Skip to content
Skip to content
Sysadmin Jobs
A

Senior Microsoft Cloud Engineer

Aveshka Inc

Location
Onsite (Washington, District of Columbia)
Employment
Full-time
Level
Senior Level
Posted 1 day ago

About the Role

Softtek Government Solutions is seeking a Senior Microsoft Cloud Engineer to support the Congressional Budget Office. This role involves designing, implementing, and maintaining secure Microsoft cloud environments aligned with federal compliance standards.

Skills

Microsoft 365 Azure Microsoft Security Zero Trust Architecture NIST SP 800-53 FedRAMP Moderate Entra ID Microsoft Defender Microsoft Sentinel Microsoft Purview Intune Autopilot PowerShell Microsoft Graph Power BI Identity and Access Management

Full job details

 

Position Summary

Softtek Government Solutions (SGS) is seeking an experienced Senior Microsoft Cloud Engineer to support the Congressional Budget Office (CBO) Microsoft Cloud Operations Engineering Services task order. This is a senior, independent engineering and advisory role responsible for designing, implementing, maintaining, and optimizing CBO's Microsoft 365, Azure, and Microsoft Security cloud environments.

The engineer ensures a resilient, scalable, and secure Microsoft cloud environment aligned to NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and FedRAMP Moderate control requirements, spanning enterprise tenant management, Azure infrastructure and application support, collaboration and messaging services, identity and access management, and security operations across Microsoft Defender, Entra ID, Sentinel, and Purview. The role applies Zero Trust principles, least privilege, continuous verification, and conditional access while supporting compliance, audit readiness, and formal change management.


Responsibilities:

  • Serve as senior technical lead for CBO's Microsoft 365, Azure, and Microsoft Security platforms, ensuring high availability, scalability, and performance.
  • Implement and maintain Zero Trust security architecture aligned to NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate, including continuous monitoring and risk mitigation.
  • Administer a hybrid Active Directory / M365 / Entra environment with tiered security, Conditional Access, privileged access management, and modern authentication (Smart Card, FIDO, MFA transitions).
  • Manage Intune/Autopilot device compliance and imaging across 700+ Windows, macOS, and iOS endpoints.
  • Secure and automate administration via PowerShell and Microsoft Graph (Exchange Online mailbox provisioning, SharePoint profile imports).
  • Configure and operate Microsoft Defender, Sentinel, and Purview for threat protection, data governance, and incident response readiness.
  • Build Power BI dashboards for systems health, compliance, and Azure spend/utilization, and configure Azure budget alerting with 90-day overage lead time.
  • Author incident response and disaster recovery playbooks integrated with CBO's IR/COOP documentation.


  Qualifications

  • Must be a US Citizen
  • 5+ years of currently maintained Microsoft certifications across enterprise cloud, security, identity, and endpoint domains (see Required Certifications below).
  • Demonstrated senior-level, independent experience administering enterprise Microsoft 365, Azure, and Microsoft Security platforms.
  • Hands-on experience implementing Zero Trust architectures aligned to NIST SP 800-53, NIST SP 800-207, and FedRAMP Moderate.
  • Advanced hybrid AD/Entra identity management, Conditional Access, PAM, and modern authentication (Smart Card/FIDO/MFA).
  • Proven Intune/Autopilot endpoint management experience at 700+ device scale across Windows, macOS, and iOS.
  • Hands-on configuration of Microsoft Defender, Sentinel, and Purview.
  • Experience building Power BI reporting/dashboards and managing Azure budget/cost governance.


Required Certifications / Credentials 

  • Microsoft 365 Certified: Administrator Expert
  • Microsoft Certified: Cybersecurity Architect Expert
  • Microsoft Certified: Azure Solutions Architect Expert
  • Microsoft 365 Certified: Endpoint Administrator Associate
  • Microsoft Certified: Identity and Access Administrator Associate
  • Microsoft Certified: Windows Server Hybrid Administrator Associate
  • Microsoft 365 Certified: Teams Administrator Associate
  • Microsoft Certified: Information Security Administrator Associate


Required Clearance 

  • Eligible for Public Trust Tier 2 suitability determination