Senior Microsoft Cloud Engineer
CMT Services Inc•Washington, DC, DC
•Hybrid
About The Position
The Senior Microsoft Cloud Engineer provides advanced engineering, operational, and advisory support for CBO’s Microsoft cloud environments — Microsoft 365, Azure, and Microsoft Security platforms. Designs, implements, maintains, and optimizes secure cloud services aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate, applying Zero Trust, least privilege, continuous verification, and conditional access across tenant management, Azure infrastructure and application support, Exchange Online and collaboration services, identity and access management, and security controls (Microsoft Defender, Entra ID, Purview).
Requirements
- Senior-level technical leadership and independent operational support for enterprise MS cloud (M365, Azure, MS Security), with currently maintained Microsoft certifications in all related areas for ≥5 years.
- Proven expertise designing, implementing, operating, and optimizing Microsoft cloud services for high availability, scalability, performance, and mission alignment.
- Ability to implement/maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate (continuous monitoring, risk mitigation, posture management).
- Advanced ability to implement/manage a hybrid Active Directory / M365 / Entra environment using Microsoft’s tiered security standards.
- Proven experience creating/managing Windows, macOS, and Apple iOS devices in Intune (compliance and policy delivery).
- Proven experience with Autopilot OS image delivery and policy/on-demand software delivery via Intune for environments of ≥700 endpoints.
- Practical experience locking down remote PowerShell admin access in Entra/Azure across related APIs — headless Exchange Online mailbox provisioning, SharePoint custom user-profile field imports, and Microsoft Graph access.
- Advanced IAM — Entra ID, Conditional Access, PAM, least-privilege; MFA provider transitions with minimal impact; 3rd-party MFA as an Entra provider; Smart Card and FIDO key authentication across Windows and macOS.
- Experience supporting Exchange Online, Microsoft Teams, SharePoint Online, and related M365 workloads.
- Azure infrastructure/application support — cloud networking, workload configuration, maintenance, troubleshooting, hybrid integration.
- Hands-on configuration/management of Microsoft Defender, Sentinel, and Purview (threat protection, data governance, information protection, IR readiness).
- Ability to manage Sentinel data sources, including ingest log data-quality health reporting and alerting.
- Ability to support formal change management; produce technical documentation, training materials, and SOPs.
- Capacity to act as a senior technical advisor on complex issues, audits, assessments, and compliance reviews; perform duties with minimal supervision and sound independent judgment.
- Proven experience configuring Azure spending budgets with alerting/reporting providing 90 days’ lead time for CBO decision-making on overages.
Nice To Haves
- Bachelor’s degree in Computer Science or IT related.
Responsibilities
- Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services.
- Implement/maintain cloud security controls aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate.
- Administer/secure identity via Microsoft Entra ID, Conditional Access, privileged access controls, and least-privilege models.
- Manage Exchange Online, Teams, SharePoint Online, and related collaboration/messaging services.
- Provide Azure infrastructure, networking, and application workload support, including hybrid integration.
- Configure/manage Microsoft Defender, Purview, and related platforms for threat protection, data governance, and IR readiness.
- Support formal change management; maintain technical documentation and SOPs.
- Serve as senior technical advisor to CBO stakeholders; support audits, assessments, and compliance reviews.
- Implement automated Power BI reporting/dashboards — systems health, compliance, current and forecasted spend, and utilization across CBO’s Microsoft cloud.
- Implement IR and disaster-response playbooks as practical procedural documents integrating into CBO’s existing IR and COOP documentation.
Benefits
- Remote work is authorized
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
