Microsoft Cloud Platform Engineer

Aleut Federal•Colorado Springs, CO

3d•$125,000 - $155,000•Hybrid

About The Position

Aleut Federal is seeking a Cloud Engineer to support and enhance our internal Microsoft Azure cloud environments across both Commercial (.com) and GCC High (GCCH) tenants. This role is responsible for cloud architecture, identity management, governance, security, automation, and operational support in a fully cloud-native enterprise environment.

Requirements

4+ years of hands-on Microsoft Azure experience.
Strong knowledge of: Microsoft Entra ID, Conditional Access and Zero Trust architecture, Azure RBAC and governance.
Experience with Azure networking architecture.
Strong PowerShell scripting and automation experience.
Experience managing Microsoft 365 in enterprise environments.
Understanding of cloud security principles and regulatory compliance frameworks.
Strong documentation and communication skills.
Microsoft Certified: Azure Administrator Associate (minimum).
Must be a US Citizen.

Nice To Haves

Azure Solutions Architect Expert.
Experience with Azure Policy governance at scale.
Supporting both Commercial and GCC High environments.
Defender for Cloud.
Microsoft Sentinel.
Intune / Endpoint Manager.
Azure DevOps / GitHub CI/CD.
CMMC Level 2 or NIST 800-171 environments.
AI-assisted productivity and automation tools such as ChatGPT, Claude, n8n, Power Automate, Logic Apps, or similar platforms.
Using AI and automation to streamline cloud operations, documentation, scripting, troubleshooting, reporting, and IT service workflows.
Applying secure data handling and governance practices when using AI or automation tools in enterprise or regulated environments.
Experience supporting CMMC Level 2 or NIST 800-171 environments.

Responsibilities

Design, implement, and maintain Azure infrastructure across Commercial and GCC High tenants.
Administer Microsoft Entra ID (Azure AD), including: Conditional Access, RBAC, PIM, Identity Governance, MFA strategy.
Architect and manage Azure networking (VNets, NSGs, Private Endpoints, Azure Firewall, VPN/ExpressRoute as applicable).
Deploy and manage Azure IaaS and PaaS services, including: Azure Virtual Machines, Azure App Services, Azure SQL / Managed Databases, Storage Accounts, Azure Backup & DR.
Implement governance controls using: Azure Policy, Management Groups, Role-based access controls, Defender for Cloud.
Support Microsoft 365 services across .com and GCCH environments.
Automate deployments and operational tasks using PowerShell, Azure CLI, Bicep, or Terraform.
Implement monitoring and logging using Azure Monitor, Log Analytics, and Sentinel.
Perform tenant-to-tenant migrations and cross-tenant integration support as required.
Maintain architecture diagrams and system documentation.
Support security audits and compliance initiatives (NIST, CMMC, FedRAMP Moderate).
Participate in incident response and troubleshooting of Azure-related issues.