Cloud Adminstrator

PAR Systems is seeking a Microsoft Cloud Administrator to help operate, secure, and strengthen the Microsoft cloud environment supporting our defense and regulated business. This role will have a particular focus on our Azure Government GCC High environment, where Controlled Unclassified Information (CUI) is stored, processed, and transmitted across Microsoft 365 services including SharePoint, Teams, OneDrive, Exchange Online, and Intune. You’ll work alongside our Senior IS Infrastructure Engineer and partner closely with our Governance, Risk, and Compliance (GRC) team to keep this environment secure, reliable, and aligned with NIST SP 800-171 and CMMC requirements. While GRC provides governance and compliance oversight, you’ll be hands-on with the technology, configuring, maintaining, hardening, troubleshooting, and continuously improving the systems and technical controls that support our compliance objectives. Beyond GCC High, you’ll also provide key support for our commercial Microsoft cloud environment and serve as backup across broader IS infrastructure needs, giving you exposure to PAR’s larger technology environment. Success Criteria Your experience administering Microsoft 365 and Azure/Entra ID environments will help you hit the ground running as you become a trusted technical resource for PAR’s GCC High environment. You’ll build a strong understanding of the environment, its security requirements, and the technical controls needed to protect CUI while helping ensure critical systems are not dependent on a single administrator. Success in this role means keeping our Microsoft cloud environment secure and well maintained, not simply configuring controls once, but ensuring they continue to work as our systems and business evolve. You’ll manage areas such as identity and access, conditional access, endpoint management, security tooling, configuration baselines, logging, patching, and recurring access reviews. You’ll use your technical judgment to identify issues, troubleshoot problems, and strengthen the environment over time. You’ll also help turn technical operations into clear, defensible evidence of how our controls are working. In partnership with GRC, you’ll maintain configuration records, logs, screenshots, exports, and other technical artifacts needed to support our System Security Plan (SSP), assessments, remediation efforts, and ongoing CMMC readiness. When gaps are identified, you’ll help translate them into technical actions and work with internal partners and managed service providers to drive them toward resolution. As you grow into the role, you’ll become a fully cross-trained administrator for the GCC High environment who can independently manage day-to-day needs, support changes and migration activities, and provide knowledgeable backup across critical systems. You’ll also look for opportunities to make the environment easier to manage through stronger documentation, repeatable processes, and automation.

• 3+ years administering Microsoft 365 and Azure/Entra ID in a production environment, including Intune, Exchange Online, SharePoint, and Teams.
• Hands-on experience with identity and security tooling - conditional access, MFA, endpoint management, and Microsoft Defender / Purview.
• Working knowledge of security-control frameworks (NIST SP 800-171, NIST 800-53, or CMMC) and how technical settings map to control requirements.
• Demonstrated discipline with change control, configuration baselines, logging, and access reviews.
• U.S. Person and eligibility to work in a GCC High / ITAR-aware environment

Preferred Qualifications

• Direct experience with Azure Government / GCC High or another sovereign cloud (distinct from commercial M365).
• Supporting a DFARS 252.204-7012 / NIST SP 800-171 or CMMC program in a defense-contractor setting.
• Relevant certifications such as Microsoft SC-300, AZ-500, MS-102, or Security+.
• Scripting/automation (PowerShell, Graph API) for control enforcement and evidence collection.

• $132,000-198,000 per year