Senior Microsoft M365 and Azure Cloud Engineer

Clearwater; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical/RX insurance

401K plan

Flexible Time Off

Job summary

Clearwater is seeking a Senior Microsoft 365 and Azure Cloud Engineer to manage M365 and Azure client environments. The role emphasizes Entra ID, Intune enrollment, and security governance across Purview, Defender, and DLP.

You will automate workloads with PowerShell and Graph, handle Exchange Online, SharePoint Online, and Teams configurations, and optimize costs while ensuring reliability and scalability. Remote role with light travel.

Qualifications

• 5+ years of direct M365 and Azure client operations experience.
• Strong knowledge of Entra ID, Intune and MDM concepts.
• Experience with security/compliance tools in Azure (Purview, Defender, DLP).
• Ability to automate using PowerShell or Graph API.

Responsibilities

• Manage M365 and Azure client operations, including Entra ID, Intune, Purview.
• Oversee Exchange Online, SharePoint Online, Teams governance and compliance.
• Administer Azure IaaS/PaaS, RBAC, Keys, and service principals.
• Develop automation for Azure and M365 workloads using PowerShell/Graph.
• Ensure security, monitoring (Monitor, Sentinel) and cost optimization.

Skills

5+ years experience with M365 & Azure

Automation & scripting

Security & compliance

Strong communication

Independent / team player

Education

Bachelor’s degree in Computer Science / IT or related field

Tools

Microsoft Entra ID

Microsoft Intune

Microsoft Purview

Exchange Online

SharePoint Online

OneDrive

Microsoft Teams

Azure Monitor

Log Analytics

Sentinel

Graph API

Job description

POSITION SUMMARY

Clearwater is seeking a skilled and experienced Senior Microsoft 365 and Azure Cloud Engineer to join our team. The ideal candidate will have a strong background in Microsoft 365 Configuration and Management and significant experience with Azure operational tools such as Entra ID and Intune. As an Engineer, you will play a crucial role in managing and maintaining our client’s M365 and Azure-based infrastructure, ensuring its reliability, security, and scalability.

SPECIFIC JOB RESPONSIBILITIES

M365 and Azure Client Operations Management:

• Microsoft Entra ID - day-to-day identity management: Conditional Access policies, SSPR, PIM (Privileged Identity Management), directory sync (Entra Connect / Cloud Sync), B2B/B2C configurations, app registrations, enterprise app management
• Microsoft Intune - device enrollment (BYOD + corporate), compliance policies, configuration profiles, app deployment, co-management with SCCM if applicable, Autopilot
• Microsoft Purview - data classification, sensitivity labels, DLP policies, insider risk management, communication compliance, audit log review
• Exchange Online - mail flow rules, connectors, hybrid config, anti-spam/anti-phishing policies (Defender for Office 365)
• SharePoint Online & OneDrive - permissions governance, external sharing controls, tenant-level configuration
• Microsoft Teams - policy management, governance (lifecycle, guest access, DLP integration)
• Microsoft 365 Defender / Defender XDR - incident response integration, alert triage, threat hunting basics

Azure Operation Management:

• Azure IaaS/PaaS operations - Setup VMs, VNets, NSGs, storage accounts, Key Vault
• Entra ID integration with Azure resources - Setup RBAC, managed identities, configure service principals
• Azure Policy and Defender for Cloud - Perform and monitor compliance posture management
• Hybrid connectivity - Setup ExpressRoute, VPN Gateways, Azure Arc
• PowerShell / Microsoft Graph API - Enable Automation of both Azure and M365 workloads using Graph
• Azure Monitor, Log Analytics, Sentinel

Infrastructure Optimization:

• Continuously monitor and optimize Azure resources to minimize costs while maximizing performance and efficiency.
• Identify and implement automation opportunities using PowerShell scripts, ARM templates, or other cloud-based automation tools.
• Maintain cloud network configurations and network diagrams.

Security and Compliance:

• Familiarity with key Azure security tools such as Defender Suite, Sentinel and Purview
• Implement security best practices and ensure compliance with industry standards and regulatory requirements within the Azure environment.
• Manage access control and identity management within Azure Active Directory.

Documentation:

• Maintain detailed documentation of configurations, procedures, and troubleshooting steps for Azure infrastructure.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent work experience).
• At least 5 years of experience working directly with M365 and Azure Client Operations Tools
• At least 2 years of experience working with other Azure components
• Preferred, at least 2 years of experience in cybersecurity.
• One or more certifications in Microsoft Azure
• Strong understanding of M365 services and including Intune and Mobile Device Management (MDM).
• Administrative experience with multiple operating systems, including Windows, MacOS, Linux, Android, and iPhone OS.
• Familiarity with networking concepts, including VPNs, firewalls, and DNS.
• Experience with virtual machines, storage, networking, security, and database services.
• Background with Active Directory Services, including DNS, DHCP, and DFS.
• Demonstrated ability to maintain cloud network configurations and network diagrams.
• Proficiency in scripting or automation (e.g., PowerShell, CLI).
• Excellent communication and collaboration skills
• Ability to work in a fast-paced and dynamic environment.
• Self-motivated with the ability to work independently or in a team.
• Flexible schedule to accommodate client service hours.
• Strong organizational and multitasking skills.

Work Environment:

• Currently, Clearwater is a "virtual" company, and all colleagues work remotely.
• Travel is required, estimated at less than 10% of the time.
• Colleagues are expected to provide their computer, printer/scanner, computer audio capability, cell phone, internet service, and Microsoft Office software.
• The company provides subscriptions to various tools, including Microsoft Online Services, Salesforce.com, Encryption tools, data backup and others selected as standard by the company.

Compensation & Benefits:

• Competitive base salary
• Participation in the company’s medical/RX, disability, life/ADD insurance, and 401K benefit programs.
• Flexible Time Off (FTO) vacation policy.

Join our dynamic team and help us maintain a secure, efficient, and highly available Azure infrastructure that supports our organization’s growth and innovation.

Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed.

Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Recruiting team if you need any assistance completing any forms or to otherwise participating in the application process.

Mental/Physical Requirements: Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.