Cloud Engineer

Location: Quinte Shores, East Northumberland County & Prince Edward County (Picton)

Planet Technologies, the Nation’s leading Microsoft services provider to the public sector, is looking for a highly motivated individual to join our growing team as Cloud Infrastructure Engineer. In this role, you will be supporting impactful projects that make a difference for our country.
The Senior Identity and Messaging Engineer is responsible for supporting, maintaining, securing, and enhancing enterprise identity and messaging services across on-premises and Microsoft cloud environments. This hands‑on role administers and engineers Microsoft Active Directory, Microsoft Entra , Exchange Server, Exchange Online, and the hybrid services that connect them in a complex federal environment.
Must have existing Top Secret and/or DOE Q Clearance
Responsibilities  Active Directory Administration & Engineering   Design, implement, configure, and maintain multi-domain and multi-forest Microsoft Active Directory Domain Services infrastructure, including trusts, Flexible Single Master Operations roles, domain controller lifecycle management, schema changes, functional-level upgrades, and disaster recovery.
Manage Domain Controllers, Group Policy Objects (GPOs), DNS, DHCP, Sites and Services, and Active Directory replication.
Perform schema modifications, forest and domain functional level upgrades, and disaster recovery planning.
Harden Active Directory using tiered administration, Local Administrator Password Solution, privileged access workstations, Microsoft Defender for Identity, and findings from tools such as Ping Castle and Purple Knight. Design, maintain, or support administrative forest and tiered administration architectures, and advise customers on transitioning from legacy ESAE or Red Forest models to Microsoft’s Enterprise Access Model where appropriate.
Monitor and optimize AD performance, health, and security.
Exchange Administration & Engineering   Administer and support Exchange Server 2016, Exchange Server 2019, Exchange Server Subscription Edition, and Exchange Online, including Database Availability Groups, transport services, certificates, cumulative updates, security updates, and high-availability configurations.
Manage mailbox provisioning, migrations, retention policies, archive solutions, and email routing.
Build, maintain, and troubleshoot Exchange hybrid deployments using the Hybrid Configuration Wizard, organization relationships, free/busy services, mail flow connectors, and centralized mail transport. Plan and execute remote-move, cutover, and cross-tenant mailbox migrations with minimal disruption to users.
Manage Exchange Online Protection and Microsoft Defender for Office 365, including SPF, DKIM, DMARC, transport rules, anti-spam, anti-phishing, and email encryption controls. Support retention, eDiscovery, litigation hold, journaling, and Microsoft Purview compliance workloads.
Support email continuity, backup, recovery, and high-availability configurations.
Identity & Access Management   Implement and support Microsoft Entra  (Azure Active Directory).
Deploy, configure, maintain, and troubleshoot Microsoft Entra Connect and Entra Cloud Sync, including scoping and filtering, attribute flow, source anchor decisions, synchronization monitoring, and error remediation.
Configure and troubleshoot hybrid authentication using Password Hash Synchronization, Pass-through Authentication, and Active Directory Federation Services, and support migrations away from federation where appropriate. Implement Single Sign-On, Conditional Access, Multi-Factor Authentication, Privileged Identity Management, and phishing-resistant authentication using PIV/CAC and certificate-based authentication.
Participate in identity governance and role-based access control initiatives.
Collaborate with…