Enterprise Cloud Engineer

The Enterprise Cloud Engineer is responsible for administering and securing Microsoft 365 services, including Entra ID, Intune, Exchange Online, Teams, OneDrive, and SharePoint Online. This role ensures high availability, governance, and security of the organization’s cloud collaboration and identity platforms. The engineer also helps plan and implement policies and procedures to align with company goals, industry best practices, and regulatory requirements.

ESSENTIAL DUTIES AND RESPONSIBILITIES (and other duties as assigned)

• Perform and support capacity planning to aid in the development of long‑term strategic goals for Microsoft 365 services such as Exchange Online, OneDrive, Teams, and SharePoint Online.
• Perform cloud security analysis, evaluate configurations, and provide recommendations for Microsoft 365, Entra ID, and Windows 10/11 environments in alignment with the company’s Cloud Cyber Risk Framework. This includes Microsoft Defender for Cloud Apps, Microsoft 365 Defender, Microsoft Information Protection (MIP), Conditional Access policies, Intune, Microsoft Defender for Cloud, and Microsoft Defender for Endpoint.
• Lead migration efforts to Microsoft 365 cloud services for newly acquired companies. This includes tenant‑to‑tenant migrations, on‑premises Exchange to Exchange Online, or Google Workspace to Microsoft 365.
• Design, implement, and maintain cloud‑specific security policies, standards, and procedures, including tenant management, auditing and monitoring, security incident management, data protection (DLP and encryption), user and administrator account management, and conditional access controls.
• Support hybrid IT environments by integrating on‑premises identity and collaboration systems with Microsoft 365 services.
• Act as the primary point of contact and subject matter expert for Microsoft 365 services, including Entra ID, Intune, Exchange Online, Teams, OneDrive, and SharePoint Online.
• Write, maintain, and execute custom PowerShell scripts to automate administrative tasks and remediate issues.
• Monitor service health, review performance logs, and proactively optimize Microsoft 365 and Mimecast service performance and security.
• Ensure the integrity and security of enterprise data in compliance with business, privacy, and regulatory requirements.
• Develop, document, and maintain policies, procedures, and associated training plans for Microsoft 365 administration and governance.

EDUCATION and/or EXPERIENCE

1. Five (5) years' experience with email systems and supporting services including Exchange, Office 365, Active Directory and Azure Active Directory.
2. Five (5) years of senior-level (tier 2 or 3) administration and engineering experience in an enterprise IT environment, having performed operational and break/fix activity along with engineering and design
3. Four (4) years of hands-on technical experience in Identity and Access Management (IAM) on Active Directory (Integration, consolidation), Microsoft Information Protection and other O365 security and compliance technologies
4. Three (3) years of hands-on technical experience with enterprise-level systems management systems such as SCCM and endpoint engineering, or Mobile Device Management (e.g., Intune) implementation or operations, preferred but not required.
5. Knowledge of industry best practices for email routing, filtering, monitoring, tiered storage, backups, and disaster recovery.
6. Strong knowledge of Microsoft security solutions (Defender suite, Conditional Access, Intune).
7. Experience with tenant migrations and hybrid identity integration.
8. Proficiency in PowerShell scripting for automation and administration.

NOTE: This document does not create an employment contract, implied or otherwise. The statements contained herein are intended to describe the principal functions of this position, the level of knowledge and skill typically required, and the scope of responsibilities but should not be considered an all-inclusive listing of work requirements.

ASRC is a drug-free workplace and pre-employment drug testing is part of the hiring process.

ASRC and its family of companies is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, national origin, religion, disability, protected veteran status, age or any other legal protected status. EOE: M|F|D|V EEO Poster

Arctic Slope Regional Corporation, an Inupiat-owned corporation created as a result of the Alaska Native Claims Settlement Act.

ASRC's family of companies apply a shareholder preference in employment, to the maximum extent feasible, as authorized by law.