Senior Microsoft Cloud Engineer (SMA 2)

We are looking for a highly skilled and proactive Senior Microsoft Cloud Engineer to join our team supporting the Congressional Budget Office (CBO) under the SENTRY Blanket Purchase Agreement (BPA). As a Senior Microsoft Cloud Engineer, you will provide expert-level engineering, operational, and advisory support for CBO’s Microsoft cloud environments, including Microsoft 365, Azure, and Microsoft Security platforms. You will be responsible for designing, implementing, and optimizing secure cloud services in alignment with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and FedRAMP Moderate control requirements. You will work directly with federal staff to ensure a resilient, scalable, and secure Microsoft cloud environment that supports CBO’s mission and cybersecurity posture., * Cloud Platform Engineering: Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services to ensure reliability, scalability, and performance.

• Security Architecture: Implement and maintain cloud security controls aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and FedRAMP Moderate requirements.
• Identity & Access Management: Administer and secure identity services using Microsoft Entra ID, Conditional Access, privileged access controls, and least-privilege models.
• Endpoint Management: Create and manage all aspects of Windows, macOS, and Apple iOS devices in Intune including compliance and policy delivery; manage Autopilot delivery of operating system images for environments of at least 700 endpoints.
• Security Operations: Configure and manage Microsoft Defender, Sentinel, and Purview to support threat protection, data governance, information protection, and incident response readiness.
• Budget Management: Set up spending budget configurations in Azure including alerting and reporting for potential overages that allow 90 days lead time for decision-making.
• Reporting: Implement automated reporting and dashboard creation using Power BI and other Microsoft tools for systems health monitoring, compliance reports, spend forecasting, and utilization reports.

• Certifications: Must collectively hold current Microsoft certifications, including but not limited to:
• Microsoft 365 Certified: Administrator Expert
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft 365 Certified: Endpoint Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft 365 Certified: Teams Administrator Associate
• Certifications must have been maintained for a minimum of 5 years. Equivalent or successor Microsoft certifications will be considered acceptable. Expired certifications or certifications never used professionally will not be considered.
• Clearance: Must be eligible to obtain and maintain a Public Trust Tier 2 clearance (background check conducted through U.S. Capitol Police).
• Experience: Proven expertise in designing, implementing, operating, and optimizing Microsoft cloud services.
• Technical Proficiency: Demonstrated hands-on experience with:
• Hybrid Active Directory and Microsoft Entra ID environments
• Intune and Autopilot management for 700+ endpoints
• Microsoft Sentinel data connectors and log ingestion
• PowerShell scripting and Microsoft Graph API
• Conditional Access and Privileged Identity Management (PIM)
• Work Samples: Candidates should provide a minimum of 2 and no more than 4 short examples of personally written technical documents (e.g., documentation, design documents, diagrams, PowerShell script source code, change control, training materials, policy documents, standard operating procedures) not to exceed a total of 5 pages.

Desired Experience:

• Experience implementing MFA provider transitions and Smart Card/FIDO-based key authentication.
• Experience with Power BI reporting and Azure budget management.
• Bachelor’s degree in IT, Computer Science, or related field.

Clearance Requirement: Must be eligible for a Public Trust Tier 2