Senior Cloud Engineer

Position Summary

We are seeking a Senior Cloud Engineer to implement, operate, and continuously improve our Microsoft 365 and Azure environment. Working within the standards and roadmap set by IT leadership and cloud architecture, this role keeps the platform healthy, reliable, secure, and well-governed day to day — spanning Exchange Online, SharePoint Online, OneDrive, Teams, Intune, Entra ID, and Azure infrastructure services. The ideal candidate is deeply hands-on, comfortable owning delivery and operations end to end, and eager to contribute design recommendations while partnering closely with security, infrastructure, and end-user support teams.

Key Responsibilities

Microsoft 365 Platform Operations

• Administer and maintain Microsoft 365 services — Exchange Online, SharePoint Online, OneDrive, Teams, Purview, and Power Platform — in line with established governance standards.
• Configure and manage tenant settings, site and group provisioning, and lifecycle workflows following defined policies and naming/governance conventions.
• Execute platform upgrades, migrations, and feature rollouts (e.g., Copilot, new workloads, service retirements) according to the planned roadmap.
• Monitor licensing usage and recommend right-sizing and reclamation opportunities to control spend.

Identity, Devices & Endpoints

• Administer Entra ID (Azure AD) day to day: SSO, application provisioning, group management, and user lifecycle tasks.
• Manage Microsoft Intune for device configuration, compliance policies, application packaging and deployment, and Autopilot provisioning.
• Implement and maintain Conditional Access policies and identity governance controls as directed by the security team.

Azure Infrastructure & Automation

• Deploy and operate Azure infrastructure: virtual networks, virtual machines, storage, Azure Files, Azure Backup, Site Recovery, and PaaS services as required.
• Implement and maintain Infrastructure as Code using Bicep, ARM, or Terraform against established patterns.
• Build and maintain automation with PowerShell, Microsoft Graph, and Azure DevOps / GitHub Actions to reduce manual, repetitive operations.

Reliability, Monitoring & Support

• Own operational health of the cloud platform: proactive monitoring, alerting, capacity checks, patching, and backup verification.
• Serve as senior escalation point for cloud and endpoint issues, driving incidents to resolution and performing root-cause analysis.
• Maintain runbooks, configuration documentation, and knowledge-base articles for repeatable operations and handoff.

Collaboration

• Partner with security, infrastructure, and help desk teams to deliver a stable, well-governed cloud workplace.
• Contribute design and improvement recommendations to cloud architecture and IT leadership.
• Mentor junior engineers and administrators, and share operational best practices across the team.

Required Qualifications

• 5–7 years of hands-on experience administering and operating Microsoft 365 and Azure environments.
• Strong working knowledge of Exchange Online, SharePoint Online, OneDrive, and Teams administration.
• Solid experience with Entra ID (Azure AD), Conditional Access, and modern identity practices.
• Practical experience with Microsoft Intune for device and application management.
• Working knowledge of Azure infrastructure services (networking, compute, storage, backup/recovery).
• Proficiency with PowerShell and the Microsoft Graph for automation and reporting.
• Comfortable with Infrastructure as Code (Bicep, ARM, or Terraform) and source-controlled workflows.
• Bachelor's degree in a related field, or equivalent hands-on experience.

Preferred Qualifications

• Microsoft certifications such as MS-102, AZ-104, AZ-500, or MD-102.
• Experience operating a cloud-native (cloud-only) Microsoft 365 and Azure environment.
• Advanced networking expertise, with the ability to architect and stand up a complete network environment end to end — including segmentation, routing, VPN/connectivity, firewall policy, and secure cloud network design.
• Familiarity with endpoint security tooling and the Microsoft Defender suite.
• Exposure to Azure DevOps / GitHub Actions CI/CD pipelines.
• Experience supporting an organization through acquisition, migration, or tenant consolidation.