. Partner with DevOps and SecOps to deliver scalable, secure, and well-governed infrastructure using modern tooling. Actively participate in Incident, Problem, and Change Management, ensuring rapid response and root cause resolution. Create high-quality documentation (runbooks, SOPs, KBs) and mentor junior engineers through technical leadership and code reviews. What Were Looking For Required Skills & Experience Bachelors degree in IT, CS, or related fieldor equivalent practical experience. 5+ years in enterprise infrastructure roles supporting Microsoft cloud ecosystems and hybrid environments. Deep expertise with Windows Server, Azure AD, Active Directory, and associated services (DNS, DHCP, NPS, etc.). Strong proficiency with Microsoft 365 administration across Exchange, Defender, Intune, and SharePoint. Hands-on experience with IaC tools like Terraform, Bicep, or ARM templates and source-controlled config management (GitOps). Strong scripting and automation skills in PowerShell, with working knowledge of Python, Azure CLI, or REST APIs. Proficiency with Azure Resource Manager, Azure Policy, Role-Based Access Control (RBAC), and Subscription governance. Solid grasp of email security technologies, mail flow routing, and phishing prevention (SPF/DKIM/DMARC). Familiarity with ITSM/ITIL frameworks for structured ops (Incident/Problem/Change). Exceptional documentation, mentorship, and collaboration skills across cross-functional teams. Preferred Certifications Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or Microsoft 365 Enterprise Admin Expert Bonus: Microsoft SC-series, Terraform Associate, or any Cloud Security/Compliance certifications Exposure to containerization, Kubernetes, and modern endpoint management (e.g., Autopilot, Conditional Access). Experience integrating IT with AI/ML tools, chatbots, or modern Copilot experiences. Background in security operations, compliance auditing, or zero-trust architectures. Contributions to open-source IaC projects or automation frameworks. What We Offer Competitive base salary and discretionary bonus Company paid sick leave Company-paid health and protective benefits for employees, partners, and other dependents 3% 401(k) company contribution Free virtual coaching and counseling sessions through Headspace Opportunities to learn about the Crypto industry Free daily snacks in-office Smart, entrepreneurial, and fun colleagues Employee Resource Groups Apply now and join us on our mission to engineer a new economic paradigm. The base salary ranges included below will be commensurate with candidate experience, expertise and local market. Final offer amounts are determined by multiple factors, including candidate experience and expertise. At Galaxy, we maintain a total compensation philosophy which consists of a competitive base salary, annual bonus, and equity incentives. Base Salary Range $145,000 - $160,000 USD EEO Statement

Galaxy respects diversity and seeks to provide equal employment opportunities to all employees and job applicants for employment without regard to actual or perceived age, race, color, creed, religion, sex or gender, gender identity or gender expression, sexual orientation, marital or partnership or caregiver status, ancestry, national origin, citizenship status, disability, military or veteran status, or other characteristic protected by applicable laws. If you require a reasonable accommodation to participate in the application process or interview, please contact careers@galaxy.com. Apply for this job #J-18808-Ljbffr