Job Description
Overview
We are seeking a highly capable Microsoft Cloud Engineer to own and advance our Microsoft ecosystem across Azure, Microsoft 365, identity, security, and endpoint management. This role is responsible for designing, automating, securing, and operating a modern cloud-first enterprise platform.
This is not a helpdesk or basic administration position — the engineer will drive architecture, automation, and operational maturity across the organization’s Microsoft environment.
The ideal candidate understands how infrastructure, identity, security, compliance, and end-user productivity intersect and can implement solutions that are reliable, secure, and scalable.
Responsibilities
- Cloud & Infrastructure (Azure)
- Design and maintain Azure landing zones and subscriptions
- Implement Infrastructure-as-Code (Bicep, ARM, or Terraform)
- Deploy and manage IaaS and PaaS workloads (VMs, App Services, Storage, SQL, networking)
- Configure hybrid connectivity (VPN / ExpressRoute)
- Monitor and optimize cost, performance, and availability
- Implement backup and disaster recovery strategies
- Identity & Access (Entra ID / AD)
- Manage hybrid identity (Active Directory + Entra ID)
- Implement conditional access and Zero Trust controls
- Administer SSO, MFA, and privileged access management
- Integrate enterprise applications with SAML/OAuth authentication
- Automate identity lifecycle (joiner/mover/leaver)
- Microsoft 365 Platform
- Administer Exchange Online, SharePoint, OneDrive, and Teams
- Design collaboration and data governance architecture
- Implement retention, DLP, and information protection policies
- Support tenant migrations and integrations
- Manage email security and transport rules
- Endpoint & Device Management
- Manage Intune / endpoint configuration and compliance
- Implement device enrollment and configuration baselines
- Deploy application packaging and updates
- Enforce security posture across Windows endpoints
- Security & Compliance
- Configure Defender suite (Defender for Endpoint, Identity, Office, Cloud Apps)
- Monitor security posture and remediate risks
- Support audit, compliance, and incident response activities
- Implement logging and monitoring (Sentinel / Log Analytics)
- Automation & Reliability
- Develop PowerShell automation and operational tooling
- Standardize deployments and eliminate manual processes
- Document architecture and operational runbooks
- Participate in operational readiness and recovery exercises
- Required Qualifications
- 5+ years administering enterprise Microsoft environments
- Hands-on Azure engineering experience
- Strong Microsoft 365 administration background
- Identity experience (Active Directory + Entra ID)
- PowerShell scripting and automation skills
- Experience with conditional access and security controls
- Networking fundamentals (DNS, routing, firewalls, private endpoints)
- Preferred Qualifications
- Experience with Microsoft Defender security stack
- Azure monitoring and Sentinel
- Infrastructure-as-Code (Terraform/Bicep/ARM) Migration experience (on-prem
- cloud or tenant consolidation)
- Compliance frameworks (SOC2, HIPAA, ISO)
- Experience supporting mergers, acquisitions, or integrations
- What Success Looks Like
- Reliable, secure, and standardized Microsoft environment
- Reduced manual administration through automation
- Strong identity and endpoint security posture
- Clear documentation and repeatable deployments
- Platform stability during business change and growth
- Certifications (nice to have)
- AZ-104 / AZ-305
- MS-102 or equivalent M365 certifications
- SC-300 / SC-200
- Security+ or similar
- Position Characteristics
- Senior individual contributor
- Cross-team influence
- Platform ownership
- Architecture + operations balance
Apply tot his job
Apply To this Job