Senior Microsoft Cloud Engineer

All Native Group•Washington, DC

6d•Onsite

About The Position

All Native Group, a division of Ho Chunk, Incorporated, is seeking an exceptional Senior Microsoft Cloud Engineer to provide advanced engineering, operational, and advisory support for the Congressional Budget Office's (CBO) Microsoft cloud environments, including Microsoft 365, Azure, and Microsoft Security platforms. The Senior Microsoft Cloud Engineer ensures a resilient, scalable, and secure cloud environment aligned with NIST SP 800-53, NIST SP 800-207 Zero Trust Architecture, and FedRAMP Moderate requirements, applying least privilege, continuous verification, and conditional access throughout.

Requirements

Minimum of 8 years of senior-level enterprise Microsoft cloud engineering experience across M365, Azure, and Microsoft Security.
Proven Intune and Autopilot management for environments of at least 700 endpoints.
Demonstrated Entra ID, Conditional Access, PAM, and multi-provider MFA implementation experience.
Hands-on Defender, Sentinel, and Purview configuration and operations experience.
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience.
Microsoft 365 Certified: Administrator Expert
Microsoft Certified: Cybersecurity Architect Expert
Microsoft Certified: Azure Solutions Architect Expert
Microsoft 365 Certified: Endpoint Administrator Associate
Microsoft Certified: Identity and Access Administrator Associate
Microsoft Certified: Windows Server Hybrid Administrator Associate
Microsoft 365 Certified: Teams Administrator Associate
Microsoft Certified: Information Security Administrator Associate
Certifications (or their equivalent prior certifications) should have been maintained for a minimum of 5 years. Expired certifications or certifications never used professionally will not be considered.
Candidates should provide 2 to 4 short examples of personally written technical documents, not to exceed 5 pages total.
Must be a U.S. citizen or permanent resident.
Position requires a Public Trust Tier 2 clearance.
Selected candidate must obtain favorable FBI criminal history and fingerprint checks conducted through the U.S. Capitol Police prior to starting work, and pass a background check to access the CBO network.

Nice To Haves

Expert-level Microsoft 365, Azure, and Microsoft Security engineering.
Advanced identity, endpoint, and information-protection skills.
Automation and reporting proficiency (PowerShell, Graph, Power BI).
Independent judgment and technical authority.
Strong technical documentation and playbook authoring.

Responsibilities

Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services for reliability, scalability, and performance.
Implement and maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate requirements.
Administer a hybrid Active Directory / M365 / Entra environment implementing Microsoft's tiered security model.
Create and manage Windows, macOS, and Apple iOS devices in Intune, including compliance and policy delivery, and Autopilot image and software delivery for environments of at least 700 endpoints.
Lock down remote PowerShell administrative access across Entra, Azure, and Microsoft Graph APIs, including headless Exchange Online provisioning and SharePoint profile imports.
Administer identity and access management with Entra ID, Conditional Access, and privileged access management, including MFA provider transitions, third-party MFA, and Smart Card / FIDO key authentication across Windows and macOS.
Manage Exchange Online, Microsoft Teams, SharePoint Online, and related M365 workloads.
Configure and manage Microsoft Defender, Sentinel, and Purview for threat protection, data governance, information protection, and incident response readiness, including Sentinel data source health and log-quality alerting.
Implement automated reporting and dashboards using Power BI, including systems health, compliance, current and forecasted spend, and utilization reporting.
Configure Azure spending budgets with alerting and reporting that provide 90 days of lead time for overage decisions.
Author incident response and disaster recovery playbooks that integrate with CBO's existing IR and COOP documentation.
Serve as a senior technical advisor supporting audits, assessments, and compliance reviews, operating with minimal supervision.