Senior Cloud Engineer

Job Description

Teledyne IT Shared Services is seeking an experienced Senior Cloud Engineer to join the Enterprise Infrastructure Solutions team. This role is responsible for designing, implementing, and administering enterprise cloud and identity platforms that support Teledyne's global workforce and business units. The Senior Cloud Engineer will take ownership of critical identity and access management systems, Microsoft 365 services, enterprise PKI infrastructure, and security governance programs across a complex, multi‑tenant environment.

The ideal candidate brings deep hands‑on expertise in Microsoft cloud technologies, a strong security mindset, and the ability to drive enterprise‑scale projects with minimal supervision. Experience supporting acquisition and divestiture activities in a large enterprise environment is a plus.

• Serve as a primary administrator for Microsoft Entra  (Azure AD) and on‑premises Active Directory in a hybrid enterprise environment
• Design, implement, and maintain Conditional Access policies to enforce M365 app access controls for Entra‑registered and compliant devices
• Manage device registration and enrollment policies across Workspace ONE‑managed and hybrid‑joined endpoints
• Support and administer SSO integrations via ADFS, SAML, LDAP, and Entra‑based federation
• Lead or contribute to migration efforts from legacy ADFS to Azure‑native authentication

• Lead enterprise deployment and ongoing management of Windows Hello for Business
• Enforce biometric enrollment policies via GPO and Intune, scoped to eligible security groups and hardware
• Develop and deploy compliance monitoring and remediation scripts to inventory and validate authentication methods across endpoints

• Administer the enterprise M365 environment including Exchange Online, SharePoint, One Drive, and Teams
• Manage M365 licensing, tenant configuration, and service health across commercial and GCC‑High environments
• Support Microsoft Purview sensitivity label management, data governance, and information protection policies
• Provide M365 technical leadership during acquisition and divestiture activities including tenant migrations and data transitions

• Implement and administer Cyber Ark Venafi as the enterprise certificate lifecycle management platform
• Manage certificate template creation, issuance, and decommissioning of legacy ADCS templates
• Integrate certificate lifecycle workflows with Service Now for automated request, approval, and tracking

• Design and enforce browser extension governance frameworks including inventory, GPO controls, and Service Now‑based approval workflows
• Manage Microsoft Store application control policies and enterprise software distribution security
• Administer Cyber Ark Workforce Password Management (WPM) at enterprise scale
• Support CMMC, NIST 800‑171, and ITAR compliance requirements as they relate to identity and cloud infrastructure
• Respond to cybersecurity audits, questionnaires, and compliance inquiries related to identity and cloud platforms

• Administer Microsoft Teams and Slack at enterprise scale, including governance, lifecycle management, channel migration, and workspace consolidation
• Enforce naming conventions and manage workspace hygiene across collaboration platforms

• Develop and maintain Power Shell and Python scripts to automate tasks across identity, cloud, and security domains
• Leverage web APIs, reporting tools, and SQL‑based queries for monitoring, reporting, and platform integration
• Deploy automation and remediation scripts via Intune and endpoint management tooling

• Provide technical leadership for IT integration and separation projects including directory consolidation, tenant migrations, network transitions, and application cutovers
• Coordinate with internal teams, business leadership, and external partners throughout M&A activities

• Bachelor's degree in Computer Science, Information Technology, or a related field;…