Microsoft 365 Engineer - Houston, TX

Zedcor Security Solutions•Houston, TX

1d•Onsite

About The Position

The Cloud / Azure / Microsoft 365 Engineer is responsible for designing, building, securing, monitoring, and supporting private Microsoft Azure, Microsoft 365, Windows, Linux, IoT, and hybrid infrastructure environments. This role supports Enterprise IT, Enterprise Cybersecurity, and the organization’s SaaS product platform. This position requires strong hands-on experience with private Azure architecture, including private networking, Private Link, private endpoints, private DNS, VPN connectivity, routing, segmentation, and non-internet-facing workloads. Experience with public-facing Azure environments alone is not sufficient. The engineer will help build and maintain four or more segmented Azure environments across multiple subscriptions while supporting SOC 2, FedRAMP, StateRAMP, ITIL change management, security governance, monitoring, backup, and audit requirements.

Requirements

Hands-on Microsoft Azure engineering and administration experience.
Required: Azure Lighthouse experience.
Required: Private Azure architecture experience, including Private Link, private endpoints, private DNS, VPN, private routing, and segmented non-internet-facing workloads.
Strong Azure networking experience, including VNets, NSGs, routing, peering, VPNs, segmentation, and hybrid connectivity.
Experience building or supporting multi-subscription Azure environments.
Microsoft 365 administration experience, including Exchange Online and Entra ID.
Working knowledge of Windows and Linux systems.
Experience supporting IoT or connected infrastructure devices.
Experience with Azure Monitor, Log Analytics, Defender for Cloud, Azure Backup, Azure Arc, and Azure Local.
Experience working in highly regulated environments.
Knowledge of SOC 2, FedRAMP, StateRAMP, or similar compliance frameworks.
Experience following ITIL change management processes.
Ability to support Enterprise IT, Enterprise Cybersecurity, and SaaS product infrastructure.
Ability to work full-time on-site in Houston, Texas.

Nice To Haves

Microsoft Azure Administrator, Azure Network Engineer, Azure Security Engineer, or Microsoft 365 certifications.
Experience building private Azure environments from the ground up.
Experience supporting SaaS product infrastructure in Azure.
Experience with hub-and-spoke Azure network architecture.
Experience with Azure Firewall, Application Gateway, WAF, Bastion, Key Vault, internal load balancers, and ExpressRoute.
Experience with Terraform, Bicep, ARM templates, or similar infrastructure-as-code tools.
Experience supporting FedRAMP, StateRAMP, SOC 2, ISO 27001, HIPAA, CJIS, or similar regulated environments.

Responsibilities

Design, build, and support private Azure environments across multiple subscriptions and tenants.
Build and maintain four or more Azure environments for Enterprise IT, Cybersecurity, SaaS product, production, development, testing, disaster recovery, and regulated workloads.
Implement private-by-default Azure architecture using Private Link, private endpoints, private DNS, VPN, segmentation, controlled routing, and restricted access paths.
Design and manage Azure networking, including VNets, subnets, NSGs, route tables, peering, VPN Gateway, private DNS, internal load balancing, and firewall controls.
Ensure Azure workloads are not unintentionally exposed to the public internet.
Implement and maintain Azure Lighthouse for delegated resource management, cross-subscription visibility, and secure multi-tenant administration.
Administer Microsoft 365 services, including Exchange Online, Teams, SharePoint, OneDrive, Entra ID, Defender, and related services.
Support Windows, Linux, IoT, Azure Arc, Azure Local, and hybrid infrastructure.
Configure and maintain Azure Backup, Recovery Services Vaults, backup policies, restore procedures, and disaster recovery support.
Configure monitoring and alerting through Azure Monitor, Log Analytics, Defender for Cloud, Sentinel integrations, and related tools.
Support logging, security telemetry, vulnerability visibility, and incident response needs for the cybersecurity team and SOC.
Partner with Enterprise IT, Cybersecurity, DevOps, application, and SaaS product teams to support secure infrastructure operations.
Follow ITIL change management for cloud, network, Microsoft 365, security, and SaaS platform changes.
Support compliance and audit readiness for SOC 2, FedRAMP, StateRAMP, and other regulated environment requirements.
Maintain architecture diagrams, network diagrams, change records, backup evidence, monitoring evidence, and operational documentation.

Benefits

The Company continues to expand its established platform of MobileyeZ™ towers in Canada and the United States, with emphasis on industry leading service levels, data-supported efficiency outcomes, and continued innovation.
The Company continues to advance its U.S. expansion which now has the capacity to service markets throughout the Midwest with locations throughout Texas, Colorado, Arizona, Nevada and Florida.
At Zedcor, you won’t just maintain systems, you’ll help build and shape the future of security technology.
We provide the tools, mentorship, and the environment to help you thrive and grow in your technical career.
If you’re looking to take your skills to the next level, Zedcor offers a dynamic and rewarding opportunity.
Zedcor Inc. is an Equal Opportunity Employer and maintains the policy of recruiting and retaining the best-qualified personnel who demonstrate the ability to perform competently and work well with others.
It is the policy of Zedcor to provide equal employment opportunity regardless of race (including traits historically or culturally associated with race, such as hair texture and protective hairstyles), religion (including religious dress and religious grooming), color, age (40 and over), genetic information, disability (mental and physical), medical condition (as defined under state law), national origin (including language use restrictions and possession of a driver’s license issued under section 12801.9 of the California Vehicle Code), ancestry, sex (including gender, gender identity, gender expression), sexual orientation, marital status, familial status, parental status, domestic partner status, citizenship status, pregnancy (including perceived pregnancy, childbirth, lactation, or pregnancy-related conditions), military caregiver status, military status, veteran status, or any other status protected by federal, state, or local law.
This policy of nondiscrimination is applied to all aspects of the employment relationship.
The Company complies with the Americans with Disabilities Act (ADA) and applicable state and local laws in ensuring equal opportunity and employment for qualified persons with disabilities.
We also consider qualified applicants with criminal histories, consistent with legal requirements.