Senior Microsoft Cloud Services Engineer

We are seeking a Senior Microsoft Cloud Services Engineer to design, implement, andoperateenterprise-grade cloud infrastructure and productivity services across the Microsoft cloud ecosystem, primarily Azure and Microsoft 365. This role serves as a technical lead for cloud initiatives, partnering with infrastructure, security, application, and service teams to ensure cloud services are reliable, secure, cost-effective, and aligned with business needs. The ideal candidate brings deep hands-onexpertise, strong troubleshooting skills, and the ability to mentor others while driving standards and best practices.

Key Responsibilities- Architect, implement, and maintain Azure-based infrastructure (networking, compute , storage, identity, security controls) to support business-critical workloads with defined availability and performance targets. - Lead cloud migrations and modernization efforts, including workload assessment, landing zone design, migration planning and execution, and post-migration optimization. - Own Microsoft 365 service operations (Exchange Online, SharePoint Online, OneDrive, Teams) including configuration, governance, lifecycle management, and service health monitoring. - Design and enforce cloud security best practices such as identity hardening (Microsoft Entra ID), Conditional Access, least privilege RBAC, secure network patterns, and policy-based compliance. - Implement Infrastructure as Code ( IaC ) and automation using tools such as Terraform, Bicep/ARM, and PowerShell to improve consistency, deployment speed, and auditability. - Monitor, troubleshoot, and resolve complex incidents across Azure and Microsoft 365; perform root cause analysis and implement preventive improvements. - Establish and maintain operational standards including documentation, runbooks, change management, patching strategies, backup and disaster recovery, and service-level reporting. - Optimize cloud costs and performance using tagging strategies, capacity planning, rightsizing, reservations or savings plans, and cost governance processes. - Collaborate cross- functionally with security, networking, application teams, and vendors to deliver integrated cloud solutions; provide technical guidance during planning and implementation. - Mentor and uplift engineers through coaching, peer reviews for automation and IaC , and leadership in adopting cloud best practices and standards. Required Qualifications- Overall 13+ years of IT infrastructure/engineering experience with 4+ years of hands-on experience in Azure and/or Microsoft 365 in enterprise environments. - Bachelors degree in Computer Science , Information Systems, or equivalent practical experience. - One or more current Microsoft certifications such as Azure Administrator Associate (AZ-104) or equivalent, Microsoft 365 Administrator/Expert-level certification, or Azure Solutions Architect Expert. - Proven Azure engineering experience across core services including networking, compute , storage, identity, monitoring, and governance. - Microsoft 365 administration experience managing tenant configuration, governance, and troubleshooting across key workloads. - Strong identity and access management skills with Microsoft Entra ID, MFA, Conditional Access, SSO integration, and role-based access control (RBAC). - Demonstrated ability to implement cloud security controls and support compliance requirements using Microsoft security capabilities (e.g., Defender, Purview concepts). - Proficiency in PowerShell and at least one Infrastructure as Code approach (Terraform and/or Bicep/ARM) with CI/CD integration exposure. - Strong operational background in incident response, problem management, monitoring, backup/disaster recovery, and change control for production services. - Excellent communication, documentation, and stakeholder management skills; ability to explain complex concepts to technical and non-technical audiences. Preferred Qualifications- Advanced certifications such as Azure Solutions Architect Expert, Azure Security Engineer Associate (AZ-500), DevOps Engineer Expert (AZ-400), or Microsoft Security (SC-200/SC-300/SC-100). - Hybrid identity experience (Entra Connect or Cloud Sync) and integration of on-premises Active Directory with Microsoft cloud services. - Deep Azure networking design experience (hub-and-spoke, firewalling, private endpoints, ExpressRoute/VPN, DNS, routing). - Hands-on experience implementing Microsoft Defender for Cloud, Defender …