Cloud Operations Engineer

Capgemini • Chicago, NY

6d • Remote

About The Position

Capgemini CIS is seeking a highly motivated Microsoft 365 Operations Engineer with deep experience in and administration of Microsoft Intune, Azure Virtual Desktop (AVD), and other M365 workloads within regulated and high-security environments. This is a remote-based role with a preference for candidates located in a Hub Office City.

Requirements

• US Citizenship or Green Card Holder
• BS/BA degree and 8 years of IT experience, or 10 years total without a degree
• Demonstrated experience in M365 GCC High, Azure Government Cloud, and DoD-compliant environments
• Experience in hybrid cloud/on prem environments
• Experience managing MS, Unix, Linux environments
• Expert knowledge Intune, and Azure AD Conditional Access
• Working knowledge of AVD architecture, deployment, and management in regulated environments
• Proficiency in PowerShell scripting for automation, policy enforcement, and monitoring
• Experience designing solutions aligned with Zero Trust Architecture, NIST, and FedRAMP High standards
• Strong communication skills for technical and executive-level briefings and documentation

Nice To Haves

• Microsoft certifications such as SC-200, MS-500, AZ-104, MD-102, or AZ-140
• Experience integrating third-party SIEM, EDR, or MDM platforms with Microsoft solutions
• Hands-on experience with Log Analytics, KQL, Playbook automation (Logic Apps), and Graph API
• Familiarity with Microsoft Purview, DLP, and Insider Risk Management
• One or more of the following DoD 8570 Level II Certifications: Security+ CE, GSEC, SSCP, CCNA Security, or equivalent

Responsibilities

• Provide strategic input to identity and security architecture in Microsoft 365, Azure AD, and related services.
• Collaborate with security, operations, and compliance teams to implement secure-by-design configurations.
• Develop technical documentation, runbooks, and executive-level reporting for compliance audits and operational transparency.
• Troubleshoot Tier 3 issues related to Intune policy conflicts, AVD connectivity, and security misconfigurations.
• Serve as the SME for endpoint security, AVD and Zero Trust implementations within Microsoft ecosystems.
• Plan, deploy, and manage scalable AVD environments in Azure Government Cloud, ensuring optimal user experience and policy enforcement.
• Implement FSLogix profile management, MSIX app attach, and integration with Defender and Sentinel.
• Monitor AVD performance and usage analytics for capacity planning and optimization.
• Work within Microsoft 365 GCC High environments, ensuring full compliance with DoD, FedRAMP High, and NIST 800-53 frameworks.
• Secure M365 workloads with a strong focus on tenant hardening, conditional access, DLP, and insider risk policies.

Benefits

• Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade
• Company paid holidays
• Personal Days
• Sick Leave
• Medical, dental, and vision coverage
• Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
• Life and disability insurance
• Employee assistance programs
• Other benefits as provided by local policy and eligibility

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree