Cloud Engineer

DMI•Remote,

41d•Remote

About The Position

DMI is seeking a Senior Microsoft Cloud Engineer to serve as the senior technical authority for a federal agency client's Microsoft cloud environment spanning Microsoft 365, Azure, and Microsoft Security platforms. In this role, you will design, operate, and continuously improve a resilient and compliant cloud environment in alignment with Zero Trust principles, FedRAMP Moderate requirements, and federal cybersecurity standards.

Requirements

Bachelor's degree in Information Technology, Computer Science, or a related field; extensive Microsoft certifications and demonstrated enterprise experience may be considered in lieu of a degree.
All of the following current Microsoft certifications, maintained continuously for a minimum of 5 years: Microsoft 365 Certified Administrator Expert; Microsoft Certified Cybersecurity Architect Expert; Microsoft Certified Azure Solutions Architect Expert; Microsoft 365 Certified Endpoint Administrator Associate; Microsoft Certified Identity and Access Administrator Associate; Microsoft Certified Windows Server Hybrid Administrator Associate; Microsoft 365 Certified Teams Administrator Associate; Microsoft Certified Information Security Administrator Associate
Proven experience designing and operating hybrid Active Directory, M365, and Entra environments with Microsoft tiered security standards
Hands-on experience managing Intune for 700+ endpoints, including Autopilot provisioning and on-demand software delivery
Advanced proficiency in Entra ID, Conditional Access, PAM, and MFA, including Smart Card and FIDO-based key authentication
Experience managing Microsoft Sentinel, including data source configuration, log ingestion health monitoring, and alerting
Experience implementing Power BI reporting and Azure budget management with proactive alerting
Must provide 2–4 short examples of personally written technical documents (documentation, design documents, diagrams, PowerShell scripts, SOPs, or training materials) not to exceed 5 total pages
8+ years of enterprise Microsoft cloud engineering experience
Experience supporting FedRAMP Moderate authorization processes in a federal environment
Familiarity with IRS 1075 or similar federal data protection requirements
Must possess or be eligible to obtain and complete a government security screening and/or a Secret security clearance.
Must be a U.S. Citizen

Responsibilities

Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services for high availability, scalability, and mission performance
Implement and maintain cloud security architecture aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust), and FedRAMP Moderate requirements, including continuous monitoring and risk mitigation
Administer Entra ID, Conditional Access, and privileged access management; implement MFA providers and Smart Card and FIDO-based authentication across Windows and macOS systems
Manage Windows, macOS, and iOS devices in Intune, including compliance, configuration policies, and Autopilot OS imaging for environments of 700+ endpoints
Configure and manage Microsoft Defender, Sentinel, and Purview for threat protection, data governance, and incident response readiness; manage Sentinel data sources, log ingestion health, and alerting
Manage Exchange Online, Microsoft Teams, SharePoint Online, and related M365 collaboration services
Implement automated Power BI dashboards for systems health, compliance, spend, and utilization reporting; configure Azure budget alerts with a 90-day lead time for overages
Develop incident response and disaster recovery playbooks integrated into existing IR and COOP documentation
Perform duties with minimal supervision, exercising independent technical judgment and authority