The Cloud Engineer’s role is to manage Office 365 services, including Azure AD (Active Directory), Intune, Exchange Online, Teams, OneDrive, and SharePoint Online to ensure the supported business applications' high availability and security. This individual also takes part in the planning and implementing of policies and procedures to ensure system provisioning ongoing, maintenance, and security are consistent with company goals, industry best practices, and regulatory requirements.
ESSENTIAL DUTIES AND RESPONSIBILITIES (and other duties as assigned)
- Perform and support capacity planning to aid in the development of long-term strategic goals for the enterprise messaging and collaboration environment to include Exchange Online OneDrive, Teams, and other Microsoft services.
- Perform cloud security analysis, evaluate configurations, and provide recommendations for the O365, EMS, and Endpoint Security based on ASRC’s Cloud Cyber Risk Framework. This can include Microsoft’s cloud solutions such as Microsoft 365 Defender, Microsoft Cloud App Security (MCAS), Microsoft Information Protection (MIP), Conditional Access, Intune, Azure Defender, and Microsoft Defender for Endpoint.
- Lead migration effort to M365 cloud services for newly acquired lines of business. This includes Tenant to Tenant migration, Exchange on-prem, or Google Workspace (G Suite) to Microsoft online service.
- Design and develop cloud-specific security policies, standards, and procedures e.g., Cloud governance, O365 tenant management and configuration, EMS policy development, management, auditing and monitoring, security incident and event management, data protection (DLP and encryption), user and administrator account management and conditional access controls.
- Responsible for the delivery of services provided to the cloud, on-premises/cloud hybrid IT (Information Technology) clients.
- Must be a self-starter and can work independently or as part of a team
- Deploy servers, messaging firewalls, encryption systems, and host security systems.
- The Cloud Engineer will be the main point of contact for anything related to Office 365 administration. Resolve assigned cases, change requests, and acts as an escalation for support issues.
- Provide advice and training to peers on various Office 365 applications.
- Write and support custom scripts (PowerShell) to remediate issues and automate tasks.
- Reviews performance logs and monitors system performance of all O365 services.
- Act as the Subject Matter Expert for Office 365 services, to include Azure AD, Intune, Exchange Online, Teams, OneDrive, and cloud cyber risk for the M365 platform.
- Ensure the integrity and security of enterprise data on workstations, servers, and data transfer following business needs and industry best-practices on privacy, security, and regulatory compliance.
- Anticipate, mitigate, identify, troubleshoot, and resolve hardware and software problems. Engage associated teams, as necessary.
- Recommend, schedule, and perform software and hardware improvements, upgrades, patches, reconfigurations, and purchases.
- Develop, document, and maintain policies, procedures, and associated training plans for cloud administration.
EDUCATION and/or EXPERIENCE
- 5+ years' experience with email systems and supporting services including Exchange, Office 365, Active Directory, and Azure Active Directory.
- 5+ years of senior-level (tier 2 or 3) administration and engineering experience in an enterprise IT environment, having performed operational and break/fix activity along with engineering and design
- 2+ years of hands-on technical experience in Identity and Access Management (IAM) on Active Directory (Integration, consolidation), Microsoft Information Protection and other O365 security and compliance technologies
- 2+ years of hands-on technical experience with enterprise-level systems management systems such as SCCM and endpoint engineering, or Mobile Device Management (e.g., Intune) implementation or operations, preferred but not required.
- Microsoft Certified Solutions Associate: Office 365, preferred but not required.
- Microsoft 365 Certified: Security Administrator Associate preferred but not required.
- Knowledge of industry best practices for email routing, filtering, monitoring, tiered storage, backups, and disaster recovery.
- Skilled at working within a team-oriented, collaborative environment.