What are the responsibilities and job description for the Microsoft Cloud Operations Engineering Services position at International Software Systems, Inc?
| Microsoft Cloud Operations Engineering Services |
| Senior Microsoft Cloud Engineer - |
| Requirements |
| Mandatory Experience |
| Minimum 8-10 years of experience administering and engineering Microsoft enterprise environments. |
| Extensive experience with Microsoft 365, Azure, Microsoft Entra ID, and Microsoft Security platforms. |
| Proven experience implementing and supporting Zero Trust Architecture principles, identity security, and least-privilege access models. |
| Advanced experience managing hybrid Active Directory, Azure AD (Entra ID), and Microsoft 365 environments. |
| Hands-on experience administering Microsoft Intune, Autopilot, endpoint compliance policies, device provisioning, and mobile device management. |
| Experience managing large-scale Windows, macOS, and mobile device environments. |
| Experience implementing and managing Conditional Access, MFA, FIDO authentication, smart cards, and privileged access controls. |
| Extensive experience with Exchange Online, Microsoft Teams, SharePoint Online, and Microsoft collaboration technologies. |
| Experience supporting Azure infrastructure, cloud networking, virtual machines, storage, and cloud-native services. |
| Hands-on experience with Microsoft Defender, Microsoft Sentinel, Microsoft Purview, and Microsoft security operations. |
| Experience integrating, monitoring, and managing security data sources and log analytics platforms. |
| Experience developing PowerShell automation, reporting solutions, and cloud administration scripts. |
| Experience developing Power BI dashboards, operational reporting, compliance reporting, and executive-level metrics. |
| Strong knowledge of NIST SP 800-53, NIST SP 800-207, FedRAMP Moderate controls, and federal cybersecurity requirements. |
| Experience supporting compliance audits, security assessments, and governance initiatives. |
| Excellent troubleshooting, documentation, communication, and leadership skills. |
| Education |
| Bachelor''s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Cloud Computing, or related field. |
| Master''s degree in Information Systems, Cybersecurity, Cloud Architecture, Business Technology, or related discipline is preferred. |
| Certification |
| The candidate(s) provided by the Contractor must have the following current Microsoft credentials: • Microsoft 365 Certified: Administrator Expert • Microsoft Certified: Cybersecurity Architect Expert • Microsoft Certified: Azure Solutions Architect Expert • Microsoft 365 Certified: Endpoint Administrator Associate • Microsoft Certified: Identity and Access Administrator Associate • Microsoft Certified: Windows Server Hybrid Administrator Associate • Microsoft 365 Certified: Teams Administrator Associate • Microsoft Certified: Information Security Administrator Associate |
| These (or their equivalent prior certifications) should have been maintained for a minimum of 5 years. Expired certifications or certifications never used professionally will not be considered. |
| Technology |
| • Microsoft 365, Microsoft Azure, Microsoft Entra ID (Azure Active Directory), Microsoft Intune • Windows Autopilot • Microsoft Defender Suite, Microsoft Sentinel, Microsoft Purview, Microsoft Teams • Exchange Online • SharePoint Online • OneDrive for Business • Azure Virtual Machines, Azure Networking, Azure Storage, Azure Governance • Conditional Access • Privileged Identity Management (PIM) • Multi-Factor Authentication (MFA) • FIDO Security Keys • Smart Card Authentication • PowerShell • Microsoft Graph API • Power BI • Azure Cost Management, Azure Monitor • Log Analytics • Windows Server • Active Directory • Hybrid Identity Solutions • Endpoint Management • Mobile Device Management (MDM) • NIST SP 800-53 • NIST SP 800-207 (Zero Trust Architecture) • FedRAMP Moderate • Incident Response and Disaster Recovery Planning |
| Scope of Work |
| Microsoft Cloud Platform Engineering: Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services to ensure reliability, scalability, and performance in support of CBO mission requirements. |
| Security Architecture & Compliance: Implement and maintain cloud security controls aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and FedRAMP Moderate requirements, including continuous monitoring, risk mitigation, and security posture management. |
| Identity & Access Management: Administer and secure identity services using Microsoft Entra ID, Conditional Access, privileged access controls, and least-privilege models in accordance with Zero Trust principles and Microsoft best practices. |
| Collaboration & Messaging Services: Manage and support Exchange Online, Teams, SharePoint Online, and related collaboration services, ensuring availability, security, and compliance with organizational policies. |
| Azure Infrastructure & Development Support: Provide engineering support for Azure infrastructure, networking, and application workloads, including configuration, maintenance, troubleshooting, and integration with on-premises or hybrid environments as applicable. |
| Security Operations Enablement: Configure and manage Microsoft Defender, Purview, and related security platforms to support threat protection, data governance, information protection, and incident response readiness. |
| Change Management & Documentation: Support formal change management processes, maintain technical documentation, and contribute to standard operating procedures to ensure transparency, traceability, and operational continuity. |
| Advisory & Technical Leadership: Serve as a senior technical advisor to CBO stakeholders, collaborating with network, cybersecurity, and cloud teams to resolve complex issues, improve architecture, and support audits, assessments, and compliance reviews. |
| Key Personnel Requirements |
| Demonstrated ability to provide senior-level technical leadership and independent operational support for enterprise Microsoft cloud environments, including Microsoft 365, Azure, and Microsoft Security platforms. This includes proof of currently maintained Microsoft certifications in all related areas for a period no less than 5 years. |
| Proven expertise in designing, implementing, operating, and optimizing Microsoft cloud services to ensure high availability, scalability, performance, and mission alignment. |
| Ability to implement and maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and FedRAMP Moderate requirements, including continuous monitoring, risk mitigation, and security posture management. |
| Advanced ability to fully implement and manage a hybrid Active Directory Microsoft M365 and Entra environment implementing the tiered security standards defined by Microsoft’s security framework. |
| Proven experience creating and managing all aspects of Windows, MacOS, and Apple iOS devices in Intune including compliance and policy delivery. |
| Proven experience creating and managing Autopilot delivery of operating system images and use of policy and on-demand delivery of software using Intune for environments of at least 700 endpoints. |
| Practical experience locking down remote PowerShell access for administrative tasks in Entra and Azure across all related APIs to allow necessary administration including headless Exchange Online mailbox provisioning, SharePoint custom user profile field imports, and all Microsoft Graph related access. |
| Advanced proficiency in identity and access management, including Microsoft Entra ID, Conditional Access, privileged access management, and least-privilege access models, including the implementation and minimal impact transition between MFA providers, implementation of 3rd party MFA as an Entra provider, and implementation of Smart Card and FIDO based key authentication methods across Windows and MacOS systems. |
| Experience managing and supporting collaboration and messaging services, including Exchange Online, Microsoft Teams, SharePoint Online, and related Microsoft 365 workloads. |
| Capability to provide Azure infrastructure and application support, including cloud networking, workload configuration, maintenance, troubleshooting, and hybrid integration where applicable. |
| Hands-on experience configuring and managing Microsoft security platforms, including Defender, Sentinel, and Purview, to support threat protection, data governance, information protection, and incident response readiness. |
| Demonstrated ability to manage and configure data sources feeding into Microsoft Sentinel including ongoing health reporting and alerting on ingest log data quality. |
| Ability to support and comply with formal change management processes, produce and maintain technical documentation, training materials, and contribute to standard operating procedures. |
| Demonstrated capacity to act as a senior technical advisor, collaborating with CBO engineering teams to resolve complex technical issues and support audits, assessments, and compliance reviews. |
| Ability to perform duties with minimal supervision, exercising sound independent judgment and technical authority in maintaining a secure, resilient, and compliant Microsoft cloud environment. |
| Implement automated reporting and dashboard creation using Power BI and other Microsoft tools. Reporting must include systems health monitoring, compliance reports, current spend and forecasted spend reports, and utilization reports across all aspects of CBO’s Microsoft cloud infrastructure. |
| Must have proven experience setting up spending budget configurations in Azure including alerting and reporting for potential overages against budgets that allow 90 days lead time to allow CBO decision time for appropriate actions including either reduction in usage to avoid overages or acquisition and allocation of increased funding. |
| Implement incident response and disaster response playbook responses as clearly written practical procedural documents that integrate into CBO’s existing IR and COOP documentation and procedural documents. |
| Required Work Samples |
| Candidates should provide a minimum of 2 and no more than 4 short examples of personally written technical documents (ex. documentation, design documents, diagrams, PowerShell script source code, change control, training materials, policy documents, standard operating procedures) not to exceed a total of 5 pages. |
Salary : $90 - $95