Microsoft Cloud Engineer

Two Five Solutions LLC Microsoft Cloud Engineer Washington, DC
· Full time Company website

Two Five Solutions is hiring a Microsoft Cloud Engineer to build and support Microsoft 365 and Azure environments — both GCC High and commercial — for our defense industrial base and regulated commercial clients. You'll stand up new tenants, run migrations, and serve as Tier 2/3 escalation across our client base, working out of our Washington, DC office. This role requires 5+ years of hands‑on Microsoft 365 and Azure experience;

GCC High, NIST/CMMC exposure, and Microsoft certifications are a plus. It's a chance to build depth in both commercial and government cloud — a combination the market under prices — at a firm small enough that your work is visible.

Two Five is a cybersecurity and automation solutions firm that helps organizations operate smarter, scale faster, and grow securely. We deliver expert solutions across Governance, Risk & Compliance (GRC), Managed Services, Strategic Consulting, and Innovation & Automation. By combining deep technical knowledge with business‑first thinking, we empower our clients to reduce risk, streamline operations, and unlock the full potential of AI and automation.

Whether you're building secure infrastructure, navigating compliance, or accelerating transformation, Two Five is your trusted partner for resilient growth.

The role

Two Five Solutions runs managed IT, managed security, and CMMC 2.0 compliance programs for defense industrial base contractors and regulated commercial firms. Our client environments span Microsoft GCC High, Azure Government, and commercial Microsoft 365 and Azure — and we build them, migrate into them, and operate them end to end.

We need an engineer who can do both halves of that: stand up new environments — GCC High and commercial tenants, Azure landing zones, identity and endpoint baselines — and carry Tier 2/3 support across the client base once they're live. You will be a senior technical resource on the delivery team, working escalations the service desk can't close and running buildout projects with real delivery dates.

This is not a Tier 1 helpdesk role. Ticket intake and first response stay with our service desk; you take what escalates and you build what's new.

What you'll own

Environment buildouts and migrations (~40%). New Microsoft 365 tenants in GCC High and Commercial, Azure and Azure Government landing zones, Entra  Intune baselines, tenant‑to‑tenant migrations, and the integration of acquired companies' users, devices, and data. These are scoped, billable projects — you own the delivery.

Tier 2/3 support across the client base (~40%). Escalations from the service desk across Microsoft 365, Entra , Intune, Exchange Online, Defender, and Azure infrastructure — in both GCC High and commercial tenants. You diagnose, resolve, and document so the same issue doesn't elevate twice.

Standards and hardening (~10%). Keep client tenants aligned to our configuration baselines — Conditional Access, device compliance, endpoint hardening — and flag drift before it becomes a finding or an incident.

Runbooks and documentation (~10%). Every environment you build gets a runbook. Every escalation pattern you resolve gets a knowledge‑base article the analyst tier can use.

What you need

• 5+ years of hands‑on Microsoft work — administering and engineering Microsoft 365 and Azure in a managed services, systems engineering, or internal IT role. This is the requirement; everything below describes what that experience should look like.
• Tenant buildout experience: you have stood up Microsoft 365 tenants and Azure environments from nothing, not just administered ones someone else built
• Entra l Access, MFA design,…