Senior Microsoft Cloud Engineer

CMT Services, Inc.; Washington (District of Columbia); Hybrid; USD 140,000 - 190,000; Full time

Job summary

CMT Services, Inc. is seeking a Senior Microsoft Cloud Engineer to design, implement, operate, and optimize Microsoft 365, Azure, and security platforms for the Congressional Budget Office.

This role emphasizes FedRAMP Moderate controls, NIST alignment, and a hybrid Active Directory/Entra environment—along with device management via Intune and security across Defender/Purview. Candidates should have 5+ years of enterprise MS cloud leadership, current Microsoft certifications, and the ability to

Qualifications

• Senior MS cloud leadership with 5+ years in enterprise environments.
• Experience designing and operating MS cloud services with high availability and security.
• Proficiency implementing NIST/FedRAMP Moderate controls and hybrid IAM.
• Strong ability to produce technical documentation and SOPs for audits.

Responsibilities

• Design, implement, operate, and optimize Microsoft 365, Azure, and security services.
• Apply cloud security controls aligned with NIST SP 800-53, 800-207, and FedRAMP Moderate.
• Manage Identity via Entra ID, Conditional Access, PAM, and least-privilege models.
• Administer Exchange Online, Teams, SharePoint Online, and related services.
• Provide Azure infrastructure support, including hybrid integration and networking.
• Configure Defender, Purview, and related platforms for threat protection and data governance.
• Support change management; maintain technical documentation and SOPs.
• Advise stakeholders; support audits, assessments, and compliance reviews.

Skills

Senior-level leadership

Cloud security design

Hybrid AD / M365 / Entra

IAM & MFA management

Threat protection

Documentation & SOPs

Audits & compliance

Power BI dashboards

Education

Bachelor’s degree in Computer Science or IT related

Microsoft 365 Certified: Administrator Expert

Microsoft Certified: Azure Solutions Architect Expert

Microsoft Certified: Identity and Access Administrator Associate

Tools

Microsoft 365

Azure

Microsoft Defender

Purview

Entra ID

Exchange Online

SharePoint Online

Teams

Intune

Power BI

Job description

ABOUT US:

CMT Services Inc. is a dynamic and small business supporting Federal, State, and Local government agencies. As an SBA-certified HUBZone, Woman Owned Small Business (WOSB), we deliver quality, professional services to support the missions and strategic business goals of our clients.

PositionTitle: Senior Microsoft Cloud Engineer

Location: Congressional Budget Office, Ford House Office Building, 4th Floor, 2nd St SW, 441 D St SW, Washington, DC 20024

Period of Performance: 08/15/2026 - 08/14/2031

Place of Performance: Remote work is authorized under this contract; however, at CBO’s discretion, contractor employees may be required to work on-site at CBO facilities without reimbursement for related travel or expenses.

Security Clearance: Public Trust (Tier 2)

Citizenship: U.S. Citizenship or Permanent Residence status

Position Summary: The Senior Microsoft Cloud Engineer provides advanced engineering, operational, and advisory support for CBO’s Microsoft cloud environments — Microsoft 365, Azure, and Microsoft Security platforms. Designs, implements, maintains, and optimizes secure cloud services aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate, applying Zero Trust, least privilege, continuous verification, and conditional access across tenant management, Azure infrastructure and application support, Exchange Online and collaboration services, identity and access management, and security controls (Microsoft Defender, Entra ID, Purview).

Key Responsibilities:

• Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services.
• Implement/maintain cloud security controls aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate.
• Administer/secure identity via Microsoft Entra ID, Conditional Access, privileged access controls, and least-privilege models.
• Manage Exchange Online, Teams, SharePoint Online, and related collaboration/messaging services.
• Provide Azure infrastructure, networking, and application workload support, including hybrid integration.
• Configure/manage Microsoft Defender, Purview, and related platforms for threat protection, data governance, and IR readiness.
• Support formal change management; maintain technical documentation and SOPs.
• Serve as senior technical advisor to CBO stakeholders; support audits, assessments, and compliance reviews.

Required Qualifications:

• Senior-level technical leadership and independent operational support for enterprise MS cloud (M365, Azure, MS Security), with currently maintained Microsoft certifications in all related areas for ≥5 years.
• Proven expertise designing, implementing, operating, and optimizing Microsoft cloud services for high availability, scalability, performance, and mission alignment.
• Ability to implement/maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate (continuous monitoring, risk mitigation, posture management).
• Advanced ability to implement/manage a hybrid Active Directory / M365 / Entra environment using Microsoft’s tiered security standards.
• Proven experience creating/managing Windows, macOS, and Apple iOS devices in Intune (compliance and policy delivery).
• Proven experience with Autopilot OS image delivery and policy/on‑demand software delivery via Intune for environments of ≥700 endpoints.
• Practical experience locking down remote PowerShell admin access in Entra/Azure across related APIs — headless Exchange Online mailbox provisioning, SharePoint custom user‑profile field imports, and Microsoft Graph access.
• Advanced IAM — Entra ID, Conditional Access, PAM, least-privilege; MFA provider transitions with minimal impact; 3rd-party MFA as an Entra provider; Smart Card and FIDO key authentication across Windows and macOS.
• Experience supporting Exchange Online, Microsoft Teams, SharePoint Online, and related M365 workloads.
• Azure infrastructure/application support — cloud networking, workload configuration, maintenance, troubleshooting, hybrid integration.
• Hands‑on configuration/management of Microsoft Defender, Sentinel, and Purview (threat protection, data governance, information protection, IR readiness).
• Ability to manage Sentinel data sources, including ingest log data‑quality health reporting and alerting.
• Ability to support formal change management; produce technical documentation, training materials, and SOPs.
• Capacity to act as a senior technical advisor on complex issues, audits, assessments, and compliance reviews; perform duties with minimal supervision and sound independent judgment.
• Implement automated Power BI reporting/dashboards — systems health, compliance, current and forecasted spend, and utilization across CBO’s Microsoft cloud.
• Proven experience configuring Azure spending budgets with alerting/reporting providing 90 days’ lead time for CBO decision‑making on overages.
• Implement IR and disaster‑response playbooks as practical procedural documents integrating into CBO’s existing IR and COOP documentation.

Education:

• Bachelor’s degree in Computer Science or IT related.

Certifications:

• Microsoft 365 Certified: Administrator Expert
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft 365 Certified: Endpoint Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft 365 Certified: Teams Administrator Associate
• Microsoft Certified: Information Security Administrator Associate

Required Documents:

• Letter of Commitment

Join Our Team:

At CMT Services, we believe that extraordinary results come from empowering exceptional people. If you're ready to lead innovative projects, solve complex challenges, and contribute to meaningful infrastructure development while advancing your career in a supportive, collaborative environment, we want to hear from you.

Disclaimer: By submitting your resume for this job posting, you authorize CMT Services, Inc. to forward your resume to all applicable internal and external managers, agencies, and recruitment personnel for review and consideration to hire.