Own Entra ID and cloud identity work across client environments, including integrations and authentication flows.
Design and implement Conditional Access patterns, MFA posture, and break-glass access approaches within standards.
Lead Microsoft 365 workstreams, including tenant configuration improvements and governance-related implementations.
Own Azure delivery work within the approved stack (VMs, storage, networking, AVD), including troubleshooting and remediation.
Lead projects end-to-end, including rollout planning, rollback planning, validation, and closure.
Regularly create SOPs, runbooks, KBs, and diagrams that improve delivery and supportability.
Build and improve reusable automation (PowerShell, Graph, workflow tooling) and refine existing patterns.
Drive permanent fixes for recurring issues and reduce repeat incidents through standards, documentation, and automation.
Participate in client calls as needed and communicate clearly about status, risks, and next steps.

U.S. citizenship – by nature of our work with the defense industry, all employees must be eligible for a Secret clearance.
3-5 years of relevant engineering experience in cloud environments with demonstrated ownership of systems and change delivery.
Strong hands-on experience with Entra ID, Intune, and Azure in production environments.
Excellent troubleshooting skills and follow-through, including validation and documentation.
Clear written and verbal communication, including client-facing technical discussions.
Proficiency in PowerShell and comfort building reusable automation.
CompTIA Security+ required within 6 months of hire if not already held.

Cloud Engineer II

Key skills