Cloud Engineer

The Cloud Engineer will design, deploy, secure, and support cloud environments for Brea Networks and our clients., Cloud Design and Deployment

• Design and deploy secure cloud environments.
• Build and manage virtual machines, storage, networks, backups, and cloud security tools.
• Configure identity, access, roles, and conditional access policies.
• Support Azure Virtual Desktop and other virtual desktop solutions.
• Create secure connections between cloud and on-premises systems.
• Help build cloud environments that support CUI and other sensitive data.
• Review cloud usage and recommend ways to improve performance and control costs.

Microsoft Cloud Services

• Manage Microsoft Azure, Microsoft 365, Entra ID, Intune, Exchange Online, SharePoint, and Teams.
• Support Microsoft GCC, GCC High, and Azure Government environments.
• Configure device management, application policies, security settings, and user access.
• Support Defender, Sentinel, and other Microsoft security tools.
• Troubleshoot licensing, authentication, synchronization, and access issues.

Cloud Migrations

• Plan and complete migrations into Microsoft 365 and Azure environments.
• Migrate email, files, SharePoint data, user accounts, applications, and servers.
• Review the current environment before work begins.
• Build a clear migration plan with tasks, risks, testing, and rollback steps.
• Limit business downtime during migrations.
• Test and confirm that each migration is complete.

Security and Compliance

• Apply secure cloud configuration and system-hardening standards.
• Help implement technical controls for CMMC and NIST 800-171.
• Support environments subject to DFARS and ITAR requirements.
• Protect Controlled Unclassified Information and other sensitive data.
• Work with the cybersecurity and compliance teams to collect technical evidence.
• Fix security gaps found during reviews, audits, or assessments.
• Keep systems and documentation ready for review.

Support and Troubleshooting

• Handle advanced cloud issues escalated by the support team.
• Troubleshoot identity, networking, access, security, and performance problems.
• Find the root cause instead of applying temporary fixes.
• Work with Microsoft and other vendors when outside support is needed.
• Share clear updates with clients, project managers, and internal teams.
• Help train support staff on new systems and cloud solutions.

Documentation and Project Ownership

• Create diagrams, build notes, checklists, and standard operating procedures.
• Record configurations, changes, test results, and client approvals.
• Keep tickets accurate and current.
• Track assigned work until it is fully complete.
• Build repeatable templates that improve future deployments.
• Assist with technical scoping for new projects and proposals., * Cloud projects are completed correctly and on time.
• Client downtime and business impact are kept low.
• Systems are secure, tested, and fully documented.
• Technical risks are raised early.
• Tickets and project notes are clear and current.
• Problems are resolved completely.
• Cloud environments remain stable, secure, and cost-aware.
• Support staff can use the documentation without depending on one person.

Our Company Values

Speed with Precision

We move quickly while maintaining quality. We plan the work, test our changes, and complete each project correctly.

Extreme Ownership

We own the result from start to finish. We communicate problems early and stay involved until the work is complete.

Documented Excellence

If it is not documented, it does not scale. Every deployment, change, and decision must have clear records.

Team-First Communication

We work as one team. We share updates, explain risks, and make sure clients and coworkers know what is happening.

Relentless Improvement

We look for better ways to build, secure, automate, and support cloud environments.

Why Join Brea Networks?

You will work on secure cloud environments that support companies within the Defense Industrial Base. You will help protect sensitive information, improve cybersecurity, and support clients working toward important government compliance requirements.

This role offers hands-on work across cloud engineering, cybersecurity, migrations, and compliance. You will be part of a growing team where strong technical work, ownership, communication, and documentation matter.

Pay: $65,000.00 - $85,000.00 per year

This role will focus mainly on Microsoft cloud services, including Azure, Microsoft 365, Entra ID, Intune, and virtual desktop environments. Experience with any major cloud platform is required. Experience with Microsoft Azure Government and GCC High is strongly preferred.

The right person can take ownership of a project, explain technical issues clearly, and deliver complete, documented solutions. This is not only a planning role. You must be comfortable doing the hands-on technical work., * Professional experience working with at least one major cloud platform, such as Microsoft Azure, AWS, or Google Cloud.

• Hands-on experience building, managing, or supporting cloud environments.
• Working knowledge of cloud networking, virtual machines, storage, backup, identity, and security.
• Experience with Microsoft 365 administration.
• Understanding of Entra ID or another cloud identity platform.
• Experience completing cloud migrations or major cloud deployments.
• Strong troubleshooting and problem-solving skills.
• Ability to manage several client environments and priorities.
• Clear written and verbal communication.
• Strong documentation habits.
• Ability to work independently and as part of a team.
• Must meet U.S. Person requirements due to the ITAR-controlled environments we support.

Preferred Qualifications

• Experience with Microsoft Azure Government.
• Experience with Microsoft 365 GCC or GCC High.
• Experience supporting MSP or MSSP clients.
• Experience with Azure Virtual Desktop.
• Experience with Intune, Autopilot, Defender, or Microsoft Sentinel.
• Experience with PowerShell, Azure CLI, Bicep, Terraform, or other automation tools.
• Knowledge of CMMC, NIST 800-171, DFARS, FedRAMP, or ITAR.
• Experience protecting CUI or other regulated data.
• Microsoft Azure or Microsoft 365 certifications.
• Experience with backup, disaster recovery, and business continuity solutions., * This position requires access to ITAR-controlled technical data. Are you a U.S. Person as defined under 22 CFR § 120.62?
• Have you personally deployed, migrated, or managed a production cloud environment using Microsoft Azure, AWS, or Google Cloud?
• Do you have hands-on experience managing Microsoft 365, Entra ID, Intune, Exchange Online, or SharePoint?
• Do you have hands-on experience with Microsoft Azure Government, GCC, or GCC High?
• Are you comfortable handling advanced cloud troubleshooting without relying on step-by-step instructions?
• Are you willing to document configurations, changes, testing, and project steps for every deployment?

Experience:

• hands on Cloud Engineering: 3 years (Preferred)

• 401(k) matching
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

Brea Networks is an MSP, MSSP, and compliance provider serving the Defense Industrial Base. We help defense contractors protect sensitive data and meet CMMC, NIST 800-171, DFARS, and ITAR requirements.