All Native Group, a division of Ho Chunk, Incorporated, is seeking an exceptional Senior Microsoft Cloud Engineer to provide advanced engineering, operational, and advisory support for the Congressional Budget Office's (CBO) Microsoft cloud environments, including Microsoft 365, Azure, and Microsoft Security platforms. The Senior Microsoft Cloud Engineer ensures a resilient, scalable, and secure cloud environment aligned with NIST SP 800-53, NIST SP 800-207 Zero Trust Architecture, and FedRAMP Moderate requirements, applying least privilege, continuous verification, and conditional access throughout.

Essential Functions

• Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services for reliability, scalability, and performance.
• Implement and maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate requirements.
• Administer a hybrid Active Directory / M365 / Entra environment implementing Microsoft's tiered security model.
• Create and manage Windows, macOS, and Apple iOS devices in Intune, including compliance and policy delivery, and Autopilot image and software delivery for environments of at least 700 endpoints.
• Lock down remote PowerShell administrative access across Entra, Azure, and Microsoft Graph APIs, including headless Exchange Online provisioning and SharePoint profile imports.
• Administer identity and access management with Entra ID, Conditional Access, and privileged access management, including MFA provider transitions, third-party MFA, and Smart Card / FIDO key authentication across Windows and macOS.
• Manage Exchange Online, Microsoft Teams, SharePoint Online, and related M365 workloads.
• Configure and manage Microsoft Defender, Sentinel, and Purview for threat protection, data governance, information protection, and incident response readiness, including Sentinel data source health and log-quality alerting.
• Implement automated reporting and dashboards using Power BI, including systems health, compliance, current and forecasted spend, and utilization reporting.
• Configure Azure spending budgets with alerting and reporting that provide 90 days of lead time for overage decisions.
• Author incident response and disaster recovery playbooks that integrate with CBO's existing IR and COOP documentation.
• Serve as a senior technical advisor supporting audits, assessments, and compliance reviews, operating with minimal supervision.

Competencies

• Expert-level Microsoft 365, Azure, and Microsoft Security engineering.
• Advanced identity, endpoint, and information-protection skills.
• Automation and reporting proficiency (PowerShell, Graph, Power BI).
• Independent judgment and technical authority.
• Strong technical documentation and playbook authoring.

Supervisory Responsibility

This position involves executive oversight of multiple program portfolios and senior management teams.

Work Environment

This job operates in executive settings with frequent engagement at the highest levels of Navy leadership. This role uses executive office equipment and classified communication systems.

Physical Demands

The physical demands are typical of executive positions, with extensive travel and high-stress decision-making requirements. While performing the duties of this job, the employee is regularly required to talk or hear.

Position Type/Expected Hours of Work

This is a full-time executive position with flexible hours based on mission requirements.

Travel

Extensive travel is expected for this position.

Experience

• Minimum of 8 years of senior-level enterprise Microsoft cloud engineering experience across M365, Azure, and Microsoft Security.
• Proven Intune and Autopilot management for environments of at least 700 endpoints.
• Demonstrated Entra ID, Conditional Access, PAM, and multi-provider MFA implementation experience.
• Hands-on Defender, Sentinel, and Purview configuration and operations experience.

Education

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience.

Additional Eligibility Qualifications

• Microsoft 365 Certified: Administrator Expert
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft 365 Certified: Endpoint Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft 365 Certified: Teams Administrator Associate
• Microsoft Certified: Information Security Administrator Associate

Certifications (or their equivalent prior certifications) should have been maintained for a minimum of 5 years. Expired certifications or certifications never used professionally will not be considered. Candidates should provide 2 to 4 short examples of personally written technical documents, not to exceed 5 pages total.

Drug Free Workplace

All Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre-employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

Security Clearance

Must be a U.S. citizen or permanent resident. Position requires a Public Trust Tier 2 clearance. Selected candidate must obtain favorable FBI criminal history and fingerprint checks conducted through the U.S. Capitol Police prior to starting work, and pass a background check to access the CBO network.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.