Senior Microsoft Cloud Engineer (SME)

The Senior Microsoft Cloud Engineer will be responsible for providing advanced engineering, operational, and advisory support for enterprise Microsoft cloud environments, including Microsoft 365, Azure, and Microsoft Security platforms. The objective of this role is to ensure a resilient, scalable, and secure Microsoft cloud environment that supports continuity of operations and a strong cybersecurity posture. The engineer will be responsible for designing, implementing, maintaining, and optimizing secure cloud services in strict alignment with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and FedRAMP Moderate control requirements. The role requires acting as a senior technical advisor, applying Zero Trust principles, and managing enterprise tenant architecture, Identity & Access Management, and automated reporting.

Microsoft Cloud Platform Engineering: Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services to ensure reliability, scalability, and performance.
• Security Architecture & Compliance: Implement and maintain cloud security controls aligned with NIST SP 800-53, Zero Trust Architecture (NIST SP 800-207), and FedRAMP Moderate requirements. Implement incident response and disaster response playbooks that integrate into existing documentation.
• Identity & Access Management: Fully implement and manage a hybrid Active Directory M365 and Entra environment. Administer identity services using Microsoft Entra ID, Conditional Access, privileged access controls, and least-privilege models. Lock down remote PowerShell access for administrative tasks across Azure and Entra APIs.
• Endpoint Management & Autopilot: Create and manage all aspects of Windows, MacOS, and Apple iOS devices in Intune, including compliance and policy delivery. Manage Autopilot delivery of operating system images and software on-demand for environments of at least 700 endpoints.
• Security Operations Enablement: Configure and manage Microsoft Defender, Sentinel, and Purview. Manage data sources feeding into Microsoft Sentinel, including ongoing health reporting and alerting on ingest log data quality.
• Collaboration & Messaging Services: Manage and support Exchange Online, Microsoft Teams, SharePoint Online, and related M365 workloads.
• Azure Infrastructure & Cost Management: Provide engineering support for Azure infrastructure and cloud networking. Set up spending budget configurations in Azure, including alerting and reporting for potential overages against budgets with 90 days lead time.
• Automated Reporting: Implement automated reporting and dashboard creation using Power BI, including systems health monitoring, compliance reports, and utilization reports across all cloud infrastructure.
• Advisory & Documentation: Serve as a senior technical advisor to internal stakeholders. Support formal change management processes and maintain technical documentation and standard operating procedures.

• Clearance & Background: Must be able to obtain and maintain a Public Trust Tier 2 clearance. Must successfully pass an FBI criminal check and fingerprinting conducted by the U.S. Capitol Police.
• Education: A Bachelor's degree in Information Technology, Cybersecurity, or a related field (or equivalent experience) is preferred.
• Certifications: Must possess (or have held equivalent prior certifications) the following current Microsoft credentials, maintained for a minimum of 5 years:
• Microsoft 365 Certified: Administrator Expert
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft 365 Certified: Endpoint Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft 365 Certified: Teams Administrator Associate
• Microsoft Certified: Information Security Administrator Associate

Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• While performing the duties of this job, the employee may be regularly required to stand, sit, talk, hear, reach, stoop, kneel, and use hands and fingers to operate a computer, telephone, keyboard, and standard office equipment
• Specific vision abilities required by this job include close vision requirements due to computer workThe employee must occasionally lift and/or move up to 15 pounds
• Fine hand manipulation (keyboarding)

Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Exposure to general office conditions while conducting office duties
• Moderate noise (i.e., business office with computers, phone, and printers, light traffic)
• Ability to work in a confined area
• Ability to sit at a computer terminal for an extended period

Working at Edgewater Federal Solutions:
Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies since 2018.

EdgewaterFederal Solutions is an Equal Opportunity Employer. It has been and continues to be our policy to provide equal employment to all employees and applicants for employment without regard to race, color, religion, gender, national origin, age, disability, marital status, veteran status and/or other status protected by applicable law.