Senior Cloud

Polanov Tech is Hiring

Senior Cloud & Infrastructure Recovery Engineer
– Remote (LATAM)

Hourly Rate:
$20–$23 USD

Project Duration:
Approximately 4 weeks

Availability:
Must be ready to start immediately and support critical-path tasks during nights/weekends if required

Overview

We are seeking a highly skilled
Senior Cloud & Infrastructure Recovery Engineer
to lead the reconstruction of a compromised on-premises identity and server environment following a ransomware incident. This is a
short-term, project-based role (approximately 4 weeks)
requiring deep expertise in Microsoft cloud and hybrid infrastructures, incident recovery, and secure environment rebuilds. Immediate availability is required, with flexibility to work nights and weekends for critical deliverables.

Key Responsibilities

1. Identity Security & Cloud Authentication Recovery

• Disable compromised directory sync and stabilize Microsoft Entra ID.
• Enforce password resets, MFA enrollment, session revocation, and admin privilege cleanup.
• Restore secure access across Microsoft 365 services.

2. Azure Landing Zone Deployment

• Build secure Azure resource groups, VNets, NSGs, subnets, and monitoring tools.
• Configure Azure Bastion, Defender for Cloud, and Log Analytics.
• Implement post-incident network security best practices.

3. Azure AD Domain Services (AAD-DS)

• Deploy and configure AAD-DS, DNS delegation, and authentication flows.
• Resolve identity dependencies for restored workloads.

4. Virtual Machine Deployment & Hardening

• Provision and harden Windows Server VMs (file servers, RDS, accounting servers, CAD/manufacturing servers).
• Configure patching, security, monitoring agents, IPs, and firewall rules.

5. Restore Readiness & MSP Coordination

• Prepare infrastructure for data restore via MSP (EVault).
• Validate connectivity, credentials, and restore prerequisites.

6. Post-Restore Configuration & Application Rebuild

• Rebuild OUs, GPOs, security groups, and service accounts.
• Restore file shares and NTFS permissions.
• Rebuild key systems (financial apps, CAD/manufacturing apps, RDS).
• Validate multi-user workflows end to end.

7. Security Hardening

• Apply Microsoft/CIS baselines, disable insecure protocols, enforce TLS, and harden service accounts.
• Strengthen NSG and identity perimeter security.

8. Backup & Disaster Recovery Setup

• Configure Azure Backup, Recovery Services Vault, and database backups.
• Execute test restores to confirm DR readiness.

9. Documentation & Handoff

• Produce as-built architecture, runbooks, DR procedures, and permission structures.
• Deliver full knowledge transfer to the client team.

Required Qualifications

Technical Expertise

• 7+ years in Microsoft cloud/hybrid infrastructure engineering.
• Advanced proficiency with:
• Microsoft Entra ID (Azure AD)
• Azure AD Domain Services
• Azure IaaS: VNets, NSGs, Bastion, Defender for Cloud
• Windows Server 2016–2022
• Group Policy, OU design, identity governance
• File server rebuilds and NTFS permissioning
• RDS deployments and FSLogix
• Preferred experience with accounting platforms (Sage 300 CRE, SQL/Actian engines).
• Proven experience recovering systems after ransomware or major compromise.

Security & Incident Response

• Strong background in identity lockdown, credential hygiene, and post-breach remediation.
• Knowledge of CIS benchmarks and Microsoft security baselines.

Backup & Recovery

• Experience with EVault, SQL backup/restore, Actian/PSQL handling, and VM/file-level restore validation.

General Skills

• Exceptional documentation skills.
• Ability to work under strict recovery deadlines.
• Strong communication skills for working with MSPs and stakeholders.
• Experience rebuilding environments with minimal surviving infrastructure.

Nice-to-Haves

• Microsoft certifications (AZ-104, AZ-305, SC-300, SC-100, MS-102).
• Experience with ransomware recovery/incident response teams.
• Familiarity with CAD/engineering application licensing servers.