Senior Microsoft Cloud Engineer

SummaryAll Native Group, a division of Ho Chunk, Incorporated, is seeking an exceptional Senior Microsoft Cloud Engineer to provide advanced engineering, operational, and advisory support for the Congressional Budget Office's (CBO) Microsoft cloud environments, including Microsoft 365, Azure, and Microsoft Security platforms. The Senior Microsoft Cloud Engineer ensures a resilient, scalable, and secure cloud environment aligned with NIST SP 800-53, NIST SP 800-207 Zero Trust Architecture, and FedRAMP Moderate requirements, applying least privilege, continuous verification, and conditional access throughout.Essential FunctionsDesign, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services for reliability, scalability, and performance.Implement and maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate requirements.Administer a hybrid Active Directory / M365 / Entra environment implementing Microsoft's tiered security model.Create and manage Windows, macOS, and Apple iOS devices in Intune, including compliance and policy delivery, and Autopilot image and software delivery for environments of at least 700 endpoints.Lock down remote PowerShell administrative access across Entra, Azure, and Microsoft Graph APIs, including headless Exchange Online provisioning and SharePoint profile imports.Administer identity and access management with Entra ID, Conditional Access, and privileged access management, including MFA provider transitions, third-party MFA, and Smart Card / FIDO key authentication across Windows and macOS.Manage Exchange Online, Microsoft Teams, SharePoint Online, and related M365 workloads.Configure and manage Microsoft Defender, Sentinel, and Purview for threat protection, data governance, information protection, and incident response readiness, including Sentinel data source health and log-quality alerting.Implement automated reporting and dashboards using Power BI, including systems health, compliance, current and forecasted spend, and utilization reporting.Configure Azure spending budgets with alerting and reporting that provide 90 days of lead time for overage decisions.Author incident response and disaster recovery playbooks that integrate with CBO's existing IR and COOP documentation.Serve as a senior technical advisor supporting audits, assessments, and compliance reviews, operating with minimal supervision.CompetenciesExpert-level Microsoft 365, Azure, and Microsoft Security engineering.Advanced identity, endpoint, and information-protection skills.Automation and reporting proficiency (PowerShell, Graph, Power BI).Independent judgment and technical authority.Strong technical documentation and playbook authoring.Supervisory ResponsibilityThis position involves executive oversight of multiple program portfolios and senior management teams. Work EnvironmentThis job operates in executive settings with frequent engagement at the highest levels of Navy leadership. This role uses executive office equipment and classified communication systems. Physical DemandsThe physical demands are typical of executive positions, with extensive travel and high-stress decision-making requirements. While performing the duties of this job, the employee is regularly required to talk or hear. Position Type/Expected Hours of WorkThis is a full-time executive position with flexible hours based on mission requirements. TravelExtensive travel is expected for this position. ExperienceMinimum of 8 years of senior-level enterprise Microsoft cloud engineering experience across M365, Azure, and Microsoft Security.Proven Intune and Autopilot management for environments of at least 700 endpoints.Demonstrated Entra ID, Conditional Access, PAM, and multi-provider MFA implementation experience.Hands-on Defender, Sentinel, and Purview configuration and operations experience.Education Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience.Additional Eligibility QualificationsMicrosoft 365 Certified: Administrator ExpertMicrosoft Certified: Cybersecurity Architect ExpertMicrosoft Certified: Azure Solutions Architect ExpertMicrosoft 365 Certified: Endpoint Administrator AssociateMicrosoft Certified: Identity and Access Administrator AssociateMicrosoft Certified: Windows Server Hybrid Administrator AssociateMicrosoft 365 Certified: Teams Administrator AssociateMicrosoft Certified: Information Security Administrator AssociateCertifications (or their equivalent prior certifications) should have been maintained for a minimum of 5 years. Expired certifications or certifications never used professionally will not be considered. Candidates should provide 2 to 4 short examples of personally written technical documents, not to exceed 5 pages total.Drug Free WorkplaceAll Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre-employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.Security ClearanceMust be a U.S. citizen or permanent resident. Position requires a Public Trust Tier 2 clearance. Selected candidate must obtain favorable FBI criminal history and fingerprint checks conducted through the U.S. Capitol Police prior to starting work, and pass a background check to access the CBO network.AAP/EEO Statement  All Native Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. However, preference may be extended to persons of Indian descent in accordance with applicable laws.About Ho-Chunk, Inc. & All Native GroupHo-Chunk, Inc. is an award-winning economic development corporation of the Winnebago Tribe of Nebraska. Our mission is to provide long-term economic development for the Winnebago Tribe and job opportunities for Tribal members.All Native Group is a network of small businesses that support the critical missions of various U.S. Government customers. Our capabilities include telecommunications, health, logistics, specialized training, professional services, and IT solutions. Since earning our first federal contract in 2004, we have continued to grow and diversify our services while maintaining a strong commitment to excellence. As a tribally owned organization, All Native Group operates multiple subsidiary businesses, providing clients with the advantages of working with a small business while leveraging the resources and expertise of a larger, established company. Our work is guided by our core NATIVE values:Native American Owned & Proud – Serving the Winnebago Tribe of Nebraska.Accountable – To always do what’s right.Team-Focused – For inclusive progress.Innovative – In creating solutions.Visionary – In our purpose and direction.Excellence – Through learning and performance.Other DutiesPlease note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.Job SummaryID: 2026-10455Company: HCI Management Services CompanyCategory: IT / Cyber Security / Network SystemsPosition Type: Regular Full-TimeRemote: No