> Markdown version of [/jobs/ext/1504771-lead-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/1504771-lead-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead, Cloud Engineer - **Company:** Fisica, Inc - **Location:** San Leandro, CA, United States - **Experience:** Expert - **Salary:** $108,000.0 - $201,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Audit Trail, Microsoft Azure, Microsoft Online Services, Cloud Computing, Cloud Computing Security, Cloud Engineering, Information Leak Prevention, Multi-Factor Authentication, Identity and Access Management, IT Management, Knowledge Management, Microsoft Security Essentials, Microsoft Office, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Cloud Services, Phishing, Runbook, Microsoft SharePoint, Software Deployment, Systems Integration, Microsoft InTune, Microsoft Onedrive - **Published:** July 30, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=291c05877d09f530 ## About the Role * Microsoft 365 Platform Expertise: Deep knowledge of Microsoft 365 services including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and Microsoft Entra ID, with the ability to architect, administer, and optimize cloud-based collaboration and productivity solutions. * Identity & Access Management: Strong expertise in Microsoft Entra ID, including user and group management, licensing, role-based access control, conditional access, and MFA configuration to support secure identity and access management. * Security & Compliance: Proficient in Microsoft 365 security and compliance capabilities, including Defender for Office 365, Secure Score, data loss prevention, retention policies, audit logging, and eDiscovery, with a security-first mindset. * Endpoint & Device Management: Experience managing devices using Microsoft Intune, including enrollment, compliance policies, configuration profiles, application deployment, and endpoint security integration. * Cloud Troubleshooting & Operations: Strong analytical and troubleshooting skills to resolve complex Microsoft 365 service issues, incidents, and escalations while maintaining platform availability and performance. * Automation & Scripting: Proficiency in PowerShell for Microsoft 365 administration, automation of repetitive tasks, bulk operations, reporting, and environment standardization. * Cloud Architecture & Integration: Understanding of Microsoft 365 tenant architecture and experience integrating Microsoft 365 with third-party systems such as identity providers, telephony platforms, ERP systems, and IT service management tools. * Process Improvement & Standardization: Ability to develop, document, and continuously improve operational procedures, standards, SOPs, and runbooks for cloud services and platform administration. * Documentation & Knowledge Management: Strong capability to create and maintain clear technical documentation, architectural diagrams, configuration standards, and user-facing guidance. * Communication & Collaboration: Excellent written and verbal communication skills, with the ability to translate technical concepts for non-technical stakeholders and collaborate effectively with IT teams, vendors, and business partners. * Continuous Learning & Innovation: Commitment to staying current with Microsoft 365 updates, roadmap changes, and industry best practices, and proactively recommending improvements that enhance security, reliability, and user productivity. ## Description The Microsoft 365 Cloud Engineer is responsible for the design, implementation, administration, and optimization of Microsoft 365 and Azure-based services to support secure, scalable, and reliable business operations. This role focuses on Microsoft cloud technologies including Entra ID (Azure AD), Exchange Online, Teams, SharePoint Online, OneDrive, Intune, and security/compliance tooling. The Cloud Engineer partners closely with IT leadership, service management, and business stakeholders to enhance user experience, maintain security posture, support enterprise initiatives, and ensure operational excellence across the Microsoft 365 tenant. This position plays a key role in automation, standardization, and continuous improvement of cloud services. Key Responsibilities Microsoft 365 Platform Administration * Administer and optimize Microsoft 365 services including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and Entra ID. * Manage user identities, licensing, groups, roles, and access controls across multiple operating entities. * Configure and maintain mail flow, retention policies, shared mailboxes, distribution lists, and security settings. * Support Teams collaboration, calling, and meeting configurations in alignment with business needs. Identity, Security, & Compliance * Manage Entra ID (Azure AD) including conditional access, MFA policies, identity protection, and role-based access control. * Implement and maintain Microsoft security solutions (Defender for Office 365, Secure Score improvements, anti-phishing, and spam policies). * Support data protection initiatives including retention, eDiscovery, audit logging, and compliance configurations. * Ensure adherence to company security standards and regulatory requirements. Endpoint & Device Management * Administer Microsoft Intune for device enrollment, configuration profiles, compliance policies, and application deployment. * Support Windows and mobile device management strategies for corporate and BYOD environments. * Partner with support teams to improve endpoint security, consistency, and user experience. Cloud Operations & Engineering * Monitor service health, availability, and performance of Microsoft 365 services. * Diagnose and resolve complex cloud-related incidents and escalations. * Plan and execute tenant changes, migrations, and enhancements with minimal user disruption. * Automate administrative tasks and configurations using PowerShell and scripting best practices. Integration & Vendor Collaboration * Coordinate integrations between Microsoft 365 and third-party systems (identity, ERP, telephony, security, and ITSM tools). * Work with vendors, Microsoft partners, and support channels to resolve issues and implement improvements. * Evaluate new Microsoft features and roadmap items for business applicability. Documentation, Process Improvement & Enablement * Maintain clear, accurate documentation for configurations, standards, and operational procedures. * Develop and refine SOPs, runbooks, and administrative guides for Microsoft 365 services. * Provide technical guidance and mentorship to service desk and support personnel. * Train users and IT staff on Microsoft 365 features, security best practices, and new capabilities. Continuous Improvement * Stay current on Microsoft 365, Azure, and cloud security best practices. * Proactively recommend enhancements to improve security, reliability, cost management, and user productivity. * Support IT leadership initiatives related to standardization, centralization, and service maturity. Other * Provide technical support * Maintain open and effective communication with owners, managers, and employees. * Comply with all K1 Management Services policies and procedures. * Perform all duties in accordance with applicable local, state, and federal regulations., Fisica is proud to be an Equal Opportunity Employer. Fisica is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, military and veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. Fisica maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks, where permitted by law. ## Related Videos - [Seriously gaming your cloud expertise: from cloud tourist to cloud native](https://www.wearedevelopers.com/videos/373-seriously-gaming-your-cloud-expertise-from-cloud-tourist-to-cloud-native) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Resilient by Design: Building Robust Architectures in High-Stakes Financial Systems](https://www.wearedevelopers.com/videos/2106-resilient-by-design-building-robust-architectures-in-high-stakes-financial-systems) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)