Cloud Engineer (Hybrid)

isienterprises; Herndon (VA); Hybrid; USD 110,000 - 125,000; Full time

Benefits offered by this job

Hybrid work opportunities

PTO and flexible scheduling

Mentorship and training opportunities

Job summary

ISI Enterprises is seeking a Cloud Engineer to design, deploy, and harden Microsoft 365 environments under the guidance of senior engineers. You will gain hands-on experience configuring M365 security controls, building migration solutions, and supporting CMMC readiness.

Responsibilities include deploying Entra ID, Defender, and Purview configurations, planning migrations, and maintaining SSPs/POA&Ms. A strong focus is on identity, access management, and securing cloud and hybrid environments.

Qualifications

• Bachelor's degree in a relevant field or equivalent work/military experience.

Responsibilities

• Assist in deploying and hardening Microsoft 365 tenants in line with CMMC, NIST SP 800-171, and ISO 27001.
• Support configuration of Conditional Access, Defender for O365/Endpoint, and Purview for governance and compliance.
• Help implement zero-trust architecture with identity-based access controls and MFA.
• Develop migration solutions for data and on-prem servers to Microsoft 365 and Azure.
• Document configurations, timelines, and rollback procedures for customer environments.
• Assist with gap analyses for CMMC/NIST SP 800-171 and support SSPs/POA&Ms.
• Shadow and assist with AvePoint tools and dashboards for customers.

Skills

Cloud computing

Microsoft 365

Azure

Entra ID

Security compliance

Migration

Documentation

PowerShell

Bicep

GCP

Education

Bachelor's degree

Tools

Microsoft 365

Entra ID

Azure

Microsoft Sentinel

AvePoint

Power BI

SharePoint

Powershell

Bicep

Azure Resource Manager

Job description

Cloud Engineer

ISI Enterprises is seeking a Cloud Engineer to support the design, deployment, and hardening of Microsoft 365 environments under the guidance of senior engineers. This role is ideal for someone who wants hands-on experience configuring M365 security controls, building customer migration solutions, and helping clients prepare for CMMC assessments. You'll work directly with security best practices and configurations aligned to CMMC, NIST, CIS, and ISO 27001 standards within the Microsoft ecosystem. Familiarity with other cloud platforms, such as Google Cloud, is a plus, as ISI supports a range of customer environments.

Key Responsibilities

Microsoft 365 Security Configuration

• Assist in deploying and hardening Microsoft 365 tenants, including Microsoft Entra ID, Exchange Online, SharePoint, and Teams, per CMMC, NIST SP 800-171, and ISO 27001 requirements.
• Support configuration of Conditional Access policies, Microsoft Defender for Office 365/Endpoint, and Microsoft Purview for data governance and compliance.
• Help implement zero-trust architecture within M365, including identity-based access controls, multi-factor authentication, and least-privilege policies.

Cloud & Server Migration Engineering

• Develop and support solutions for migrating customer data and on-premises servers into Microsoft 365 and Azure environments.
• Assist with migration planning, data mapping, pre-migration cleanup, and post-migration validation.
• Document migration configurations, timelines, and rollback procedures for customer environments.

CMMC Readiness Support

• Support customer preparation for CMMC assessments by helping implement and document required security controls within M365/Azure.
• Assist with gap assessments against NIST SP 800-171 practices and translating findings into remediation tasks.
• Help maintain System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms) tied to cloud configurations.

Identity & Access Management (IAM)

• Support implementation and maintenance of identity solutions in Microsoft Entra ID, including hybrid identity and conditional access.
• Help troubleshoot IAM issues and validate access configurations against least-privilege standards.
• Exposure to Google Cloud Identity is a plus for engineers supporting mixed-environment customers.

Endpoint & Data Protection

• Help enforce endpoint compliance using Microsoft Intune and Microsoft Defender.
• Assist with deploying Microsoft Purview Information Protection for data classification, labeling, and retention.
• Support compliance efforts related to ITAR, DFARS, and CUI handling requirements.

Threat Detection & Documentation

• Assist in configuring Microsoft Sentinel for threat detection and monitoring within M365/Azure environments.
• Contribute to risk assessments and threat modeling for customer cloud deployments.
• Document security configurations, migration procedures, and compliance evidence for audit readiness.

Project Support & Learning

• Support cloud and M365 migration projects end-to-end, from data preparation through implementation and documentation.
• Shadow and assist with training sessions on AvePoint tools, Microsoft Power BI dashboards, and SharePoint solutions.

Qualifications

• U.S. citizenship is required by federal regulation.
• Bachelor's degree in Computer Science, Information Systems, or equivalent work/military experience.
• Minimum 3 years of experience in IT engineering, cloud computing, or Microsoft 365 administration.
• Working knowledge of Microsoft 365, Microsoft Entra ID, and Microsoft Azure.
• Familiarity with compliance standards such as NIST SP 800-171, CMMC, and DFARS.
• Understanding of basic networking principles and security concepts.
• Strong communication and documentation skills for customer-facing migration and compliance work.

Preferred Qualifications

• Certifications such as Microsoft 365 Certified: Administrator Expert (MS-102), Azure Administrator Associate (AZ-104), or CompTIA Security+.
• Security clearance of Secret or higher
• Hands-on experience with Microsoft 365 tenant-to-tenant or on-prem-to-cloud migrations.
• Experience supporting CMMC or NIST SP 800-171 assessments/gap analyses.
• Experience with Microsoft Intune, Microsoft Defender, and Microsoft Purview.
• Experience with automation tools such as Autopilot, Powershell, or Bicep/Azure Resource Manager
• Basic familiarity with Google Cloud Platform (GCP) and Google Cloud Identity is a plus.

What We Offer

• Salary range: $110,000-$125,000, commensurate with experience.
• Comprehensive benefits package, including PTO and flexible scheduling.
• Hybrid work opportunities.
• Mentorship and training opportunities to support professional development and career growth.

About Industrial Security Integrators, LLC (ISI Enterprises) ISI Enterprises is an equal opportunity employer committed to fostering diversity in the workplace. We believe in empowering a workforce that reflects a wide range of backgrounds, traditions, and experiences to strengthen our team and ensure innovation.