Senior Microsoft Platform Engineer

Systems Engineering Solutions Corporation•Alexandria, VA

About The Position

The Senior Microsoft Platform Engineer is a Tier 3 technical role responsible for administering, operating, and continuously improving an agency’s Microsoft Azure platform, Microsoft 365 services, and on-premises and cloud-hosted Windows and Linux servers. The engineer owns incidents escalated from Tier 1 and Tier 2 through resolution, involving vendors such as Microsoft support when needed. Working with minimal direction, the engineer leads technical work in assigned areas, guides other administrators, and helps project and application teams adopt Azure capabilities while maintaining security and compliance. The role collaborates with architecture, cybersecurity, networking, and engineering teams to keep services aligned with enterprise standards. The engineer concurrently manages Tier 3 incidents, recurring operations and maintenance, and small-scale projects to modernize Microsoft platform capabilities. Priorities may change daily, requiring responses to urgent incidents, communication about schedule impacts, and continued ownership of existing commitments. The role also participates in an on-call rotation. The program provides end-to-end IT infrastructure support, including Tier 1 Help Desk, Tier 2 End User Support, and Tier 3 server, platform, and network infrastructure support and engineering. Responsibilities across the program include incident resolution, service requests, monitoring, lifecycle support, and escalation management.

Requirements

10+ years of Microsoft infrastructure administration experience, including 5+ years of hands-on Azure administration and engineering.
Strong experience with Microsoft Azure networking, virtual machines, storage, Backup, and Site Recovery.
Strong experience with Microsoft Entra ID and hybrid Active Directory.
Strong experience administering Windows Server and Linux servers.
Strong experience administering Microsoft 365.
Strong PowerShell automation experience.
Strong experience with Microsoft Configuration Manager (MCM).
Experience administering controls that support Zero Trust, such as Conditional Access and PIM.
Demonstrated experience resolving Tier 3 incidents in a ticketed ITSM environment while carrying operations and maintenance and project assignments, using a repeatable troubleshooting process.
Demonstrated experience following a formal change management process, including change requests, change board review, and implementation and rollback plans.
Demonstrated experience planning and delivering small-scale IT projects through closeout.
Experience as a senior or lead technical resource, including guiding other administrators and owning technical decisions within an assigned area.
Experience working directly with end users and government or customer stakeholders, verbally and in writing.
Bachelor’s degree in computer science, Information Systems, Engineering, or a related field, or equivalent practical experience.

Nice To Haves

Microsoft Azure Administrator Associate (AZ-104), Identity and Access Administrator Associate (SC-300), or Microsoft 365 Administrator Expert (MS-102) certification, or successor certification.
ITIL 4 Foundation or equivalent IT service management training.
Experience with ServiceNow, Azure DevOps (ADO), NinjaOne, and Datadog.
Prior experience supporting a federal agency.

Responsibilities

Manage and maintain Azure environments, including subscriptions, resource groups, landing zones, governance and tagging, virtual networks, virtual machines, storage accounts, and platform services.
Administer Microsoft Entra ID, hybrid identity, Conditional Access, Privileged Identity Management (PIM), and role-based access control (RBAC).
Implement and maintain Azure networking, including Network Security Groups, Azure Firewall, Application Gateways, VPN connectivity, private endpoints, and hybrid network integration.
Administer Microsoft 365 services.
Administer and patch on-premises and Azure-hosted Windows and Linux servers, including builds, configuration, and lifecycle maintenance, using Microsoft Configuration Manager (MCM) and other approved tools.
Build automation and infrastructure as code using PowerShell, Azure Automation, Logic Apps, ARM templates, Bicep, or Terraform.
Monitor platform health using Azure Monitor, Log Analytics, Application Insights, and Microsoft Defender.
Maintain backup, disaster recovery, and high availability using Azure Backup and Azure Site Recovery.
Perform security hardening and vulnerability remediation in line with agency security requirements, NIST controls, and federal cloud security standards.
Participate in architecture reviews and recommend performance, cost, and security improvements.
Own Tier 3 incidents from assignment to closure by assessing impact and urgency, restoring service, and confirming resolution with the end user or requesting team.
Troubleshoot complex Azure, identity, network, and server issues using a structured process that defines symptoms and scope, gathers evidence, isolates the failing layer, tests changes, and verifies fixes.
Escalate issues to Microsoft or other vendors with a complete case record, and identify recurring incidents for permanent fixes through problem management.
Participate in the on-call rotation.
Complete recurring operations and maintenance tasks on schedule and record completion in ServiceNow.
Follow the NCUA change management process, including submitting change requests with scope, risk, testing, implementation, and rollback plans; obtaining approval before implementation; and documenting results at closure.
Lead small-scale projects from planning through closeout, including scope, requirements, milestones, dependencies, stakeholder agreement, phased implementation and rollback planning, user communications, and status reporting in Azure DevOps (ADO).
Support cloud migration projects for servers, applications, databases, and hybrid workloads.
Communicate with end users, government stakeholders, and contract counterparts about issues, impacts, timelines, and outcomes.
Write clear ServiceNow ticket notes and work logs as work progresses so another engineer can continue the issue without re-contacting the user.
Maintain technical documentation, runbooks, SOPs, knowledge articles, and architecture diagrams, updating them after incidents, changes, and projects.
Guide other administrators and review their runbooks, change requests, and ticket documentation when asked.