Senior Microsoft Cloud Engineer

ABOUT US:

CMT Services Inc. is a dynamic and small business supporting Federal, State, and Local government agencies. As an SBA-certified HUBZone, Woman Owned Small Business (WOSB), we deliver quality, professional services to support the missions and strategic business goals of our clients.

Position Title: Senior Microsoft Cloud Engineer

Location: Congressional Budget Office, Ford House Office Building, 4th Floor, 2nd St SW, 441 D St SW, Washington, DC 20024

Period of Performance: 08/15/2026 - 08/14/2031

Place of Performance: Remote work is authorized under this contract; however, at CBO’s discretion, contractor employees may be required to work on-site at CBO facilities without reimbursement for related travel or expenses.

Security Clearance: Public Trust (Tier
2)

Citizenship: U.S. Citizenship or Permanent Residence status

Position Summary: The Senior Microsoft Cloud Engineer provides advanced engineering, operational, and advisory support for CBO’s Microsoft cloud environments — Microsoft 365, Azure, and Microsoft Security platforms. Designs, implements, maintains, and optimizes secure cloud services aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate, applying Zero Trust, least privilege, continuous verification, and conditional access across tenant management, Azure infrastructure and application support, Exchange Online and collaboration services, identity and access management, and security controls (Microsoft Defender, Entra , Purview).

Key Responsibilities:

• Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services.
• Implement/maintain cloud security controls aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate.
• Administer/secure identity via Microsoft Entra , Conditional Access, privileged access controls, and least-privilege models.
• Manage Exchange Online, Teams, SharePoint Online, and related collaboration/messaging services.
• Provide Azure infrastructure, networking, and application workload support, including hybrid integration.
• Configure/manage Microsoft Defender, Purview, and related platforms for threat protection, data governance, and IR readiness.
• Support formal change management; maintain technical documentation and SOPs.
• Serve as senior technical advisor to CBO stakeholders; support audits, assessments, and compliance reviews.

Required Qualifications:

• Senior-level technical leadership and independent operational support for enterprise MS cloud (M365, Azure, MS Security), with currently maintained Microsoft certifications in all related areas for ≥5 years.
• Proven expertise designing, implementing, operating, and optimizing Microsoft cloud services for high availability, scalability, performance, and mission alignment.
• Ability to implement/maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate (continuous monitoring, risk mitigation, posture management).
• Advanced ability to implement/manage a hybrid Active Directory / M365 / Entra environment using Microsoft’s tiered security standards.
• Proven experience creating/managing Windows, macOS, and Apple iOS devices in Intune (compliance and policy delivery).
• Proven experience with Autopilot OS image delivery and policy/on‑demand software delivery via Intune for environments of ≥700 endpoints.
• Practical experience locking down remote Power Shell admin access in Entra/Azure across related APIs — headless Exchange Online mailbox provisioning, SharePoint custom user‑profile field imports, and Microsoft Graph access.
• Advanced IAM — Entra , Conditional Access, PAM, least-privilege; MFA provider transitions with minimal impact; 3rd-party MFA as an Entra provider;
  Smart Card and FIDO key authentication across Windows and macOS.
• Experience supporting Exchange Online, Microsoft Teams, SharePoint Online, and related M365 workloads.
• Azure infrastructure/application support — cloud networking, workload configuration, maintenance, troubleshooting, hybrid integration.
• Hands‑on configuration/management of Microsoft Defender, Sentinel, and Purview (threat protection, data governance, information protection, IR readiness).
• Ability to manage Sentinel data…