Application Programming Interface (API), Asset Management, Authentication, Automation, Automation Engineering, Cloud Architecture, Cloud Computing, Communication Skills, Computer Science, Continuous Improvement, Cook Dishes, Cost Control, Documentation, Endpoint Security, Error Handling, Incident Response, Information Technology & Information Systems, Mentoring, Microsoft Certifications, Microsoft Product Family, Microsoft Windows Azure, Microsoft Windows Operating System, Network Integration, Network Security, Onboarding, Organizational Skills, PCI, Philosophy, REST (Representational State Transfer), Reliability Engineering, Restaurant, Retail Operations, Root Cause Analysis, Scripting (Scripting Languages), Security Infrastructure, Single Sign-On (SSO), System Integration (SI), Windows PowerShell
The Cloud & Automation Engineer will help own, operate, and evolve our Microsoft Azure and Microsoft 365 environments. This is a hands-on, senior-level engineering role focused on execution, automation, and operational excellence. You will design and support cloud and identity platforms that serve both corporate users and restaurant operations nationwide. This role partners closely with Infrastructure, Network, Endpoint, Security, and Restaurant Technology teams and plays a key role in improving reliability, security, and efficiency through automation.
Responsibilities:
The essential functions in this job description are not all-inclusive of this position’s duties and responsibilities. Reliable and dependable attendance is required.
- Manage Azure subscriptions, resource groups, networking, identity integrations, and cost controls
- Design secure, resilient, and scalable cloud architectures aligned with business needs
- Implement Azure governance, policies, and cost-optimization strategies
- Manage Entra ID (Azure AD), Conditional Access, RBAC, and identity protection
- Maintain cloud security posture using Defender, Monitor, logging, and alerts
- Develop production-grade automation using PowerShell, Azure Automation, Logic Apps, Functions, and APIs
- Integrate IT systems such as monitoring, asset management, ticketing, endpoint, network, and security platforms
- Automate workflows including user lifecycle events, device onboarding, reporting, monitoring responses, and audit evidence collection
- Create reusable scripts and runbooks with proper logging, error handling, and documentation
- Partner with Security and Compliance teams on initiatives such as PCI and audit support
- Participate in incident response, root cause analysis, and continuous improvement efforts
- Act as a senior escalation point for cloud, identity, and automation topics
- Contribute to standards, architecture decisions, and technical roadmaps
- Mentor and support other engineers through collaboration and documentation
Qualifications:
- Bachelor's degree in computer science, information technology, or a related field
- Microsoft certifications (AZ-104, AZ-305, or similar) preferred
- 5+ years of hands-on experience with Microsoft Azure administration and cloud architecture
- Advanced experience administering Microsoft 365 and Entra ID (Azure AD)
- Strong PowerShell scripting skills with real-world automation experience
- Experience integrating systems using REST APIs and service principals
- Solid understanding of identity, authentication, SSO, Conditional Access, and least-privilege access
- Experience with Azure services such as Monitor, Defender for Cloud, Azure Policy, Key Vault, and Automation Accounts
- Experience supporting Windows-based and hybrid environments
- Strong communication, documentation, and organizational skills
- Experience supporting multi-site or operational environments (retail, restaurant, hospitality)
Who We Are:
First Watch is the leading Daytime Dining concept serving made-to-order breakfast, brunch and lunch using the freshest ingredients available. Guided by its “Follow the Sun” culinary philosophy, First Watch’s chef-driven menu rotates multiple times per year to feature the highest-quality flavors at their peak, offering elevated executions of classic favorites, fresh juices like the Kale Tonic, and fan favorites such as the Lemon Ricotta Pancakes, Quinoa Power Bowl and signature Million Dollar Bacon. For every kid’s meal served, First Watch proudly donates a portion to organizations and causes making a positive impact to our communities – raising approximately $2.0 million to date. A recipient of many “Best Breakfast” and “Best Brunch” awards, First Watch was voted #1 Best Breakfast by Newsweek’s Readers’ Choice Awards 2025, and also named 2025 and 2024’s #1 Most Loved Workplace in America by the Best Practice Institute – an accolade most recently featured in The Wall Street Journal – after appearing on the list in 2022 and 2023, as well. With a commitment to quality, hospitality and community, First Watch is redefining Daytime Dining across more than 630 First Watch restaurants in 32 states. For more information, visit www.firstwatch.com.
First Watch is an equal opportunity employer. In compliance with the Americans with Disabilities Act, First Watch will provide reasonable accommodations to qualified individuals with disabilities and encourages both prospective and current employees to discuss potential accommodations with the employer.
F
First Watch Restaurants, Inc.