Professional Services Engineer (Cloud)

Job Title

Professional Services Engineer (Cloud)

Department

Professional Services

Reports To

Professional Services Manager

Employment Type

Full-Time

Location

Onsite / Client Sites

FLSA Status

Non-Exempt

Last Updated

June 2026                                                                  

Role Summary

The Professional Services Engineer (Cloud) is a senior delivery role focused on designing and implementing complex cloud solutions for ASG clients. This engineer owns the technical execution of Azure-centric engagements, including IaaS deployments, identity and access management, and hybrid Microsoft 365 integrations. Unlike the PS Engineer I role, this position leads cloud projects end-to-end, serves as the internal expert that other engineers escalate to on cloud architecture, and brings the depth to operate independently on high-complexity work with minimal supervision. A successful PS Engineer II at ASG combines hands-on technical execution with strong client communication and a track record of delivering cloud projects cleanly and on scope.

Responsibilities

Cloud Technical Delivery

• Lead the design and implementation of Azure IaaS solutions including virtual machines, virtual networking, storage, and backup architecture.
• Deploy and manage Azure AD (Entra ID) environments including conditional access policies, identity governance, SSO integrations, and hybrid identity configurations.
• Architect and execute Microsoft 365 and Azure integration projects including hybrid Exchange, Teams deployments, SharePoint, and Entra-connected environments.
• Perform cloud migrations including lift-and-shift, workload modernization, and tenant-to-tenant migrations.
• Serve as technical lead on assigned cloud projects, providing direction to PS Engineer I staff working alongside you on engagements.
• Validate solution design and architecture against ASG standards and client requirements before implementation begins.

Client Engagement

• Communicate directly with client stakeholders throughout cloud project delivery, including technical discovery, design review, and go-live walkthroughs.
• Explain complex cloud concepts in clear, business-appropriate terms to clients at varying levels of technical sophistication.
• Participate in pre-sales scoping calls to validate technical requirements and flag architecture concerns before SOW sign-off.
• Maintain professionalism and client confidence during high-visibility or high-complexity engagements.

Documentation & Handoff

• Produce complete and accurate technical documentation for every engagement, including architecture diagrams, configuration records, and runbooks.
• Ensure all completed cloud work is documented thoroughly enough for the Service Desk and TAM teams to support the environment without escalating back to PS.
• Contribute to ASG cloud standards, reference architectures, and delivery templates.
• Conduct formal handoff sessions with Service Desk and TAM teams at project closeout.

Internal Expertise & Collaboration

• Serve as the go-to escalation resource for PS Engineer I staff on cloud architecture and Azure implementation questions.
• Work closely with the PS Manager and TPM to scope cloud projects accurately and identify risks before work begins.
• Support Sales and vCIO teams during cloud solution design and client roadmap conversations.
• Stay current on Azure platform updates, Microsoft licensing changes, and evolving best practices, and bring relevant changes to the team.
• Contribute to internal knowledge sharing through documentation, team training, and peer review of cloud deliverables.

KPIs

These are the measurable outcomes that define success in this role.

KPI / Metric

Target

Project delivery

Cloud projects completed on time and within scope

Client satisfaction

Post-project CSAT score of 95% or above

Documentation quality

Complete architecture documentation and Service Desk handoff confirmed on every project closeout

Rework rate

Minimal post-delivery rework or escalations back to PS attributable to implementation quality

Billable utilization

Consistent achievement of billable utilization targets

Escalation support

PS Engineer I escalations resolved with clear guidance; no unresolved cloud blockers sitting idle

What Good Looks Like

• Cloud projects run cleanly from kickoff to handoff with no last-minute surprises.
• Clients come out of every engagement, understanding what was built and confident the environment is solid.
• Documentation is thorough enough that the Service Desk can support the environment without calling back to PS.
• Other engineers on the team grow because this person is willing to teach, not just execute.
• Scope issues and architecture risks are flagged before the project starts, not discovered mid-implementation.
• The PS Manager trusts this engineer to run a complex cloud engagement without needing to check in.

Required Experience & Qualifications

• 4+ years of hands-on IT engineering experience with at least 2 years focused on Azure and cloud infrastructure.
• Deep working knowledge of Azure IaaS including VMs, virtual networking (VNets, NSGs, peering), storage accounts, and Azure Backup.
• Strong experience with Azure AD (Entra ID) including hybrid identity, conditional access, MFA, PIM, and SSO integrations.
• Hands-on experience with Microsoft 365 and Azure integration including hybrid Exchange, Teams, SharePoint Online, and Entra-connected workloads.
• Demonstrated ability to lead cloud projects independently from design through client handoff.
• Strong technical documentation skills include architecture diagrams and configuration runbooks.
• Excellent client-facing communication skills with the ability to present technical concepts clearly to non-technical stakeholders.
• Experience working in an MSP or multi-client IT services environment preferred.

Preferred Qualifications

• Microsoft Azure certifications: AZ-104 (Azure Administrator) or AZ-305 (Azure Solutions Architect) preferred.
• Microsoft 365 certifications: MS-102, MD-102, or equivalent.
• Experience with Azure security tooling including Defender for Cloud, Defender for Endpoint, or Microsoft Sentinel.
• Experience with ConnectWise Manage or a comparable PSA platform.
• Familiarity with IT Glue or similar documentation platforms.