Cloud Solutions Associate

CSUSA is one of the nation's largest and fastest-growing K-12 education management organizations, committed to operational excellence and innovation across our network of schools and support teams. We invest in technology that empowers our people and improves outcomes for students and educators alike. Our Cloud team plays a central role in that mission building and maintaining the infrastructure, applications, and cloud systems that keep our organization running.

To join a team of people with the mission:
Relentless Commitment to Student Greatness in School and in Life™. If you love supporting the teams that make education work and want to put students first, CSUSA is the right place for you. We deliver on our promise of Strong Minds, Good Hearts™ through an education model that gives every student the opportunity for success.

The Cloud Solutions Associate takes ownership of cloud operations, infrastructure delivery, and security posture across CSUSA's cloud environment. In this role, you will independently manage cloud services including Microsoft 365, Azure, and other cloud platforms; drive resolution of complex technical issues; lead infrastructure projects; and maintain a strong, compliant security posture across our cloud ecosystem. A successful candidate brings demonstrated experience in cloud administration and security, strong problem-solving capabilities, and the ability to operate with minimal supervision in a dynamic, multi-school environment.

• Administer and maintain Microsoft 365 services across the organization, including Exchange Online, Teams, SharePoint, One Drive, and Intune.
• Own and execute user onboarding and offboarding workflows within M365, including license assignment, mailbox provisioning, and group membership management.
• Monitor M365 service health proactively; investigate, remediate, and document anomalies and recurring issues.
• Own the triage, tracking, and resolution of M365-related support tickets; communicate status and outcomes clearly to stakeholders.
• Leverage Power Shell and Microsoft Graph API to automate M365 administrative tasks and reporting.

• Administer Identity and Access Management (IAM) operations in Okta and Microsoft Entra , including user provisioning, SSO configuration, Conditional Access policies, and MFA enforcement.
• Manage user lifecycle workflows across multiple tenants, ensuring accurate access provisioning, role assignments, and timely deprovisioning.
• Maintain and audit IAM policies, group memberships, and application integrations to enforce least-privilege access across the organization.
• Troubleshoot and resolve IAM-related issues including SSO failures, MFA challenges, and access conflicts in a timely manner.

• Manage email security operations using Proofpoint, including maintaining and tuning filtering policies, reviewing quarantined messages, and leading threat response when needed.
• Monitor and maintain the security posture of CSUSA's cloud environment, applying security best practices across M365, Azure, and connected platforms.
• Implement and enforce security controls including Conditional Access policies, data loss prevention (DLP) rules, and compliance configurations within Microsoft Purview and Entra .
• Participate in security incident triage and response, contributing to containment, investigation, and documentation efforts.
• Ensure adherence to company security policies, compliance requirements, and regulatory guidelines across all cloud platforms.
• Provision, configure, and manage virtual machines (VMs), containers, and related compute resources across Azure and other cloud platforms.
• Manage Azure storage solutions including Blob storage, file shares, and backup configurations, ensuring data availability and retention compliance.
• Monitor and manage cloud cost efficiency, including resource rightsizing, reserved instance planning, and identification of unused or underutilized resources.
• Design and implement infrastructure configurations for SaaS applications using automation and infrastructure as code (IaC) practices (Terraform, Bicep, ARM, or equivalent).
• Deploy and…