Senior Microsoft Cloud Engineer - Data Sharing & B2B

AIS is a mission-driven company focused on making a difference through innovative projects. They are seeking a Senior Microsoft Cloud Engineer to lead the design and optimization of secure external collaboration capabilities within the Microsoft cloud ecosystem.

Responsibilities:

• Design, configure, and maintain Microsoft Entra B2B collaboration and cross-tenant access settings to support secure partner and guest access to enterprise applications, collaboration workloads, and external-facing business solutions
• Engineer and administer external identity controls including invitation workflows, trust settings, guest lifecycle processes, access reviews support, and secure onboarding/offboarding patterns for third-party users
• Design and implement security architecture for external access to SharePoint extranets, including authentication patterns, authorization boundaries, site and content protection models, sharing restrictions, and monitoring requirements
• Define and implement Microsoft Purview Information Protection controls including sensitivity labels, encryption, data handling rules, and integration points with DLP and collaboration workloads
• Design and implement Microsoft Purview Message Encryption and related encrypted mail protections for secure communication with external recipients, including policy-based encryption use cases and operational support models
• Design, test, and tune Conditional Access policies to govern external access based on user, device, application, session, location, risk, and authentication context, using phased rollout and validation practices
• Build secure access patterns for Power Platform applications, flows, and connectors through environment strategy, role design, data policies, connector governance, and identity controls
• Define and implement security controls for Power BI reports, dashboards, semantic models, workspaces, sharing models, and external consumption scenarios
• Partner with security, compliance, messaging, collaboration, and application teams to translate policy and regulatory requirements into enforceable cloud controls
• Produce architecture diagrams, standards, control narratives, engineering runbooks, and operational procedures for steady-state support

Requirements:

• 8+ years of experience in Microsoft cloud engineering, with substantial hands-on responsibility for Microsoft 365, Azure, and enterprise security controls
• 4+ years of direct experience designing and administering Microsoft Entra ID / Azure AD identity and access solutions
• Deep experience with Microsoft Entra External ID / B2B collaboration, cross-tenant access, external collaboration settings, guest access governance, and secure partner access models
• Strong experience implementing Microsoft Purview Information Protection capabilities, including sensitivity labels, encryption, and data protection policy integration
• Strong experience designing Microsoft Purview Message Encryption / OME solutions for secure external email exchange
• Proven experience designing and deploying Conditional Access policies in enterprise environments, including policy testing, exception handling, and access hardening
• Experience securing SharePoint Online sites and extranets for external access, including site permissions, sharing models, and information protection considerations
• Experience implementing governance and security controls for Power Platform, including environment strategy, roles, and data policies
• Experience securing Power BI platforms, including workspace governance, dataset security, sharing controls, and report access design
• Experience in highly regulated environments such as defense, government, healthcare, financial services, or other compliance-driven enterprises
• Experience supporting security assessments, accreditation packages, or control inheritance models
• Familiarity with Microsoft Defender, audit logging, insider risk considerations, and monitoring of collaboration and sharing events
• Experience with DevOps, infrastructure as code, or scripted administration using PowerShell, Microsoft Graph, or automation tooling
• Microsoft certifications in areas such as Microsoft Entra, Microsoft 365 Security, Azure Security, or Purview