Senior Cloud Engineer

Bpp Mfg; Rancho Cordova, Northern (CA, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Bpp Mfg in Rancho Cordova, CA seeks a Senior Cloud Engineer to mentor the Junior Cloud Engineer and own long-term platform ownership after a SharePoint re-architecture initiative. You will establish sustainable technical standards and serve as the escalation point for advanced cloud issues, including recovery planning for Microsoft cloud services.

The role emphasizes governance, automation, and end-to-end resilience, with collaboration across IT leadership and business stakeholders to ensure

Qualifications

• Five or more years of Microsoft 365 administration and engineering experience, including senior-level design, implementation, and troubleshooting.
• Advanced experience with Microsoft 365, Entra ID, Intune, Exchange Online, Teams, SharePoint Online, OneDrive, and Windows Autopilot.
• Experience administering Azure services for identity, automation, monitoring, integrations, backup and recovery, with strong PowerShell automation.

Responsibilities

• Serve as the senior technical owner for Microsoft 365 and related cloud services.
• Design and maintain platform standards, governance controls, documentation, roadmaps, and configuration baselines.
• Lead complex troubleshooting, major changes, platform improvements, and Tier 3 escalations.
• Reduce reliance on MSPs by building internal capability and documented operating practices.
• Architect and administer Entra ID, Conditional Access, identity governance, and privileged access controls.
• Own Intune and Windows Autopilot architecture, compliance policies, and endpoint management governance.
• Improve endpoint lifecycle, security posture, and provisioning reliability.
• Ownership of SharePoint Online after the initial consulting engagement; implement governance and information architecture standards.
• Define and maintain recovery architecture for Microsoft 365 services; document recovery responsibilities and runbooks.
• Develop automation and integration patterns across Microsoft cloud services and business platforms.
• Mentor the Junior Cloud Engineer and coordinate with stakeholders on cloud projects and RUNBOOKS.

Education

Microsoft certifications: Azure Administrator, Identity and Access Administrator, Endpoint Administrator, or Azure Solutions Architect

Tools

PowerShell

Job description

Job Summary:

The Senior Cloud Engineer will mentor the Junior Cloud Engineer, establish sustainable technical standards, serve as the escalation point for advanced cloud and endpoint issues, and assume long-term platform ownership following the planned SharePoint re-architecture engagement.

The role will also establish and maintain recovery capabilities for Microsoft cloud services, including backup architecture, documented recovery procedures, restore validation, and coordination of resilience testing.

Key Responsibilities:

Microsoft cloud platform ownership:

• Serve as the senior technical owner for Microsoft 365 and related cloud services.
• Design and maintain platform standards, governance controls, documentation, roadmaps, and configuration baselines.
• Lead complex troubleshooting, major changes, platform improvements, and Tier 3 escalations.
• Reduce reliance on MSPs and outside vendors by building sustainable internal capability and documented operating practices.

Identity, access, and endpoint management:

• Architect and administer Microsoft Entra ID, Conditional Access, identity governance, privileged access controls, and identity lifecycle standards.
• Own Intune and Windows Autopilot architecture, compliance policies, configuration profiles, application deployment standards, and endpoint management governance.
• Improve endpoint lifecycle, security posture, reporting, provisioning reliability, and operational consistency.

Collaboration and information management:

• Assume long-term technical ownership of SharePoint Online after the initial consulting engagement.
• Implement and maintain SharePoint governance, permissions, site lifecycle, ownership, and information architecture standards.
• Support Microsoft Teams, Exchange Online, OneDrive, Purview, retention, and collaboration governance.

Cloud resilience, backup, and recovery:

• Define and maintain recovery architecture for Microsoft 365 and related cloud services, including Exchange Online, SharePoint Online, OneDrive, Teams, Entra ID, Intune, and applicable Azure-hosted workloads.
• Evaluate, implement, and govern third-party backup and recovery platforms for Microsoft cloud services.
• Document Microsoft, vendor, and internal recovery responsibilities, service dependencies, recovery procedures, and escalation paths.
• Establish and maintain recovery runbooks, service-recovery requirements, restore procedures, and evidence of recovery readiness.
• Plan and execute recurring restore tests and participate in broader disaster-recovery and business-continuity exercises.
• Partner with the Senior Security and Network Engineer, system owners, vendors, and IT leadership to validate end-to-end recovery capabilities.
• Identify recovery gaps and recommend technical, procedural, or vendor changes to improve resilience.

Security, automation, and modernization:

• Partner with the Senior Security and Network Engineer on Microsoft Defender, identity security, audit remediation, and Zero Trust initiatives.
• Develop PowerShell, Microsoft Graph, and workflow automation that reduces manual administration and repetitive support work.
• Evaluate and govern Power Platform, Microsoft Copilot, and emerging Microsoft cloud capabilities.
• Support secure and supportable integration patterns across Microsoft cloud services and business platforms.

Mentorship and operational partnership:

• Mentor the Junior Cloud Engineer and assist the VP, Information Systems in establishing a practical development path.
• Provide technical guidance to the Service Desk and improve escalation procedures, troubleshooting documentation, and knowledge articles.
• Coordinate with business stakeholders, consultants, vendors, and IT leadership on cloud projects, priorities, service changes, and recovery requirements.
• Create and maintain clear SOPs, architecture decisions, runbooks, and operating documentation as part of normal delivery.

Qualifications:

Required:

• Five or more years of progressively responsible Microsoft 365 administration and engineering experience, including senior-level design, implementation, and troubleshooting.
• Advanced experience with Microsoft 365, Entra ID, Intune, Exchange Online, Teams, SharePoint Online, OneDrive, and Windows Autopilot.
• Experience administering Azure services relevant to identity, automation, monitoring, application integrations, backup, recovery, and Microsoft cloud operations, together with strong PowerShell automation skills.
• Experience designing, documenting, and testing backup, restoration, and recovery capabilities for Microsoft 365 or comparable enterprise cloud platforms.
• Demonstrated ability to translate business and recovery requirements into scalable, secure, supportable, and operationally sustainable technical solutions.
• Strong documentation, stakeholder communication, troubleshooting, mentoring, and vendor-management skills.
• Experience supporting multi-site organizations; manufacturing experience is preferred.

Preferred:

• Experience with Microsoft Defender, Purview, Power Platform governance, Copilot readiness, and Zero Trust architecture.
• Experience leading SharePoint Online governance or information architecture initiatives.
• Experience evaluating or administering Microsoft 365 backup platforms such as Barracuda, Veeam, Rubrik, CommVault, AvePoint, or comparable enterprise cloud backup solutions.
• Experience developing recovery runbooks and participating in disaster-recovery or business-continuity exercises.
• Working knowledge of recovery point objectives, recovery time objectives, service dependencies, restore validation, and recovery-testing evidence.
• Relevant Microsoft certifications such as Azure Administrator, Identity and Access Administrator, Endpoint Administrator, or Azure Solutions Architect.
• Experience supporting the Microsoft platform, identity, integration, security, or operational dependencies surrounding Dynamics 365 is a plus.

Core Competencies:

• Microsoft Cloud Platform Leadership
• Identity & Endpoint Management
• Cloud Resilience & Disaster Recovery
• Security, Risk Management & Governance
• Automation & Continuous Improvement
• Technical Mentorship & Stakeholder Partnership