Microsoft Cloud Engineer

Job Title:

Microsoft Cloud Engineer

Location:

Washington DC (Onsite)

Red Cedar is seeking Microsoft Cloud professionals to design, implement, secure, and support Microsoft 365, Azure, and Microsoft Security environments. Candidates should have expertise in Azure, Entra , Exchange Online, Teams, SharePoint, Defender, Purview, and cloud security, with experience supporting NIST, Zero Trust, and FedRAMP compliance in enterprise environments.

• Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services to ensure reliability, scalability, and performance.
• Implement and maintain cloud security controls aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and FedRAMP Moderate requirements.
• Administer Microsoft Entra , Conditional Access, privileged access controls, and least-privilege access models.
• Manage and support Exchange Online, Microsoft Teams, SharePoint Online, and related Microsoft 365 collaboration services.
• Provide Azure infrastructure, networking, application workload, maintenance, troubleshooting, and hybrid integration support.
• Configure and manage Microsoft Defender, Microsoft Sentinel, Microsoft Purview, and related security platforms.
• Support formal change management processes and maintain technical documentation, training materials, and standard operating procedures.
• Serve as a senior technical advisor, collaborating with engineering, network, and cybersecurity teams.
• Design, implement, and manage hybrid Active Directory, Microsoft 365, and Microsoft Entra environments.
• Create and manage Windows, macOS, and Apple iOS devices using Microsoft Intune, including compliance policies and policy delivery.
• Configure and manage Windows Autopilot deployments and Intune software delivery for environments supporting at least 700 endpoints.
• Secure remote Power Shell administration across Entra, Azure, Exchange Online, SharePoint, and Microsoft Graph APIs.
• Implement and manage MFA transitions, third-party MFA integration, Smart Card authentication, and FIDO-based authentication across Windows and macOS.
• Configure Microsoft Sentinel data sources, health monitoring, alerting, and log ingestion quality.
• Develop Power BI dashboards and automated reporting for systems health, compliance, Azure spending, utilization, and forecasting.
• Configure Azure budgets, spending alerts, and reporting with 90-day advance notification of projected overages.
• Develop incident response and disaster recovery playbooks integrated with existing IR and COOP documentation.
• Support audits, assessments, compliance reviews, and operational continuity activities.
• Perform operational changes during weekends or after-hours as required to minimize business disruption.

• Demonstrated senior-level technical leadership supporting enterprise Microsoft 365, Azure, and Microsoft Security environments.
• Current Microsoft certifications in all related areas maintained for a minimum of five (5) years.
• Proven expertise designing, implementing, operating, and optimizing Microsoft cloud services.
• Experience implementing cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and FedRAMP Moderate requirements.
• Advanced experience implementing and managing hybrid Active Directory, Microsoft 365, and Microsoft Entra environments utilizing Microsoft's tiered security framework.
• Proven experience managing Windows, macOS, and Apple iOS devices using Microsoft Intune.
• Proven experience deploying Windows Autopilot and Intune software delivery for environments with at least 700 endpoints.
• Practical experience securing remote Power Shell administration across Entra, Azure, Exchange Online, SharePoint, and Microsoft Graph APIs.
• Advanced expertise in Microsoft Entra , Conditional Access, privileged access management, least-privilege access models, MFA implementation and migration, third-party MFA integration, Smart Card authentication, and FIDO-based authentication.
• Experience supporting Exchange Online, Microsoft Teams, SharePoint Online, and related Microsoft 365 workloads.
• Experience supporting Azure infrastructure, networking, workloads, troubleshooting, and hybrid integrations.
• Hands‑on experience configuring and managing Microsoft Defender, Microsoft Sentinel, and Microsoft Purview.
• Experience configuring Microsoft Sentinel data sources, monitoring ingestion health, and alerting.
• Experience supporting formal change management processes and producing technical documentation, training materials, and standard operating procedures.
• Ability to act as a senior technical advisor supporting engineering teams, audits, assessments, and compliance reviews.
• Ability to perform duties independently with minimal supervision while maintaining a secure, resilient, and compliant Microsoft cloud environment.
• Experience implementing Power BI reporting and dashboards for systems health, compliance, utilization, and Azure cost reporting.
• Proven experience configuring Azure budgets, spending…