Senior Cloud Engineer

Job Overview

• Serve as a primary administrator for Microsoft Entra  (Azure AD) and on-premises Active Directory in a hybrid enterprise environment
• Design, implement, and maintain Conditional Access policies to enforce M365 app access controls for Entra-registered and compliant devices
• Manage device registration and enrollment policies across Workspace ONE-managed and hybrid-joined endpoints
• Support and administer SSO integrations via ADFS, SAML, LDAP, and Entra-based federation
• Lead enterprise deployment and ongoing management of Windows Hello for Business
• Enforce biometric enrollment policies via GPO and Intune, scoped to eligible security groups and hardware
• Develop and deploy compliance monitoring and remediation scripts to inventory and validate authentication methods across endpoints
• Administer the enterprise M365 environment including Exchange Online, SharePoint, One Drive, and Teams
• Manage M365 licensing, tenant configuration, and service health across commercial and GCC-High environments
• Provide M365 technical leadership during acquisition and divestiture activities including tenant migrations and data transitions
• Implement and administer Cyber Ark Venafi as the enterprise certificate lifecycle management platform
• Manage certificate template creation, issuance, and decommissioning of legacy ADCS templates
• Integrate certificate lifecycle workflows with Service Now for automated request, approval, and tracking
• Design and enforce browser extension governance frameworks including inventory, GPO controls, and Service Now-based approval workflows
• Manage Microsoft Store application control policies and enterprise software distribution security
• Administer Cyber Ark Workforce Password Management (WPM) at enterprise scale
• Support CMMC, NIST 800-171, and ITAR compliance requirements as they relate to identity and cloud infrastructure
• Respond to cybersecurity audits, questionnaires, and compliance inquiries related to identity and cloud platforms
• Administer Microsoft Teams and Slack at enterprise scale, including governance, lifecycle management, channel migration, and workspace consolidation
• Enforce naming conventions and manage workspace hygiene across collaboration platforms
• Develop and maintain Power Shell and Python scripts to automate tasks across identity, cloud, and security domains
• Leverage web APIs, reporting tools, and SQL-based queries for monitoring, reporting, and platform integration
• Deploy automation and remediation scripts via Intune and endpoint management tooling
• Provide technical leadership for IT integration and separation projects including directory consolidation, tenant migrations, network transitions, and application cutovers
• Coordinate with internal teams, business leadership, and external partners throughout M&A activities

• Bachelor's degree in Computer Science, Information Technology, or a related field; equivalent work experience considered
• 7–10 years of progressive experience in cloud infrastructure, identity management, or enterprise IT engineering
• Demonstrated experience managing enterprise Microsoft cloud environments at scale
• Microsoft 365 administration — Exchange Online, SharePoint, One Drive, Teams, licensing, and tenant management
• Microsoft Entra  (Azure AD) and on-premises Active Directory configuration and administration in hybrid environments
• Azure cloud platform management including compute, networking, storage, and identity services
• Windows Server administration and Group Policy management
• Multi-factor authentication technologies including Microsoft Authenticator, DUO, and FIDO2/Windows Hello
• Collaboration platform administration — Microsoft Teams and Slack governance at enterprise scale
• Proficiency in scripting and automation using Power Shell and/or Python
• Strong understanding of enterprise security principles, identity governance, and Zero Trust architecture.