DMI is seeking a Senior Microsoft Cloud Engineer to serve as the senior technical authority for a federal agency client's Microsoft cloud environment spanning Microsoft 365, Azure, and Microsoft Security platforms. In this role, you will design, operate, and continuously improve a resilient and compliant cloud environment in alignment with Zero Trust principles, FedRAMP Moderate requirements, and federal cybersecurity standards.

Duties and Responsibilities:

• Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services for high availability, scalability, and mission performance
• Implement and maintain cloud security architecture aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust), and FedRAMP Moderate requirements, including continuous monitoring and risk mitigation
• Administer Entra ID, Conditional Access, and privileged access management; implement MFA providers and Smart Card and FIDO-based authentication across Windows and macOS systems
• Manage Windows, macOS, and iOS devices in Intune, including compliance, configuration policies, and Autopilot OS imaging for environments of 700+ endpoints
• Configure and manage Microsoft Defender, Sentinel, and Purview for threat protection, data governance, and incident response readiness; manage Sentinel data sources, log ingestion health, and alerting
• Manage Exchange Online, Microsoft Teams, SharePoint Online, and related M365 collaboration services
• Implement automated Power BI dashboards for systems health, compliance, spend, and utilization reporting; configure Azure budget alerts with a 90-day lead time for overages
• Develop incident response and disaster recovery playbooks integrated into existing IR and COOP documentation
• Perform duties with minimal supervision, exercising independent technical judgment and authority 

Education and Years of Experience:  

• Bachelor's degree in Information Technology, Computer Science, or a related field; extensive Microsoft certifications and demonstrated enterprise experience may be considered in lieu of a degree.

Required Skills & Certifications: 

• All of the following current Microsoft certifications, maintained continuously for a minimum of 5 years: Microsoft 365 Certified Administrator Expert; Microsoft Certified Cybersecurity Architect Expert; Microsoft Certified Azure Solutions Architect Expert; Microsoft 365 Certified Endpoint Administrator Associate; Microsoft Certified Identity and Access Administrator Associate; Microsoft Certified Windows Server Hybrid Administrator Associate; Microsoft 365 Certified Teams Administrator Associate; Microsoft Certified Information Security Administrator Associate
• Proven experience designing and operating hybrid Active Directory, M365, and Entra environments with Microsoft tiered security standards
• Hands-on experience managing Intune for 700+ endpoints, including Autopilot provisioning and on-demand software delivery
• Advanced proficiency in Entra ID, Conditional Access, PAM, and MFA, including Smart Card and FIDO-based key authentication
• Experience managing Microsoft Sentinel, including data source configuration, log ingestion health monitoring, and alerting
• Experience implementing Power BI reporting and Azure budget management with proactive alerting
• Must provide 2–4 short examples of personally written technical documents (documentation, design documents, diagrams, PowerShell scripts, SOPs, or training materials) not to exceed 5 total pages
• 8+ years of enterprise Microsoft cloud engineering experience
• Experience supporting FedRAMP Moderate authorization processes in a federal environment
• Familiarity with IRS 1075 or similar federal data protection requirements

Clearance Requirements: Must possess or be eligible to obtain and complete a government security screening and/or a Secret security clearance.

Citizenship Status Required: Must be a U.S. Citizen

Physical Requirements: None required for this position.

Location: Remote, US

#LI-MS3