> Markdown version of [/jobs/ext/2024234-sr-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/2024234-sr-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Cloud Engineer - **Company:** Vsg Business Solutions - **Location:** Arlington, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Microsoft Azure, Microsoft Online Services, Cloud Engineering, Configuration Management, Computer Engineering, Continuous Integration, Github, Identity and Access Management, Log Analysis, OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Cloud Services, Kusto Query Language, Runbook, Microsoft SharePoint, Security Information and Event Management, Plex, Containerization, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Microsoft Sentinel, CIS Benchmarks - **Published:** August 11, 2026 - **Apply:** https://www.careerjet.com/jobad/us5cae1c538b86ae0445418f8e67774423 ## About the Role *Degree required (but can be flexible if they have over 10 years of experience) *Must haves: M365, Azure, Entra ID, * Bachelor's degree in Computer Science, Computer Engineering, or related discipline and at least 9 years of relevant experience in the IT industry, or a master's degree with at least 7 years of relevant experience, or at least 15 years of relevant industry experience. * At least 5 years experience of hands on administration experience with Microsoft 365 and Entra ID in a mid to large enterprise environment. * Exposure to Azure DevOps, GitHub, or similar tools to manage scripts, pipelines, and infrastructure as code definitions for Microsoft 365. * Strong experience using KQL in Microsoft 365 Defender, Sentinel, or Log Analytics to query logs, create custom detections, and analyze security or operational events. * Demonstrated expert level experience with Exchange Online: mail flow troubleshooting, advanced transport configuration, security and compliance policies, and integration with third party services. Skills * Effective communicator with demonstrated ability to communicate with and understand the needs of both technical and non-technical internal and external clients. * Demonstrated ability to work well independently, and collaboratively as needed. * Adept in a fast-paced environment to manage multiple concurrent deliveries. * Demonstrated analytical, critical thinking, and problem-solving skills with a focus on detail and high quality. * Deep understanding of identity and access concepts: SSO, OAuth/OIDC, federation, conditional access, MFA, and privileged identity management. * Proficiency with PowerShell for automation, bulk operations, and configuration management in Microsoft 365 and Entra ID. * Solid knowledge of security, compliance, and governance capabilities in M365 (e.g., DLP, retention, eDiscovery, audit, safe links/attachments). * Familiarity with container platforms (e.g., Kubernetes/AKS) and how they integrate with Entra ID for identity and access control. * Experience using Microsoft Graph API for automation, integration, and advanced reporting scenarios is preferred. * Experience with Microsoft Sentinel or similar SIEM platforms for M365 and Entra monitoring and analytics is preferred. * Experience with LSoft List-Plex is preferred. * Passion for the craft with a demonstrated ability to learn and understand the technology both at a high level and at a detailed level. ## Description * Design, configure, and administer Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Copilot, and related security/compliance features. * Administer and harden Entra ID (Azure AD), including conditional access, identity protection, app registrations, and role based access control. * Own Exchange Online configuration: mail flow, transport rules, connectors, policies, hybrid connectivity, and advanced troubleshooting of mail delivery issues. * Investigate incidents, identify patterns, and develop detection queries and reports leveraging Microsoft 365 Defender, Purview, and Log Analytics. * Collaborate with security and networking teams to implement and maintain security baselines, DLP, retention, eDiscovery, and auditing across the M365 environment. * Develop and maintain automation, scripts, and integrations to streamline administration, reporting, and provisioning. * Contribute to CI/CD and infrastructure as code practices (e.g., Azure DevOps, GitHub) for Microsoft 365 configuration and related workloads. * Work with containerized and cloud workloads (e.g., Kubernetes) where they integrate with M365/Entra for identity, security, or application access. * Lead complex incident response and root cause analysis for M365 and identity related outages and security events. * Produce and maintain technical documentation, standards, runbooks, and architectural diagrams for Microsoft 365 and Entra services. * Mentor junior collaborators and provide guidance on best practices, governance, and operational excellence. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)