Cloud Engineer

Position Summary

Applied Innovative Technologies, Inc. (AIT) is seeking a Senior Cloud Engineer specializing in Microsoft Azure and Microsoft 365. This role is designed for an experienced professional who will lead, manage, and optimize enterprise and government cloud environments. The position requires hands-on expertise in Azure infrastructure engineering, and Microsoft 365 administration. The successful candidate will ensure that cloud operations are secure, compliant, and efficient, meeting strict federal standards.

Location & Clearance Requirements

This is a hybrid position with on-site work required one day per week, in Washington, DC area. U.S. citizenship is required, as is the ability to obtain and maintain a federal clearance.

Department & Employment Type

The position is part of the Information Technology Operations department and is classified as full-time, senior technical operations.

Key Responsibilities

Azure Infrastructure Engineering & Operations

· Architect, configure, and maintain Microsoft Azure infrastructure (IaaS/PaaS) to ensure scalability, reliability, and performance.

· Administer Azure networking components, including VNets, network security groups (NSGs), DNS, private endpoints, load balancers, and firewalls.

· Set up and manage Azure Virtual Desktop (AVD), host pools, and FSLogix profiles.

· Deploy and maintain hybrid resources using Azure Arc and Recovery Services Vaults for backup and disaster recovery.

· Monitor and optimize Azure environments utilizing Azure Monitor, Log Analytics, and Application Insights.

· Implement governance through Azure Policies, Management Groups, and cost management reports.

· Troubleshoot complex issues related to connectivity, performance, and configurations.

Microsoft 365 Administration

· Act as a Global Administrator for Microsoft 365, overseeing licensing, services, and tenant configuration.

· Manage Exchange Online, SharePoint, OneDrive, and Teams to maintain optimal performance and security.

· Ensure integration between Microsoft 365 and Azure AD/Entra ID for identity and access management.

· Develop automation scripts using PowerShell and Graph API for account provisioning, reporting, and compliance.

Security, Compliance & Governance

· Implement and monitor security measures in line with CIS Benchmarks, FedRAMP, FISMA, and NIST standards.

· Administer Entra ID and Azure AD security features, including RBAC, PIM, SSO/SAML/OAuth, and application registrations.

· Conduct regular access reviews, audit logs analysis, and compliance assessments.

· Manage device and application compliance policies through Intune.

· Create and maintain Standard Operating Procedures (SOPs) for all cloud administration and security processes.

Monitoring, Troubleshooting & Support

· Provide Tier 3 support for Azure and Microsoft 365 environments.

· Troubleshoot issues related to DNS, authentication, device compliance, and user access.

· Perform root cause analysis for incidents and service disruptions.

· Maintain uptime and reliability of hybrid cloud systems through proactive monitoring.

Collaboration, Documentation & Training

· Work closely with cross-functional teams, including application developers, network engineers, and cybersecurity professionals.

· Maintain comprehensive documentation in SharePoint or CMDB for configurations, SOPs, and architecture diagrams.

· Develop and deliver training sessions on Microsoft 365 best practices and security awareness for users.

· Mentor junior engineers and support staff.

Qualifications

Education

· Associate's degree in computer science, Information Technology, or a related field

· Bachelor's degree in a relevant technical discipline.

Experience

· 8–10 years of progressive IT experience, including Azure and Microsoft 365 administration.

· At least 3 years of direct experience with Azure Government Cloud (GCC/GCC High) environments.

· Proven expertise in Azure networking, security, DNS, automation, and hybrid cloud integration.

· Strong background in Microsoft Intune device management and Microsoft 365 tenant administration.

· Familiarity with ServiceNow or similar ITSM tools for incident, problem, and change management.

· Experience developing and maintaining SOPs and operational documentation.

Technical Skills

Cloud Platforms

Microsoft Azure, Azure Arc, Microsoft 365

Identity & Access

Entra ID (Azure AD), RBAC, PIM, SSO/SAML/OAuth

Security & Compliance

FedRAMP, NIST 800-53, CIS Benchmarks

Automation

PowerShell, Azure CLI, Graph API

Monitorin

Azure Monitor, Application Insights, Log Analytics

Networking

TCP/IP, DNS, VPN, NSGs, Load Balancers, Azure Firewall

Device Management

Microsoft Intune, Endpoint Manager

Documentation

SharePoint, Visio, Markdown, CMDB

Ticketing Systems

ServiceNow, Jira, Azure DevOps

Certifications (Preferred)

· Microsoft Certified: Azure Administrator Associate (AZ-104)

· Microsoft Certified: Azure Solutions Architect Expert (AZ-305)

· Microsoft Certified: Microsoft 365 Identity and Services (MS-100)

· Microsoft Certified: Microsoft 365 Mobility and Security (MS-101)

· CompTIA Security+ or equivalent

Work Environment

· Federal agency environment with hybrid work arrangement—on-site one day per week.

· Strict adherence to change control and documentation procedures is required.

· Participation in after-hours support rotation may be necessary.

· Compliance with federal security and background investigation standards is mandatory.

Job Type: Full-time

Pay: $130, $148,000.00 per year

Benefits:

• Health insurance
• Paid time off

Application Question(s):

• Are you a US Citizen?

Experience:

• Azure Government Cloud (GCC or GCC High): 3 years (Required)
• architect & deployed production-grade Azure IaaS or PaaS : 5 years (Required)
• Global Administrator for a Microsoft 365: 7 years (Required)
• FedRAMP, FISMA, or NIST security controls: 7 years (Required)

Security clearance:

• Confidential (Required)

Work Location: In person