Senior Microsoft M365 and Azure Cloud Engineer

POSITION SUMMARY

Clearwater is seeking a skilled and experienced Senior Microsoft 365 and Azure Cloud Engineer to join our team. The ideal candidate will have a strong background in Microsoft 365 Configuration and Management and significant experience with Azure operational tools such as Entra ID and Intune. As an Engineer, you will play a crucial role in managing and maintaining our client’s M365 and Azure-based infrastructure, ensuring its reliability, security, and scalability.

SPECIFIC JOB RESPONSIBILITIES

M365 and Azure Client Operations Management:

• Microsoft Entra ID — day-to-day identity management: Conditional Access policies, SSPR, PIM (Privileged Identity Management), directory sync (Entra Connect / Cloud Sync), B2B/B2C configurations, app registrations, enterprise app management
• Microsoft Intune — device enrollment (BYOD + corporate), compliance policies, configuration profiles, app deployment, co-management with SCCM if applicable, Autopilot
• Microsoft Purview — data classification, sensitivity labels, DLP policies, insider risk management, communication compliance, audit log review
• Exchange Online — mail flow rules, connectors, hybrid config, anti-spam/anti-phishing policies (Defender for Office 365)
• SharePoint Online & OneDrive — permissions governance, external sharing controls, tenant-level configuration
• Microsoft Teams — policy management, governance (lifecycle, guest access, DLP integration)
• Microsoft 365 Defender / Defender XDR — incident response integration, alert triage, threat hunting basics

Azure Operation Management:

• Azure IaaS/PaaS operations — Setup VMs, VNets, NSGs, storage accounts, Key Vault
• Entra ID integration with Azure resources – Setup RBAC, managed identities, configure service principals
• Azure Policy and Defender for Cloud – Perform and monitor compliance posture management
• Hybrid connectivity — Setup ExpressRoute, VPN Gateways, Azure Arc
• PowerShell / Microsoft Graph API — Enable Automation of both Azure and M365 workloads using Graph
• Azure Monitor, Log Analytics, Sentinel

Infrastructure Optimization:

• Continuously monitor and optimize Azure resources to minimize costs while maximizing performance and efficiency.
• Identify and implement automation opportunities using PowerShell scripts, ARM templates, or other cloud-based automation tools.
• Maintain cloud network configurations and network diagrams.

Security and Compliance:

• Familiarity with key Azure security tools such as Defender Suite, Sentinel and Purview
• Implement security best practices and ensure compliance with industry standards and regulatory requirements within the Azure environment.
• Manage access control and identity management within Azure Active Directory.

Documentation:

• Maintain detailed documentation of configurations, procedures, and troubleshooting steps for Azure infrastructure.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience).
• At least 5 years of experience working directly with M365 and Azure Client Operations Tools
• At least 2 years of experience working with other Azure components
• Preferred, at least 2 years of experience in cybersecurity.
• One or more certifications in Microsoft Azure
• Strong understanding of M365 services and including Intune and Mobile Device Management (MDM).
• Administrative experience with multiple operating systems, including Windows, MacOS, Linux, Android, and iPhone OS.
• Familiarity with networking concepts, including VPNs, firewalls, and DNS.
• Experience with virtual machines, storage, networking, security, and database services.
• Background with Active Directory Services, including DNS, DHCP, and DFS.
• Demonstrated ability to maintain cloud network configurations and network diagrams.
• Proficiency in scripting or automation (e.g., PowerShell, CLI).
• Excellent communication and collaboration skills
• Ability to work in a fast-paced and dynamic environment.
• Self-motivated with the ability to work independently or in a team.
• Flexible schedule to accommodate client service hours.
• Strong organizational and multitasking skills.

Work Environment:

• Currently, Clearwater is a "virtual" company, and all colleagues work remotely.
• Travel is required, estimated at less than 10% of the time.
• Colleagues are expected to provide their computer, printer/scanner, computer audio capability, cell phone, internet service, and Microsoft Office software.
• The company provides subscriptions to various tools, including Microsoft Online Services, Salesforce.com, Encryption tools, data backup and others selected as standard by the company.

Compensation & Benefits:

• Competitive base salary
• Participation in the company's medical/RX, disability, life/ADD insurance, and 401K benefit programs.
• Flexible Time Off (FTO) vacation policy.

Join our dynamic team and help us maintain a secure, efficient, and highly available Azure infrastructure that supports our organization's growth and innovation. If you are a passionate Azure Infrastructure Engineer with a strong skill set in Azure Virtual Desktop, MDM Intune, Azure Backup, and PowerShell, along with expertise in cloud computing and cybersecurity, we encourage you to apply.