Position Title: Senior Microsoft Cloud Engineer Location: Congressional Budget Office Ford House Office Building, 4th Floor 2nd St SW, 441 D St SW, Washington, DC 20024 Period of Performance: 08/15/2026 - 08/14/2031 Place of Performance: Remote work is authorized under this contract; however, at CBO's discretion, contractor employees may be required to work on-site at CBO facilities without reimbursement for related travel or expenses. Security Clearance Public Trust (Tier 2) Citizenship U.S. Citizenship or Permanent Residence status Position Summary: The Senior Microsoft Cloud Engineer provides advanced engineering, operational, and advisory support for CBO's Microsoft cloud environments - Microsoft 365, Azure, and Microsoft Security platforms. Designs, implements, maintains, and optimizes secure cloud services aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate, applying Zero Trust, least privilege, continuous verification, and conditional access across tenant management, Azure infrastructure and application support, Exchange Online and collaboration services, identity and access management, and security controls (Microsoft Defender, Entra ID, Purview). Key Responsibilities: - Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services. - Implement/maintain cloud security controls aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate. - Administer/secure identity via Microsoft Entra ID, Conditional Access, privileged access controls, and least-privilege models. - Manage Exchange Online, Teams, SharePoint Online, and related collaboration/messaging services. - Provide Azure infrastructure, networking, and application workload support, including hybrid integration. - Configure/manage Microsoft Defender, Purview, and related platforms for threat protection, data governance, and IR readiness. - Support formal change management; maintain technical documentation and SOPs. - Serve as senior technical advisor to CBO stakeholders; support audits, assessments, and compliance reviews. Required Qualifications: - Senior-level technical leadership and independent operational support for enterprise MS cloud (M365, Azure, MS Security), with currently maintained Microsoft certifications in all related areas for 65 years. - Proven expertise designing, implementing, operating, and optimizing Microsoft cloud services for high availability, scalability, performance, and mission alignment. - Ability to implement/maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate (continuous monitoring, risk mitigation, posture management). - Advanced ability to implement/manage a hybrid Active Directory / M365 / Entra environment using Microsoft's tiered security standards. - Proven experience creating/managing Windows, macOS, and Apple iOS devices in Intune (compliance and policy delivery). - Proven experience with Autopilot OS image delivery and policy/on-demand software delivery via Intune for environments of 65700 endpoints. - Practical experience locking down remote PowerShell admin access in Entra/Azure across related APIs - headless Exchange Online mailbox provisioning, SharePoint custom user-profile field imports, and Microsoft Graph access. - Advanced IAM - Entra ID, Conditional Access, PAM, least-privilege; MFA provider transitions with minimal impact; 3rd-party MFA as an Entra provider; Smart Card and FIDO key authentication across Windows and macOS. - Experience supporting Exchange Online, Microsoft Teams, SharePoint Online, and related M365 workloads. - Azure infrastructure/application support - cloud networking, workload configuration, maintenance, troubleshooting, hybrid integration. - Hands-on configuration/management of Microsoft Defender, Sentinel, and Purview (threat protection, data governance, information protection, IR readiness). - Ability to manage Sentinel data sources, including ingest log data-quality health reporting and alerting. - Ability to support formal change management; produce technical documentation, training materials, and SOPs. - Capacity to act as a senior technical advisor on complex issues, audits, assessments, and compliance reviews; perform duties with minimal supervision and sound independent judgment. - Implement automated Power BI reporting/dashboards - systems health, compliance, current and forecasted spend, and utilization across CBO's Microsoft cloud. - Proven experience configuring Azure spending budgets with alerting/reporting providing 90 days' lead time for CBO decision-making on overages. - Implement IR and disaster-response playbooks as practical procedural documents integrating into CBO's existing IR and COOP documentation. Education: - Bachelor's degree in Computer Science or IT related. Certifications: - Microsoft 365 Certified: Administrator Expert - Microsoft Certified: Cybersecurity Architect Expert - Microsoft Certified: Azure Solutions Architect Expert - Microsoft 365 Certified: Endpoint Administrator Associate - Microsoft Certified: Identity and Access Administrator Associate - Microsoft Certified: Windows Server Hybrid Administrator Associate - Microsoft 365 Certified: Teams Administrator Associate - Microsoft Certified: Information Security Administrator Associate Required Documents - Letter of Commitment