About The Bridgespan Group

The Bridgespan Group (“Bridgespan”) is a global nonprofit that aims to build a better world by strengthening the ability of mission-driven organizations, philanthropists, impact investors, and corporations to achieve breakthrough results in addressing society’s most important challenges and opportunities.

Founded in 2000, Bridgespan has offices in Boston, Johannesburg, Mumbai, New York, San Francisco, and Singapore. Across these six locations, we have a diverse team of staff with varied backgrounds and experience across multiple sectors. We work with social change organizations such as TaRL Africa, Tiko, and CAMFED; philanthropies and foundations such as OSF, Women First Fund, and The Ford Foundation; impact investors such as TPG’s Rise Fund, Black Ambition, and AfricInvest; and bold funding collaboratives such as TED’s Audacious Project and Co-Impact.

Bridgespan aims for a world where all people have the opportunity to flourish. Given how society works today—as manifest in systems and mindsets that have developed over time—that opportunity is not accessible to all. We are committed to equity, specifically to doing work to help ensure that race, gender, and other dimensions of identity are not determinants of life outcomes and to building an organization where the diverse set of individuals we need can thrive in pursuit of their full professional potential, and to proactively addressing the systems that help or hinder these goals. It is a commitment to both external equity work and internal inclusivity that gets Bridgespan closer to achieving its mission.

Position

The Cloud Systems Engineer role is a cloud-first, execution-focused position responsible for administering, configuring, and operating modern IT infrastructure with a primary emphasis on Microsoft Azure and identity services within Microsoft Entra ID.

Part of the IT Infrastructure team, this position ensures cloud and identity platforms are reliable, secure, and aligned with established architectural direction.

The role also contributes to cloud engineering and architecture initiatives, infrastructure automation, cloud governance, scalability planning, and modernization. The ideal candidate combines strong operational expertise with hands-on cloud engineering and automation experience.

Objectives of the Role

• Ensure reliability, performance, and security of identity systems using Microsoft Entra ID and integrated SaaS platforms.

• Partner with IT leadership to implement and operationalize cloud and identity solutions.

• Develop and maintain Infrastructure as Code (IaC) solutions using Terraform, Bicep, or ARM templates to standardize and automate repeatable, scalable cloud infrastructure deployments.

• Implements and maintains Azure governance including Azure Policy, RBAC standards, tagging, resource organization, and cost optimization.

• Contribute significantly to cloud modernization and automation initiatives that improve scalability, resiliency, and operational efficiency.

• Enhance monitoring, alerting, and observability to proactively identify and resolve infrastructure issues, minimizing downtime and user impact.

• Collaborate with engineering and DevOps teams to support CI/CD pipelines and automated deployment workflows using Azure DevOps and/or GitHub Action.

• Support containerized workloads and cloud-native platforms including Azure Kubernetes Service (AKS) and Docker-based deployments.

• Support and mentor junior team members while contributing to a culture of continuous improvement.

Responsibilities

• Configure and maintain Microsoft Entra ID, including users, groups, roles, Conditional Access policies, MFA, and identity lifecycle processes.

• Administer and support Azure infrastructure including virtual machines, storage accounts, networking, and platform services.

• Manage Windows Server environments hosted in Azure virtual machines, including Active Directory domain controllers, DNS, DHCP, and file servers.

• Implement and support identity integrations for enterprise and SaaS applications using SAML, OAuth, and OpenID Connect.

• Support file storage solutions including Azure Files, SharePoint Online, and VM-based file services, ensuring appropriate access controls and data protection.

• Monitor system performance and availability using Azure Monitor, Log Analytics, and related tools; respond to and resolve incidents within defined service levels.

• Execute system updates, patching, vulnerability remediation, and configuration changes across cloud and identity platforms.

• Support engineering and development teams by provisioning resources, managing access, and troubleshooting infrastructure and identity issues.

• Manage and resolve infrastructure and identity-related tickets through the service management system, ensuring accurate documentation and timely resolution.

• Track and contribute to project work, including executing assigned tasks, updating progress, and identifying risks or blockers.

• Collaborate with security teams on compliance, risk management, and implementation of security best practices aligned with Zero Trust principles.

• Maintain operational documentation, runbooks, and procedures to ensure consistency and knowledge sharing.

• Participate in change management processes including planning, testing, and documenting changes in alignment with ITIL practices.

• Provide escalation support for complex technical issues and participate in on-call support as needed.

Qualifications and Experience

• Bachelor’s degree in Computer Science, Information Technology, or a related field; equivalent experience considered.

• 5–8+ years of experience in systems administration, with strong experience in Microsoft Azure cloud environments.

• Azure certifications: AZ-104 (required), AZ-305 (preferred) and/or identity certifications SC-300 (preferred).

• Hands-on experience managing Windows Server workloads including Entra ID, DNS, DHCP, and file services in cloud-hosted environments.

• Strong experience administering Microsoft Entra ID, including Conditional Access, MFA, and identity governance concepts.

• Experience supporting Microsoft 365 services including Exchange Online, SharePoint Online, and Teams.

• Proficiency with PowerShell and/or Azure CLI for automation and administration.

• Strong troubleshooting skills across cloud infrastructure, Windows systems, and identity platforms.

• Understanding of authentication and identity protocols including SAML, OAuth, and OpenID Connect.

• Experience working within ticketing systems and tracking operational and project-based work.

• Ability to work effectively in cross-functional teams and support both operational and project-based initiatives.

• Ability to work independently and remain flexible in a changing environment.

• Ability to prioritize and manage multiple projects with strong attention to detail
  

PLEASE NOTE: YOU MUST BE ELIGIBLE TO WORK IN THE US WITHOUT SPONSORSHIP, THE BRIDGESPAN GROUP IS UNABLE TO PROVIDE VISA SPONSORSHIP

At Bridgespan, we are committed to diversity, equity, and inclusion because we are passionate about helping our clients achieve breakthrough results. An organization that reflects the diversity of our clients and their beneficiaries will produce deeper relationships, engagement, and insights. Bridgespan is committed to providing equal opportunities. We serve diverse organizations and are committed to non-discrimination. Bridgespan will not discriminate against any employee with respect to any term or condition of employment, including but not limited to less favorable treatment, exclusion from employment or employment opportunities (including hiring, assignment, performance assessment and promotion) on the basis of race, color, religion, national origin, citizenship, ancestry, gender (including pregnancy), gender identity, age, disability, marital status, sexual orientation, expression, veteran’s status or other protected characteristics or status. We actively partner with organizations representing minority concerns and interests to build high-performing teams that mirror the communities we serve.

All company sponsored programs including training, job, social and recreational activities are required to be nondiscriminatory and all human resource practices are monitored to ensure equal opportunity.