Defender for Cloud Engineer

The Office of Education Technology, Division of School Technology Services has received approval to fill Cloud Engineer Senior Contractor Position #14 for the purpose and bill rate as described below. This role offers a hybrid work location schedule in accordance with our state's telework policy, ideally suited for individuals who can be present on-site weekly.

Cloud Engineer - Senior Position #14 Purpose: The role will service as our Connected User Experience System ( CUES) service lead along with supporting services across Google Workspace, Microsoft 365, Microsoft Entra ID, Azure AD Connect or successor synchronization technologies, DNS, DHCP, and other critical identity and security platforms. This position maintains and supports the directory, identity, provisioning, and security services that KDE provides to Kentucky's 171 school districts and KDE employees. This position will support approximately 180 domains serving more than 750,000 users, and the transition to modern cloud-based identity, provisioning, authentication, and access management services. This position will assist with sustaining current operations, supporting migration planning and execution, and ensuring continuity of service during and after transition. This role may occasionally require work outside standard business hours to ensure proper system functioning and timely completion of critical deliverables, as determined by the manager and in accordance with organizational policies.

Description Serve as the CUES service lead between KDE operations teams, Infinite Campus (IC), Tyler Technologies (Munis), and Identity Automation (Rapid Identity) to ensure alignment of integrations, requirements, and service delivery. Coordinate ongoing communication, issue resolution, and roadmap alignment across all partners. Lead and support operational and service migration from legacy Active Directory-based provisioning to modern cloud identity and related cloud services. Work with internal operations teams to manage incidents, changes, and service improvements impacting these connected systems. Support implementation and enhancement efforts related to CUES, including identity provisioning, system integrations, and API/connectivity changes across IC, Tyler, and Rapid Identity platforms. Manage and support current provisioning services from MS AD forest to multiple Entra ID tenants through Azure AD Connect or successor synchronization technologies. Serve as a project resource for major directory, identity, cloud provisioning, and modernization initiatives supporting Kentucky K-12 school districts. Provide operational support and management for the KY K-12 Enterprise environments while it remains in service, including coordination with partners to support stabilization, migration readiness, and eventual decommissioning activities. Provide ongoing support for the integration of Google Workspace and Microsoft 365, including daily, weekly, monthly, and annual monitoring and maintenance tasks for cloud identity, provisioning, licensing, synchronization, and collaboration services. Monitor, configure, and troubleshoot DNS and DHCP infrastructure, ensuring performance, security, and readiness for changes associated with AD decommissioning and cloud identity modernization. Perform other duties as assigned, including documentation, operational readiness, stakeholder coordination, and transition support related to identity modernization and legacy service retirement. Additional information: 300 Sower Blvd. 4th floor, Frankfort, KY 40601- is the address, correct? KDE Response: Yes, the Sower Building located at 300 Sower Blvd. - 4th floor, Frankfort, KY 40601 is the onsite address for position #14. How many days onsite ? KDE Response: This role offers a flexible hybrid schedule in accordance with our state's telework policy, ideally suited for individuals who can be present on-site weekly. For Rapid Identity, Infinite Campus, and Munis, do candidates need direct hands-on experience with those exact platforms, or would you consider someone with strong IAM provisioning and integration experience who has worked with comparable platforms? KDE Response: This role will be directly working with these companies so direct hands-on experience will be a of greater importance than with other platforms. Would you consider a candidate who has strong Microsoft Entra ID, Active Directory, Azure AD Connect, IAM provisioning, , but has not worked directly with Rapid Identity or Munis or K 12 experience? KDE Response This role will also be working with the Microsoft ecosystem so that will be beneficial but K-12 experience is of greater importance. What level of candidate are you looking for -someone who can administer these technologies, someone who can independently troubleshoot complex issues, or someone who can architect and lead the migration. KDE Response: This role will need to be troubleshoot, be creative problem solvers, as well as have the skills to lead this migration. Is Active Directory migration experience a must-have, or can strong cloud identity experience substitute? KDE Response: This role needs a strong cloud identity experience above AD migration knowledge. What part of the current AD-to-GSPS/Azure migration will this person own? KDE Response: This role will be a part of a team working on our migrations and daily operations. Which cloud platforms are truly required Azure, Google Cloud, or both? KDE Response: This role requires knowledge of both Microsoft and Google to be truly an effective candidate. Does the candidate need to troubleshoot DNS and DHCP independently or understand them at a supporting level? KDE Response: This role will need to know how to troubleshoot and understand how DNS & DHCP function within an ecosystem.

For applications and inquiries, contact:View email address on us.fitly.work