Senior Microsoft Platforms Engineer

**Active Top Secret (TS) with SCI eligibility based on a Single Scope Background Investigation (SSBI)**

Program Overview

CRS is seeking a Senior Microsoft Platforms Engineer to support execution of a Blanket Purchase Agreement (BPA) delivering Enterprise Knowledge Management (EKM) services to a U.S. Combatant Command headquartered at MacDill Air Force Base in Tampa, Florida. The BPA supports the Command Headquarters, its Component Commands, and its Theater Special Operations Commands (TSOCs), spanning multiple CONUS and OCONUS locations across a broad Area of Responsibility (AOR) and operating across unclassified and classified networks.

This position leads platform engineering services for the program and provides senior engineering support to low-code application development, data governance and integration, and records and repository management. The Senior Microsoft Platforms Engineer is the technical authority for the enterprise KM platform estate across unclassified and classified networks.

Position Summary

The Senior Microsoft Platforms Engineer shall engineer, configure, and sustain the enterprise KM technical ecosystem, using current and emerging technologies including enterprise collaboration platforms, MS SharePoint (on-premises 2016, 2019, and Subscription Edition, and SharePoint Online), M365 services, and the MS Power Platform (Power Apps, Power Automate, Power BI, and Copilot). The individual shall use these platforms to build secure, authoritative systems in accordance with Command governance and DevSecOps standards.

The individual shall set the platform patterns, governance guardrails, and administrative practices the rest of the technical team builds within, shall lead escalated troubleshooting and upgrade planning, and shall mentor engineers assigned to the program.

Key Responsibilities

• Engineer, configure, and sustain the enterprise KM technical ecosystem across MS SharePoint (on-premises 2016, 2019, and Subscription Edition, and SharePoint Online), M365 services, and the MS Power Platform, in accordance with Command governance and DevSecOps standards.
• Engineer authoritative, process-aligned knowledge systems by configuring platforms and applications to operate as authoritative destinations for creating and capturing actionable knowledge aligned to enterprise workflows and decision cycles.
• Apply Command content governance in every solution — taxonomy, metadata, naming conventions, version control, and content lifecycle rules that meet Command and Service KM and RM standards.

Design for discoverability and secure access by improving enterprise search, indexing, and navigation, and by enforcing role- or attribute-based access and zero-trust principles so the right people have the right access at the right time.

• Establish reusable components and low-code patterns on the Power Platform and M365 to reduce one-off builds and accelerate delivery to Components and TSOCs.
• Integrate decision-support features including dashboards, task trackers, timelines, and workflow views that identify validated, authoritative information for leader decisions.
• Embed DevSecOps and compliance in platform work: secure configuration practices, change control, and records identification for platform configurations and operational artifacts, aligning to Electronic Records Management System (ERMS) usage and disposition schedules where applicable.
• Define and enforce Power Platform environment strategy, connector approvals, and data loss prevention policies, and align every solution to Command content and RM practices.
• Deliver all platform configurations and custom-developed code with unlimited Government data rights to maximize internal component reuse and maintainability.
• Lead system administration and sustainment — configuration upkeep, health monitoring, permissions oversight, and the planning, coordination, and execution of patches, updates, and upgrades with minimal operational disruption.
• Resolve escalated system issues, workflow failures, access problems, and performance anomalies, and monitor system logs, audit trails, and usage patterns to validate compliance and proper functioning.
• Produce solution runbooks, governance guides, configuration documentation, and administrator and user training that reinforce KM competencies and platform adoption.
• Coordinate with the Headquarters, Components, and TSOCs to ensure solutions conform to KM policy, architecture standards, and EKM Working Group outputs, and mentor junior engineers on platform patterns and governance.

Required Qualifications

The following qualifications are mandatory for this position:

• Shall be a U.S. citizen and shall possess an active Top Secret (TS) clearance with eligibility to SCI based on a Single Scope Background Investigation (SSBI).
• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline; additional directly relevant experience may substitute for the degree.
• A minimum of eight (8) years engineering and administering Microsoft collaboration platforms, including at least five (5) years across both SharePoint on-premises farms and SharePoint Online.
• Demonstrated expertise across the M365 suite and the Power Platform (Power Apps, Power Automate, Power BI), including environment strategy, connector governance, and data loss prevention policy.
• Experience implementing role-based or attribute-based access control and zero-trust access principles in an enterprise tenant.
• DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE), or the ability to obtain it prior to receiving privileged access.

Desired Qualifications

The following qualifications are strongly desired and will be viewed favorably:

• Experience supporting a Combatant Command, SOF, or Intelligence Community organization across NIPRNet, SIPRNet, and SCI-level networks.
• Microsoft role-based certifications (e.g., MS-102 Microsoft 365 Administrator Expert, PL-600 Power Platform Solution Architect, AZ-104 Azure Administrator).
• Experience with Microsoft Purview, Content Manager, or a comparable ERMS for authoritative record capture and disposition.
• Experience applying DISA Security Technical Implementation Guides (STIGs) and remediating vulnerabilities on SharePoint and M365 workloads.
• Experience with MS SQL Server, MS Dynamics 365, and the MS Business Language Stack.
• Experience deploying and governing Copilot in a controlled enterprise environment.
• Experience migrating content between SharePoint versions or from legacy repositories at enterprise scale.
• Agile or Scrum experience delivering platform work in sprints.

Attributes of a Successful Candidate

• Treats governance and security as design constraints to engineer around, not paperwork to complete afterward.
• Builds patterns other engineers can reuse instead of bespoke solutions only the author understands.
• Steady under escalation — methodical when an enterprise platform is degraded and leadership is watching.
• Generous mentor who raises the technical floor of the whole team.
• Comfortable working across unclassified and classified networks and adapting to the security constraints each environment imposes.