Senior Microsoft M365 and Azure Cloud Engineer

Clearwater; United States; On-site; USD 160,000 - 180,000; Full time

Benefits offered by this job

401(k) plan

Medical, dental, vision

Paid time off

Job summary

Clearwater is seeking an experienced M365 and Azure Engineer to manage and optimize our clients' Microsoft 365 and Azure-based infrastructure. You will oversee Entra ID, Intune, Purview, Defender, Exchange Online, SharePoint Online, Teams, and related security controls, ensuring reliability, security, and scalability.

The role requires strong automation skills with PowerShell and Graph API, RBAC, and Azure Monitor, along with hands-on experience in security posture management and cost

Qualifications

• At least 5 years of experience with M365 and Azure client operations.
• At least 2 years experience with other Azure components.
• Preferred: 2 years in cybersecurity.
• One or more Microsoft Azure certifications.
• Strong understanding of M365 services including Intune and MDM.

Responsibilities

• Manage M365 and Azure client operations configurations and policies.
• Administer Entra ID, Intune, Purview, Defender and Exchange Online.
• Configure SharePoint/OneDrive permissions and Teams governance.
• Implement automation with PowerShell and Graph API.
• Monitor security posture and incident response integration.

Skills

M365

Azure

Entra ID

Intune

Purview

Exchange Online

SharePoint Online

OneDrive

Teams

Defender/XDR

PowerShell

Graph API

RBAC

Azure Monitor

Education

Bachelor's degree in Computer Science/IT

Tools

Microsoft Entra ID

Intune

Azure Policy

ExpressRoute/VPN

Job description

Position Summary

The ideal candidate will have a strong background in Microsoft 365 Configuration and Management and significant experience with Azure operational tools such as Entra ID and Intune. As an Engineer, you will play a crucial role in managing and maintaining our client’s M365 and Azure-based infrastructure, ensuring its reliability, security, and scalability.

Specific Job Responsibilities

• M365 and Azure Client Operations Management:
  • Microsoft Entra ID — day-to-day identity management: Conditional Access policies, SSPR, PIM (Privileged Identity Management), directory sync (Entra Connect / Cloud Sync), B2B/B2C configurations, app registrations, enterprise app management
  • Microsoft Intune — device enrollment (BYOD + corporate), compliance policies, configuration profiles, app deployment, co-management with SCCM if applicable, Autopilot
  • Microsoft Purview — data classification, sensitivity labels, DLP policies, insider risk management, communication compliance, audit log review
  • Exchange Online — mail flow rules, connectors, hybrid config, anti-spam/anti-phishing policies (Defender for Office 365)
  • SharePoint Online & OneDrive — permissions governance, external sharing controls, tenant-level configuration
  • Microsoft Teams — policy management, governance (lifecycle, guest access, DLP integration)
  • Microsoft 365 Defender / Defender XDR — incident response integration, alert triage, threat hunting basics

Azure Operation Management

• Azure IaaS/PaaS operations — Setup VMs, VNets, NSGs, storage accounts, Key Vault
• Entra ID integration with Azure resources – Setup RBAC, managed identities, configure service principals
• Azure Policy and Defender for Cloud – Perform and monitor compliance posture management
• Hybrid connectivity — Setup ExpressRoute, VPN Gateways, Azure Arc
• PowerShell / Microsoft Graph API — Enable Automation of both Azure and M365 workloads using Graph
• Azure Monitor, Log Analytics, Sentinel

Infrastructure Optimization

• Continuously monitor and optimize Azure resources to minimize costs while maximizing performance and efficiency.
• Identify and implement automation opportunities using PowerShell scripts, ARM templates, or other cloud-based automation tools.
• Maintain cloud network configurations and network diagrams.

Security And Compliance

• Familiarity with key Azure security tools such as Defender Suite, Sentinel and Purview
• Implement security best practices and ensure compliance with industry standards and regulatory requirements within the Azure environment.
• Manage access control and identity management within Azure Active Directory.

Documentation

• Maintain detailed documentation of configurations, procedures, and troubleshooting steps for Azure infrastructure.

Experience Required

• At least 5 years of experience working directly with M365 and Azure Client Operations Tools
• At least 2 years of experience working with other Azure components
• Preferred, at least 2 years of experience in cybersecurity.
• One or more certifications in Microsoft Azure
• Strong understanding of M365 services and including Intune and Mobile Device Management (MDM).

Qualifications, Skills, & Knowledge

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience).
• At least 5 years of experience working directly with M365 and Azure Client Operations Tools
• At least 2 years of experience working with other Azure components
• Preferred, at least 2 years of experience in cybersecurity.
• One or more certifications in Microsoft Azure
• Strong understanding of M365 services and including Intune and Mobile Device Management (MDM).
• Administrative experience with multiple operating systems, including Windows, MacOS, Linux, Android, and iPhone OS.
• Familiarity with networking concepts, including VPNs, firewalls, and DNS.
• Experience with virtual machines, storage, networking, security, and database services.
• Background with Active Directory Services, including DNS, DHCP, and DFS.
• Demonstrated ability to maintain cloud network configurations and network diagrams.
• Proficiency in scripting or automation (e.g., PowerShell, CLI).
• Excellent communication and collaboration skills
• Ability to work in a fast-paced and dynamic environment.
• Self-motivated with the ability to work independently or in a team.
• Flexible schedule to accommodate client service hours.
• Strong organizational and multitasking skills.

The base salary range for this role is $160,000-180,000. Base salary is part of our total rewards package which also includes the opportunity for merit-based salary increases, eligibility for our 401(k) plan, medical, dental, vision, life and disability insurances and leaves provided in line with your work state. Our robust time-off policy includes flexible paid time off, 11 paid holidays, and paid sick time. Total compensation, including base salary to be offered, will depend on elements unique to each candidate, including applicable candidate experience, skills, education and other factors permitted by law.

Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed.

Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Recruiting team if you need any assistance completing any forms or to otherwise participating in the application process.

Mental/Physical Requirements: Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.

Salary Description

[update per job]

Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed.

Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Recruiting team if you need any assistance completing any forms or to otherwise participating in the application process.

Mental/Physical Requirements: Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.