Sr Cloud Engineer

Delan Associates, Inc; Arlington (VA); Ibrido; USD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

Tek Office in Arlington, VA is seeking a Senior Cloud Engineer specializing in Microsoft 365/Entra to manage and optimize the organization’s tenants, focusing on Exchange Online, identity, security, and collaboration services.

The role requires advanced Microsoft 365 administration skills, scripting and automation, and collaboration with security and networking teams; hybrid work requires three days in Crystal City office with occasional travel.

Competenze

• Bachelor’s degree in Computer Science, Computer Engineering, or related discipline with significant IT experience.
• Master’s degree with at least 7 years of relevant IT experience or 15 years of industry experience.
• Hands-on Microsoft 365 and Entra ID administration in mid-to large-enterprise environments (5+ years).
• Exposure to Azure DevOps, GitHub, or similar tools for infrastructure-as-code and pipelines.
• Strong knowledge of KQL for Defender, Sentinel, or Log Analytics.
• Expertise with Exchange Online configuration, mail flow, and security/compliance.

Mansioni

• Design, configure, and administer Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Copilot, and security features.
• Harden Entra ID (Azure AD) including conditional access, identity protection, app registrations, and role-based access control.
• Own Exchange Online: mail flow, transport rules, connectors, hybrid connectivity, and troubleshooting.
• Investigate incidents and develop detections using Microsoft 365 Defender, Purview, and Log Analytics.
• Collaborate with security and networking to implement security baselines, DLP, retention, eDiscovery, and auditing.
• Develop automation, scripts, and integrations to streamline administration, reporting, and provisioning.
• Contribute to CI/CD and infrastructure-as-code (Azure DevOps, GitHub) for 365 configurations.
• Work with containerized workloads (Kubernetes) integrated with M365/Entra for identity and access control.
• Lead incident response and root-cause analyses for M365 and identity-related events.
• Produce documentation, runbooks, and diagrams for 365 and Entra services.
• Mentor junior staff on governance, best practices, and operational excellence.

Conoscenze

Effective communication

Independent work

Multitasking in a fast-paced env

Analytical thinking

Identity and access concepts

PowerShell automation

Security and governance in M365

Container platforms (Kubernetes/AKS)

Microsoft Graph API for automation

SIEM experience (Microsoft Defender/SI

Formazione

Bachelor’s degree in Computer Science, Computer Engineering, or related discipline

Master’s degree with at least 7 years of relevant experience

At least 15 years of relevant industry experience

Strumenti

Azure DevOps

GitHub

KQL

Microsoft Graph API

Descrizione del lavoro

About the job

Client's Tek Office is seeking an experienced Senior Cloud Engineer with a focus on Microsoft 365/Entra to join its diverse and talented group. The Senior Cloud Engineer manages and optimizes the organization’s Microsoft 365 and Entra ID tenants, with primary responsibility for Exchange Online, identity, security, and collaboration services. This role requires advanced skills in Microsoft 365 administration, investigation, and strong cross-platform experience, with the ability to drive automation and modern cloud practices. This position reports to the Director of IT Infrastructure Operations.

This position offers hybrid work flexibility, requiring three days per week in Client's Crystal City, Virginia office, with occasional travel for meetings, training sessions, and conferences.

Key Responsibilities:

The key responsibilities for the position include, but are not limited to:

• Design, configure, and administer Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Copilot, and related security/compliance features.
• Administer and harden Entra ID (Azure AD), including conditional access, identity protection, app registrations, and role‑based access control.
• Own Exchange Online configuration: mail flow, transport rules, connectors, policies, hybrid connectivity, and advanced troubleshooting of mail delivery issues.
• Investigate incidents, identify patterns, and develop detection queries and reports leveraging Microsoft 365 Defender, Purview, and Log Analytics.
• Collaborate with security and networking teams to implement and maintain security baselines, DLP, retention, eDiscovery, and auditing across the M365 environment.
• Develop and maintain automation, scripts, and integrations to streamline administration, reporting, and provisioning.
• Contribute to CI/CD and infrastructure‑as‑code practices (e.g., Azure DevOps, GitHub) for Microsoft 365 configuration and related workloads.
• Work with containerized and cloud workloads (e.g., Kubernetes) where they integrate with M365/Entra for identity, security, or application access.
• Lead complex incident response and root‑cause analysis for M365 and identity‑related outages and security events.
• Produce and maintain technical documentation, standards, runbooks, and architectural diagrams for Microsoft 365 and Entra services.
• Mentor junior collaborators and provide guidance on best practices, governance, and operational excellence.

Qualifications:

Education, Knowledge, and Experience:

• Bachelor’s degree in Computer Science, Computer Engineering, or related discipline and at least 9 years of relevant experience in the IT industry, or a master’s degree with at least 7 years of relevant experience, or at least 15 years of relevant industry experience.
• At least 5 years experience of hands‑on administration experience with Microsoft 365 and Entra ID in a mid‑ to large‑enterprise environment.
• Exposure to Azure DevOps, GitHub, or similar tools to manage scripts, pipelines, and infrastructure‑as‑code definitions for Microsoft 365.
• Strong experience using KQL in Microsoft 365 Defender, Sentinel, or Log Analytics to query logs, create custom detections, and analyze security or operational events.
• Demonstrated expert‑level experience with Exchange Online: mail flow troubleshooting, advanced transport configuration, security and compliance policies, and integration with third‑party services.

Skills

• Effective communicator with demonstrated ability to communicate with and understand the needs of both technical and non-technical internal and external clients.
• Demonstrated ability to work well independently, and collaboratively as needed.
• Adept in a fast-paced environment to manage multiple concurrent deliveries.
• Demonstrated analytical, critical thinking, and problem-solving skills with a focus on detail and high quality.
• Deep understanding of identity and access concepts: SSO, OAuth/OIDC, federation, conditional access, MFA, and privileged identity management.
• Proficiency with PowerShell for automation, bulk operations, and configuration management in Microsoft 365 and Entra ID.
• Solid knowledge of security, compliance, and governance capabilities in M365 (e.g., DLP, retention, eDiscovery, audit, safe links/attachments).
• Familiarity with container platforms (e.g., Kubernetes/AKS) and how they integrate with Entra ID for identity and access control.
• Experience using Microsoft Graph API for automation, integration, and advanced reporting scenarios is preferred.
• Experience with Microsoft Sentinel or similar SIEM platforms for M365 and Entra monitoring and analytics is preferred.
• Experience with LSoft List-Plex is preferred.
• Passion for the craft with a demonstrated ability to learn and understand the technology both at a high level and at a detailed level.