Cloud Application Engineer

National Asset Mgmt Incorporated; Washington, Northern (District of Columbia, KY); Hybrid; USD 95,000 - 119,000; Full time

Job summary

Arnold & Porter is an international law firm seeking a Cloud Application Engineer to support messaging, cloud, identity, and infrastructure environments. The role involves maintaining Exchange Server/Exchange Online, Azure, Entra ID, and 365 apps, in a hybrid setup with potential remote work in approved U.S. states.

You will assist with monitoring, incident escalation, patching, and documentation while collaborating with senior engineers on migrations and security best practices.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, or a related field with relevant systems/admin experience.
• Foundational knowledge of Exchange Server/Exchange Online in hybrid environments.
• Familiarity with Azure fundamentals and Entra ID concepts including SSO and MFA.
• Experience with Microsoft 365 administration and related apps is preferred.

Responsibilities

• Assist day-to-day administration and monitoring of Exchange Server/Exchange Online in a hybrid environment.
• Monitor directory synchronization and mail-flow across firm systems.
• Support configuration and troubleshooting of email-security platforms (Cisco IronPort, Abnormal Security).
• Administer Litera Metadact and LISTSERV; manage mail-delivery and policy updates.
• Assist with Azure resources, Entra ID, SSO, Conditional Access, and MFA integrations.
• Provide Tier 2/3 support; document incidents and contribute to change-management processes.

Skills

Exchange Server

Azure fundamentals

Entra ID

Microsoft 365

PowerShell

Windows Server

Intune/Workspace ONE

SPF/DKIM/DMARC

Troubleshooting/logging

Education

Bachelor’s degree in Computer Science/IT/IS

Tools

Litera Metadact

LISTSERV

Job description

Arnold & Porter is an international law firm with offices throughout the United States, Europe, and Asia. The firm advises clients on complex regulatory, litigation, and transactional matters across a broad range of industries, including many of the world's leading companies and organizations.

We are seeking a Cloud Application Engineer to join our Technology team. This role provides support for the firm’s messaging, cloud, identity, and infrastructure environments under the guidance of senior engineers. The successful candidate will assist with maintaining, monitoring, and troubleshooting Microsoft Exchange Server and Exchange Online, Microsoft Azure, Microsoft Entra ID, Microsoft 365, mobile device management platforms, and related enterprise services.

This is an excellent opportunity to build a strong foundation in cloud and infrastructure engineering while contributing to secure, reliable, and high-performing technology services in a sophisticated professional-services environment.

This role may work fully remote in a firm approved U.S. state.

Key Responsibilities

• Assist with the day-to-day administration and monitoring of on-premises Microsoft Exchange Server and Exchange Online in a hybrid environment, including mailboxes, distribution groups, mail flow, and connectors.
• Monitor and troubleshoot global address list synchronization across the firm’s directory environments.
• Support the configuration, monitoring, and troubleshooting of Cisco IronPort and Abnormal Security email-protection platforms, including mail-flow policies, content filtering, quarantine management, and phishing mitigation.
• Assist with administration of Litera Metadact, including server configuration, policy updates, and end-user issue resolution.
• Support the firm’s LISTSERV platform, including list creation, subscriber management, and mail-delivery troubleshooting.
• Assist senior engineers with the configuration and monitoring of Microsoft Azure resources, Microsoft Entra ID, single sign-on integrations, Conditional Access policies, and Microsoft authenticator multifactor authentication.
• Provide administration and support for Microsoft 365 applications and services, including OneDrive, Bookings, Loop, Project, Visio, OneNote, and Microsoft 365 Copilot.
• Assist with enrollment, configuration, compliance policies, application assignments, and troubleshooting for devices managed through Microsoft Intune and Workspace ONE (AirWatch).
• Assist with user provisioning, configuration, and support for enterprise SaaS platforms, including Zoom, Webex, Box, DocuSign, Adobe Admin Console, Adobe Sign, and firm-approved AI tools.
• Monitor system health, mail queues, and service alerts across messaging and cloud infrastructure; document and escalates incidents as appropriate.
• Perform routine maintenance, including patching, certificate renewals, backup verification, and log review.
• Assist with troubleshooting mail-delivery issues involving SPF, DKIM, DMARC, routing, and connector configurations.
• Participate in the planning, testing, and execution of Exchange hybrid, Azure, and messaging-infrastructure projects, upgrades, and migrations.
• Provide Tier 2/3 support for messaging and infrastructure tickets escalated from the Service Desk, ensuring timely resolution and clear communication.
• Support change-management processes by testing and validating changes before production deployment.
• Create and maintain accurate technical documentation, configuration records, support procedures, and knowledge-based articles.
• Stay current on vendor updates, patches, and best practices for supported platforms.
• Ensure infrastructure changes comply with firm change-control, cybersecurity, and documentation standards.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, or a related field, plus relevant experience in systems administration, cloud infrastructure, or messaging administration. Relevant internships, academic projects, lab experience, training, certifications, or an equivalent combination of education and experience will be considered.
• Foundational knowledge of Microsoft Exchange Server and/or Exchange Online, including mailboxes, distribution groups, mail flow, transport rules, and hybrid environments.
• Working knowledge of Microsoft Azure fundamentals and Microsoft Entra ID concepts, including single sign-on, Conditional Access, and multifactor authentication.
• Familiarity with Microsoft 365 administration and applications, including OneDrive, Bookings, Loop, Project, Visio, OneNote, and Microsoft 365 Copilot.
• Basic understanding of Microsoft Intune and/or Workspace ONE (AirWatch), including device enrollment, compliance policies, mobile application management, and support for iOS and Android devices.
• Familiarity with email-security concepts, including spam filtering, phishing mitigation, and email gateways such as Cisco IronPort.
• Exposure to Litera Metadact, LISTSERV, enterprise SaaS platforms, or collaboration tools such as Zoom, Webex, Box, DocuSign, and Adobe Sign is preferred.
• Basic knowledge of DNS and email-authentication standards, including SPF, DKIM, and DMARC.
• Basic PowerShell scripting skills for automation and troubleshooting are preferred.
• Familiarity with Windows Server and hybrid on premises/cloud infrastructure concepts.
• Ability to troubleshoot technical issues using logs, monitoring tools, error messages, and other diagnostic information.
• Proficiency with Microsoft 365 applications, particularly Outlook, Teams, Excel, and Word.
• Understanding of user access controls, authentication, authorization, and change-management practices.
• Strong analytical, organizational, problem-solving, and customer-service skills.
• Excellent written and verbal communication skills, with the ability to document technical information clearly.
• Ability to manage multiple priorities, work effectively with senior engineers and cross-functional teams, and independently learn new technologies.
• Relevant Microsoft certifications, such as AZ-900, MS-900, or MD-102, are a plus.

The anticipated base salary for this position is $95,200 to $119,000. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location in which the applicant lives and/or from which they will be performing the job.

The firm may provide a discretionary bonus annually.