Senior Microsoft M365 and Azure Cloud Engineer

POSITION DESCRIPTION

JOB TITLE: Senior Microsoft M365 and Azure Cloud Engineer

CLASSIFICATION: Full Time

EXPERIENCE: 8 years of experience in M365 and Azure Management

REPORTS TO: Director of Cloud Operations

POSITION SUMMARY

Clearwater is seeking a skilled and experienced Senior Microsoft 365 and Azure Cloud Engineer to join our team. The ideal candidate will have a strong background in Microsoft 365 Configuration and Management and significant experience with Azure operational tools such as Entra ID and Intune. As an Engineer, you will play a crucial role in managing and maintaining our client’s M365 and Azure-based infrastructure, ensuring its reliability, security, and scalability.

SPECIFIC JOB RESPONSIBILITIES

M365 and Azure Client Operations Management:

·      Microsoft Entra ID — day-to-day identity management: Conditional Access policies, SSPR, PIM (Privileged Identity Management), directory sync (Entra Connect / Cloud Sync), B2B/B2C configurations, app registrations, enterprise app management

·      Microsoft Intune — device enrollment (BYOD + corporate), compliance policies, configuration profiles, app deployment, co-management with SCCM if applicable, Autopilot

·      Microsoft Purview — data classification, sensitivity labels, DLP policies, insider risk management, communication compliance, audit log review

·      Exchange Online — mail flow rules, connectors, hybrid config, anti-spam/anti-phishing policies (Defender for Office 365)

·      SharePoint Online & OneDrive — permissions governance, external sharing controls, tenant-level configuration

·      Microsoft Teams — policy management, governance (lifecycle, guest access, DLP integration)

·      Microsoft 365 Defender / Defender XDR — incident response integration, alert triage, threat hunting basics

Azure Operation Management:

·      Azure IaaS/PaaS operations — Setup VMs, VNets, NSGs, storage accounts, Key Vault

·      Entra ID integration with Azure resources – Setup RBAC, managed identities, configure service principals

·      Azure Policy and Defender for Cloud – Perform and monitor compliance posture management

·      Hybrid connectivity — Setup ExpressRoute, VPN Gateways, Azure Arc

·      PowerShell / Microsoft Graph API — Enable Automation of both Azure and M365 workloads using Graph

·      Azure Monitor, Log Analytics, Sentinel

Infrastructure Optimization:

• Continuously monitor and optimize Azure resources to minimize costs while maximizing performance and efficiency.
• Identify and implement automation opportunities using PowerShell scripts, ARM templates, or other cloud-based automation tools.
• Maintain cloud network configurations and network diagrams.

Security and Compliance:

• Familiarity with key Azure security tools such as Defender Suite, Sentinel and Purview
• Implement security best practices and ensure compliance with industry standards and regulatory requirements within the Azure environment.
• Manage access control and identity management within Azure Active Directory.

Documentation:

• Maintain detailed documentation of configurations, procedures, and troubleshooting steps for Azure infrastructure.

Qualifications:

·      Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent work experience).

·      At least 5 years of experience working directly with M365 and Azure Client Operations Tools

·      At least 2 years of experience working with other Azure components

·      Preferred, at least 2 years of experience in cybersecurity.

·      One or more certifications in Microsoft Azure

·      Strong understanding of M365 services and including Intune and Mobile Device Management (MDM).

·      Administrative experience with multiple operating systems, including Windows, MacOS, Linux, Android, and iPhone OS.

·      Familiarity with networking concepts, including VPNs, firewalls, and DNS.

·      Experience with virtual machines, storage, networking, security, and database services.

·      Background with Active Directory Services, including DNS, DHCP, and DFS.

·      Demonstrated ability to maintain cloud network configurations and network diagrams.

·      Proficiency in scripting or automation (e.g., PowerShell, CLI).

·      Excellent communication and collaboration skills

·      Ability to work in a fast-paced and dynamic environment.

·      Self-motivated with the ability to work indepen…