Senior Cloud Engineer

Kforce Inc; Arlington (VA); Hybrid; USD 130,000 - 170,000; Full time

Job summary

Kforce Inc is seeking a Senior Cloud Engineer for a hybrid Arlington, VA role focused on Microsoft 365/Entra and Exchange Online administration. The candidate will manage identity, security, and collaboration services, while contributing to automation and IaC initiatives.

The position involves incident response leadership and collaboration with security and networking teams to maintain baseline protections across the M365 environment.

Qualifications

• Experience in enterprise cloud environments with M365/Entra.
• Strong identity, security, and collaboration services knowledge.
• Familiarity with CI/CD and IaC.

Responsibilities

• Design, configure, and administer Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Copilot.
• Administer Entra ID (Azure AD) including conditional access and RBAC.
• Own Exchange Online configuration and mail flow management.
• Investigate incidents and develop detection queries using M365 Defender and related tools.
• Collaborate to implement security baselines, DLP, retention, and auditing.
• Develop automation and provisioning scripts; contribute to IaC practices.
• Work with Kubernetes-integrated workloads for identity/security integrations.
• Lead incident response and root-cause analysis for outages.

Skills

Cloud engineering

Incident response

Automation scripting

CI/CD practices

Tools

Azure DevOps

GitHub

Kubernetes

Microsoft 365 Defender

Job description

Kforce has a client that is seeking a Senior Cloud Engineer. This position offers hybrid work flexibility, requiring three days per week in Arlington, VA, with occasional travel for meetings, training sessions, and conferences. Summary: Our client is seeking an experienced Senior Cloud Engineer with a focus on Microsoft 365/Entra to join its diverse and talented group. The Senior Cloud Engineer manages and optimizes the organization's Microsoft 365 and Entra ID tenants, with primary responsibility for Exchange Online, identity, security, and collaboration services. This position reports to the Director of IT Infrastructure Operations.

Responsibilities

• Design, configure, and administer Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Copilot, and related security/compliance features
• Administer and harden Entra ID (Azure AD), including conditional access, identity protection, app registrations, and role-based access control
• Own Exchange Online configuration: mail flow, transport rules, connectors, policies, hybrid connectivity, and advanced troubleshooting of mail delivery issues
• Investigate incidents, identify patterns, and develop detection queries and reports leveraging Microsoft 365 Defender, Purview, and Log Analytics
• Collaborate with security and networking teams to implement and maintain security baselines, DLP, retention, eDiscovery, and auditing across the M365 environment
• Develop and maintain automation, scripts, and integrations to streamline administration, reporting, and provisioning
• Contribute to CI/CD and infrastructure-as-code practices (e.g., Azure DevOps, GitHub) for Microsoft 365 configuration and related workloads
• Work with containerized and cloud workloads (e.g., Kubernetes) where they integrate with M365/Entra for identity, security, or application access
• Lead complex incident response and root-cause analysis for M365 and identity-related outages and security events

Requirements

• To be considered for this position, candidates must have experience in a similar role, or they must possess significant knowledge, experience, and abilities to successfully perform the responsibilities listed
• Relevant education and/or training will be considered a plus

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.