Senior Microsoft Cloud Engineer

All Native Group, The Federal Services Division of Ho-Chunk Inc.; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

All Native Group, a division of Ho Chunk, Incorporated, seeks a Senior Microsoft Cloud Engineer to design, implement, and operate the Microsoft 365, Azure, and Security stack for the Congressional Budget Office. This role requires expertise in hybrid identities and security controls in a high-sensitivity environment.

You will manage Intune/Autopilot at scale, Defender, Sentinel, and Purview configurations, and deliver Power BI dashboards for health and spend while supporting audits and

Qualifications

• Minimum 8 years of senior-level enterprise Microsoft cloud engineering across M365, Azure and Microsoft Security.
• Proven Intune and Autopilot management for environments of at least 700 endpoints.
• Experience with Entra ID, Conditional Access, PAM, and multi-provider MFA integration.
• Hands-on Defender, Sentinel, and Purview configuration and operations.

Responsibilities

• Design, implement, operate, and optimize M365, Azure, and Microsoft Security services for reliability and performance.
• Administer a hybrid Active Directory / M365 / Entra environment with a tiered security model.
• Configure Defender, Sentinel, and Purview for threat protection and data governance.
• Develop automated reporting and dashboards using Power BI for health, spend, and utilization.

Skills

M365 engineering

Azure engineering

Microsoft Security

Identity management

Automation

Power BI

Graph API

Documentation

Playbooks

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Intune

Autopilot

Entra ID

Conditional Access

PAM

M365 Admin Center

Job description

All Native Group, a division of Ho Chunk, Incorporated, is seeking an exceptional Senior Microsoft Cloud Engineer to provide advanced engineering, operational, and advisory support for the Congressional Budget Office's (CBO) Microsoft cloud environments, including Microsoft 365, Azure, and Microsoft Security platforms. The Senior Microsoft Cloud Engineer ensures a resilient, scalable, and secure cloud environment aligned with NIST SP 800-53, NIST SP 800-207 Zero Trust Architecture, and FedRAMP Moderate requirements, applying least privilege, continuous verification, and conditional access throughout.

Essential Functions

• Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services for reliability, scalability, and performance.
• Implement and maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate requirements.
• Administer a hybrid Active Directory / M365 / Entra environment implementing Microsoft's tiered security model.
• Create and manage Windows, macOS, and Apple iOS devices in Intune, including compliance and policy delivery, and Autopilot image and software delivery for environments of at least 700 endpoints.
• Lock down remote PowerShell administrative access across Entra, Azure, and Microsoft Graph APIs, including headless Exchange Online provisioning and SharePoint profile imports.
• Administer identity and access management with Entra ID, Conditional Access, and privileged access management, including MFA provider transitions, third-party MFA, and Smart Card / FIDO key authentication across Windows and macOS.
• Manage Exchange Online, Microsoft Teams, SharePoint Online, and related M365 workloads.
• Configure and manage Microsoft Defender, Sentinel, and Purview for threat protection, data governance, information protection, and incident response readiness, including Sentinel data source health and log-quality alerting.
• Implement automated reporting and dashboards using Power BI, including systems health, compliance, current and forecasted spend, and utilization reporting.
• Configure Azure spending budgets with alerting and reporting that provide 90 days of lead time for overage decisions.
• Author incident response and disaster recovery playbooks that integrate with CBO's existing IR and COOP documentation.
• Serve as a senior technical advisor supporting audits, assessments, and compliance reviews, operating with minimal supervision.

Competencies

• Expert‑level Microsoft 365, Azure, and Microsoft Security engineering.
• Advanced identity, endpoint, and information‑protection skills.
• Automation and reporting proficiency (PowerShell, Graph, Power BI).
• Independent judgment and technical authority.
• Strong technical documentation and playbook authoring.

Supervisory Responsibility

This position involves executive oversight of multiple program portfolios and senior management teams.

Work Environment

This job operates in executive settings with frequent engagement at the highest levels of government leadership. This role uses executive office equipment and classified communication systems.

Physical Demands

The physical demands are typical of executive positions, with extensive travel and high‑stress decision‑making requirements. While performing the duties of this job, the employee is regularly required to talk or hear.

Position Type / Expected Hours of Work

This is a full‑time executive position with flexible hours based on mission requirements.

Travel

Extensive travel is expected for this position.

Experience

• Minimum of 8 years of senior‑level enterprise Microsoft cloud engineering experience across M365, Azure, and Microsoft Security.
• Proven Intune and Autopilot management for environments of at least 700 endpoints.
• Demonstrated Entra ID, Conditional Access, PAM, and multi‑provider MFA implementation experience.
• Hands‑on Defender, Sentinel, and Purview configuration and operations experience.

Education

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience.

Additional Eligibility Qualifications

• Microsoft 365 Certified: Administrator Expert
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft 365 Certified: Endpoint Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft 365 Certified: Teams Administrator Associate
• Microsoft Certified: Information Security Administrator Associate

Certifications (or their equivalent prior certifications) must have been maintained for a minimum of 5 years. Expired certifications or certifications never used professionally will not be considered. Candidates should provide 2 to 4 short examples of personally written technical documents, not to exceed 5 pages total.

Security Clearance

Must be a U.S. citizen or permanent resident. Position requires a Public Trust Tier 2 clearance. Selected candidate must obtain favorable FBI criminal history and fingerprint checks conducted through the U.S. Capitol Police prior to starting work, and pass a background check to access the CBO network.

AAP/EEO Statement

All Native Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. However, preference may be extended to persons of Indian descent in accordance with applicable laws.