Cloud Adminstrator

PaR Systems, LLC; Shoreview (MN); On-site; USD 110,000 - 160,000; Full time

Job summary

PAR Systems seeks a Microsoft Cloud Administrator to operate, secure, and strengthen the Microsoft cloud environment, with a focus on the Azure Government GCC High space where CUI is stored and processed across Microsoft 365 services.

You will collaborate with the GRC team to meet NIST SP 800-171 and CMMC requirements, implement controls, maintain SSP artifacts, and provide reliable, auditable cloud operations across commercial and GCC High environments.

Qualifications

• 3+ years administering Microsoft 365 and Azure/Entra ID in production.
• Experience with Intune, Exchange Online, SharePoint, and Teams.
• Familiarity with NIST SP 800-171 / NIST 800-53 or CMMC mapping.
• Strong change control, configuration baselines, logging, and access reviews.
• US person eligible to work in a GCC High / ITAR environment.

Responsibilities

• Administer identity and access across Microsoft 365 and GCC High environments.
• Maintain configuration records, logs, screenshots, and SSP artifacts for compliance.
• Troubleshoot, harden, and automate cloud controls and security tooling.
• Coordinate with GRC and MSPs to remediate gaps and support audits.

Skills

Microsoft 365

Azure/Entra ID

Identity & security tooling

Change control

NIST 800-171 mapping

Tools

Intune

Exchange Online

SharePoint

Teams

PowerShell

Graph API

Job description

PAR Systems is seeking a Microsoft Cloud Administrator to help operate, secure, and strengthen the Microsoft cloud environment supporting our defense and regulated business. This role will have a particular focus on our Azure Government GCC High environment, where Controlled Unclassified Information (CUI) is stored, processed, and transmitted across Microsoft 365 services including SharePoint, Teams, OneDrive, Exchange Online, and Intune.

You’ll work alongside our Senior IS Infrastructure Engineer and partner closely with our Governance, Risk, and Compliance (GRC) team to keep this environment secure, reliable, and aligned with NIST SP 800-171 and CMMC requirements. While GRC provides governance and compliance oversight, you’ll be hands-on with the technology, configuring, maintaining, hardening, troubleshooting, and continuously improving the systems and technical controls that support our compliance objectives.

Beyond GCC High, you’ll also provide key support for our commercial Microsoft cloud environment and serve as backup across broader IS infrastructure needs, giving you exposure to PAR’s larger technology environment.

Success Criteria

Your experience administering Microsoft 365 and Azure/Entra ID environments will help you hit the ground running as you become a trusted technical resource for PAR’s GCC High environment. You’ll build a strong understanding of the environment, its security requirements, and the technical controls needed to protect CUI while helping ensure critical systems are not dependent on a single administrator.

Success in this role means keeping our Microsoft cloud environment secure and well maintained, not simply configuring controls once, but ensuring they continue to work as our systems and business evolve. You’ll manage areas such as identity and access, conditional access, endpoint management, security tooling, configuration baselines, logging, patching, and recurring access reviews. You’ll use your technical judgment to identify issues, troubleshoot problems, and strengthen the environment over time.

You’ll also help turn technical operations into clear, defensible evidence of how our controls are working. In partnership with GRC, you’ll maintain configuration records, logs, screenshots, exports, and other technical artifacts needed to support our System Security Plan (SSP), assessments, remediation efforts, and ongoing CMMC readiness. When gaps are identified, you’ll help translate them into technical actions and work with internal partners and managed service providers to drive them toward resolution.

As you grow into the role, you’ll become a fully cross-trained administrator for the GCC High environment who can independently manage day-to-day needs, support changes and migration activities, and provide knowledgeable backup across critical systems. You’ll also look for opportunities to make the environment easier to manage through stronger documentation, repeatable processes, and automation.

Required Qualifications

• 3+ years administering Microsoft 365 and Azure/Entra ID in a production environment, including Intune, Exchange Online, SharePoint, and Teams.
• Hands-on experience with identity and security tooling — conditional access, MFA, endpoint management, and Microsoft Defender / Purview.
• Working knowledge of security-control frameworks (NIST SP 800-171, NIST 800-53, or CMMC) and how technical settings map to control requirements.
• Demonstrated discipline with change control, configuration baselines, logging, and access reviews.
• U.S. Person and eligibility to work in a GCC High / ITAR-aware environment

Preferred Qualifications

• Direct experience with Azure Government / GCC High or another sovereign cloud (distinct from commercial M365).
• Supporting a DFARS 252.204-7012 / NIST SP 800-171 or CMMC program in a defense-contractor setting.
• Relevant certifications such as Microsoft SC-300, AZ-500, MS-102, or Security+.
• Scripting/automation (PowerShell, Graph API) for control enforcement and evidence collection.