Microsoft Cloud Security Engineer

The Middlesex Corporation; United States; On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Medical coverage

401k with match

Tuition reimbursement

Paid time off

Employee assistance

Job summary

The Middlesex Corporation in Orlando, FL is seeking a Microsoft Cloud & Security Engineer to own endpoint management and security across our Microsoft environment. You will focus on Intune and Defender to keep devices secure, compliant, and well-managed for both office and field teams.

You will also support Exchange Online, Teams, SharePoint, and Microsoft 365 services while collaborating with a compact IT team.

Qualifications

• 3–5+ years of Microsoft cloud administration experience.
• Hands-on with Intune, Defender, and 365 admin.
• Experience with Entra ID/Azure AD and CA policies.
• Experience managing Windows endpoints in an enterprise.

Responsibilities

• Own Microsoft Intune for provisioning, configuration, and lifecycle management.
• Design and manage deployment of Win32 apps and Microsoft 365 apps.
• Enforce device compliance policies and security baselines.
• Monitor security alerts and incidents; respond to threats.
• Manage Entra ID users, groups, and access controls.
• Support Exchange Online, Teams, and SharePoint.
• Collaborate with IT team on system improvements.
• Participate in on-call rotation.

Skills

Microsoft Intune

Microsoft Defender

Microsoft 365 admin

Entra ID/Azure AD

Conditional Access

Device compliance

Windows endpoints

Troubleshooting

Communication

PowerShell

Tools

PowerShell

Job description

The Middlesex Corporation is a nationally recognized and award-winning leader in the heavy civil construction industry. Since 1972, the family business founded by Robert W. Pereira has developed an extensive client and project list through its consistent efforts to safely build America’s infrastructure. The Middlesex Corporation specializes in building and reconstructing highways, bridges, marine, rail, and transit facilities through its collaborative team approach and focus on core values. In addition, Middlesex Asphalt in Central Florida is one of the largest and most productive asphalt plants in the United States, with Middlesex Paving earning an equally solid regional presence and reputation.

Position Summary:

As a Microsoft Cloud & Security Engineer, reporting to the IT Operations Manager, you will take ownership of endpoint management and security across Middlesex’s Microsoft environment. This role is primarily responsible for Microsoft Intune and Microsoft Defender, ensuring devices are secure, compliant, and consistently managed across the organization.

The position also supports core Microsoft 365 services and plays a key role in strengthening security, improving device management, and delivering a reliable end-user experience across both office and field teams.

Responsibilities:

• Own Microsoft Intune for device provisioning, configuration, and lifecycle management
• Design and manage application deployment (Win32 apps, Microsoft 365 apps, updates)
• Enforce device compliance policies and security baselines
• Standardize endpoint configurations across laptops, tablets, and mobile devices
• Administer Microsoft Defender (Endpoint, Office 365, Identity)
• Monitor, triage, and respond to security alerts and incidents
• Implement and maintain endpoint protection and threat detection policies
• Manage Entra ID (Azure AD) users, groups, and access controls
• Design and maintain Conditional Access policies
• Support MFA and device-based access enforcement
• Support Exchange Online, Teams, and SharePoint
• Assist with configuration, troubleshooting, and service optimization
• Manage licensing and identify optimization opportunities
• Provide L2/L3 escalation support for endpoint and cloud-related issues
• Maintain documentation, standards, and procedures
• Collaborate with IT team members on system improvements and security initiatives
• Operate in a small, nimble IT team with shared ownership and accountability
• Partner with external providers, including MSPs and MSSPs, to support and enhance internal capabilities
• Take a hands-on, “roll up your sleeves” approach to problem solving and implementation
• Continuously improve Microsoft Secure Score and overall security posture
• Stay current with Microsoft technologies and security best practices through ongoing learning
• Contribute ideas and drive improvements to systems, processes, and security controls
• Participation in an on-call rotation may be required
• Occasional travel may be required
• Perform other duties as assigned, consistent with the scope and level of this role

Qualifications:

• 3–5+ years of experience in Microsoft cloud administration
• Strong hands-on experience with:
• Microsoft Intune (Endpoint Manager)
• Microsoft Defender suite
• Microsoft 365 administration
• Entra ID (Azure AD)
• Experience with application deployment, Conditional Access, and device compliance policies
• Experience managing Windows endpoints in a business environment
• Strong troubleshooting and problem-solving skills
• Effective communication and organizational skills
• This is a 5-day a week in office position in Orlando, FL (hybrid/remote N/A)

Preferred Qualifications:

• Familiarity with Microsoft Azure services
• Basic scripting or automation experience (e.g., PowerShell)
• Understanding of Zero Trust security principles
• Experience working in structured IT environments (change control, risk management, and ITIL-aligned practices)
• Experience supporting distributed or field-based workforces

We offer our full-time and eligible part-time team members a comprehensive benefits package that’s among the best in our industry. Benefits include medical, dental, and vision plans covering eligible team members and dependents, employee assistance programs, life insurance, disability, top-tier 401k with matching, tuition reimbursement, industry-leading referral program, and generous paid time off.

Middlesex provides equal employment opportunities to all team members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status, or other characteristics protected by law.