Senior Microsoft Cloud Engineer

All Native Group; Washington (District of Columbia); On-site; USD 170,000 - 210,000; Full time

Job summary

All Native Group is seeking a Senior Microsoft Cloud Engineer to provide advanced engineering, operational, and advisory support for the Congressional Budget Office’s Microsoft cloud environments, including M365, Azure, and Microsoft Security platforms.

The role focuses on building a resilient, scalable, and secure cloud aligned with NIST SP 800-53, NIST SP 800-207 Zero Trust Architecture, and FedRAMP Moderate requirements, applying least privilege, continuous verification, and conditional

Qualifications

• 8+ years of senior-level enterprise Microsoft cloud engineering experience across M365, Azure, and Microsoft Security.
• Proven Intune and Autopilot management for environments of at least 700 endpoints.
• Experience with Entra ID, Conditional Access, PAM, and multi-provider MFA.
• Hands-on Defender, Sentinel, and Purview configuration and operations experience.

Responsibilities

• Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services for reliability and performance.
• Implement and maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate requirements.
• Administer a hybrid Active Directory / M365 / Entra environment with Microsoft’s tiered security model.
• Create and manage devices in Intune including Autopilot image and software delivery for environments of at least 700 endpoints.
• Configure and manage Defender, Sentinel, and Purview for threat protection and data governance.
• Manage Exchange Online, Teams, SharePoint Online, and related M365 workloads.
• Author incident response and disaster recovery playbooks that integrate with client IR/COOP docs.
• Serve as a senior technical advisor supporting audits, assessments, and compliance reviews.

Skills

Microsoft 365

Azure

Microsoft Security

Identity & Access

Power BI

Graph API

Zero Trust

NIST 800-53

Documentation

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field

Tools

Intune

Autopilot

Entra ID

Conditional Access

PAM

Defender

Sentinel

Purview

Power BI

Graph API

Exchange Online

Job description

Summary

All Native Group, a division of Ho Chunk, Incorporated, is seeking an exceptional Senior Microsoft Cloud Engineer to provide advanced engineering, operational, and advisory support for the Congressional Budget Office's (CBO) Microsoft cloud environments, including Microsoft 365, Azure, and Microsoft Security platforms. The Senior Microsoft Cloud Engineer ensures a resilient, scalable, and secure cloud environment aligned with NIST SP 800-53, NIST SP 800-207 Zero Trust Architecture, and FedRAMP Moderate requirements, applying least privilege, continuous verification, and conditional access throughout.

Essential Functions

• Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services for reliability, scalability, and performance.
• Implement and maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate requirements.
• Administer a hybrid Active Directory / M365 / Entra environment implementing Microsoft's tiered security model.
• Create and manage Windows, macOS, and Apple iOS devices in Intune, including compliance and policy delivery, and Autopilot image and software delivery for environments of at least 700 endpoints.
• Lock down remote PowerShell administrative access across Entra, Azure, and Microsoft Graph APIs, including headless Exchange Online provisioning and SharePoint profile imports.
• Administer identity and access management with Entra ID, Conditional Access, and privileged access management, including MFA provider transitions, third‑party MFA, and Smart Card / FIDO key authentication across Windows and macOS.
• Manage Exchange Online, Microsoft Teams, SharePoint Online, and related M365 workloads.
• Configure and manage Microsoft Defender, Sentinel, and Purview for threat protection, data governance, information protection, and incident response readiness, including Sentinel data source health and log‑quality alerting.
• Implement automated reporting and dashboards using Power BI, including systems health, compliance, current and forecasted spend, and utilization reporting.
• Configure Azure spending budgets with alerting and reporting that provide 90 days of lead time for overage decisions.
• Author incident response and disaster recovery playbooks that integrate with CBO's existing IR and COOP documentation.
• Serve as a senior technical advisor supporting audits, assessments, and compliance reviews, operating with minimal supervision.

Competencies

• Expert-level Microsoft 365, Azure, and Microsoft Security engineering.
• Advanced identity, endpoint, and information‑protection skills.
• Automation and reporting proficiency (PowerShell, Graph, Power BI).
• Independent judgment and technical authority.
• Strong technical documentation and playbook authoring.

Supervisory Responsibility

This position involves executive oversight of multiple program portfolios and senior management teams.

Work Environment

This job operates in executive settings with frequent engagement at the highest levels of Navy leadership. This role uses executive office equipment and classified communication systems.

Physical Demands

The physical demands are typical of executive positions, with extensive travel and high‑stress decision‑making requirements. While performing the duties of this job, the employee is regularly required to talk or hear.

Position Type/Expected Hours of Work

This is a full‑time executive position with flexible hours based on mission requirements.

Travel

Extensive travel is expected for this position.

Experience

• Minimum of 8 years of senior‑level enterprise Microsoft cloud engineering experience across M365, Azure, and Microsoft Security.
• Proven Intune and Autopilot management for environments of at least 700 endpoints.
• Demonstrated Entra ID, Conditional Access, PAM, and multi‑provider MFA implementation experience.
• Hands‑on Defender, Sentinel, and Purview configuration and operations experience.

Education

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience.

Additional Eligibility Qualifications

• Microsoft 365 Certified: Administrator Expert
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft 365 Certified: Endpoint Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft 365 Certified: Teams Administrator Associate
• Microsoft Certified: Information Security Administrator Associate

Certifications (or their equivalent prior certifications) should have been maintained for a minimum of 5 years. Expired certifications or certifications never used professionally will not be considered. Candidates should provide 2 to 4 short examples of personally written technical documents, not to exceed 5 pages total.

Drug Free Workplace

All Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre‑employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

Security Clearance

Must be a U.S. citizen or permanent resident. Position requires a Public Trust Tier 2 clearance. Selected candidate must obtain favorable FBI criminal history and fingerprint checks conducted through the U.S. Capitol Police prior to starting work, and pass a background check to access the CBO network.

AAP/EEO Statement

All Native Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. However, preference may be extended to persons of Indian descent in accordance with applicable laws.

About Ho-Chunk, Inc. & All Native Group

Ho-Chunk, Inc. is an award‑winning economic development corporation of the Winnebago Tribe of Nebraska. Our mission is to provide long‑term economic development for the Winnebago Tribe and job opportunities for Tribal members.

All Native Group

All Native Group is a network of small businesses that support the critical missions of various U.S. Government customers. Our capabilities include telecommunications, health, logistics, specialized training, professional services, and IT solutions. Since earning our first federal contract in 2004, we have continued to grow and diversify our services while maintaining a strong commitment to excellence. As a tribally owned organization, All Native Group operates multiple subsidiary businesses, providing clients with the advantages of working with a small business while leveraging the resources and expertise of a larger, established company.

• Native American Owned & Proud – Serving the Winnebago Tribe of Nebraska.
• Accountable – To always do what’s right.
• Team‑Focused – For inclusive progress.
• Innovative – In creating solutions.
• Visionary – In our purpose and direction.
• Excellence – Through learning and performance.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.