Senior Microsoft M365 and Azure Cloud Engineer

POSITION SUMMARY
Clearwater is seeking a skilled and experienced Senior Microsoft 365 and Azure Cloud Engineer to join our team. The ideal candidate will have a strong background in Microsoft 365 Configuration and Management and significant experience with Azure operational tools such as Entra ID and Intune. As an Engineer, you will play a crucial role in managing and maintaining our client’s M365 and Azure-based infrastructure, ensuring its reliability, security, and scalability.
SPECIFIC JOB RESPONSIBILITIES
M365 and Azure Client Operations Management:
Microsoft Entra ID — day-to-day identity management: Conditional Access policies, SSPR, PIM (Privileged Identity Management), directory sync (Entra Connect / Cloud Sync), B2B/B2C configurations, app registrations, enterprise app management
Microsoft Intune — device enrollment (BYOD + corporate), compliance policies, configuration profiles, app deployment, co-management with SCCM if applicable, Autopilot
Microsoft Purview — data classification, sensitivity labels, DLP policies, insider risk management, communication compliance, audit log review
Exchange Online — mail flow rules, connectors, hybrid config, anti-spam/anti-phishing policies (Defender for Office 365)
SharePoint Online & OneDrive — permissions governance, external sharing controls, tenant-level configuration
Microsoft Teams — policy management, governance (lifecycle, guest access, DLP integration)
Microsoft 365 Defender / Defender XDR — incident response integration, alert triage, threat hunting basics
Azure Operation Management:
Azure IaaS/PaaS operations — Setup VMs, VNets, NSGs, storage accounts, Key Vault
Entra ID integration with Azure resources – Setup RBAC, managed identities, configure service principals
Azure Policy and Defender for Cloud – Perform and monitor compliance posture management
Hybrid connectivity — Setup ExpressRoute, VPN Gateways, Azure Arc
PowerShell / Microsoft Graph API — Enable Automation of both Azure and M365 workloads using Graph
Azure Monitor, Log Analytics, Sentinel
Infrastructure Optimization:
Continuously monitor and optimize Azure resources to minimize costs while maximizing performance and efficiency.
Identify and implement automation opportunities using PowerShell scripts, ARM templates, or other cloud-based automation tools.
Maintain cloud network configurations and network diagrams.
Security and Compliance:
Familiarity with key Azure security tools such as Defender Suite, Sentinel and Purview
Implement security best practices and ensure compliance with industry standards and regulatory requirements within the Azure environment.
Manage access control and identity management within Azure Active Directory.
Documentation:
Maintain detailed documentation of configurations, procedures, and troubleshooting steps for Azure infrastructure.
Qualifications:
Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience).
At least 5 years of experience working directly with M365 and Azure Client Operations Tools
At least 2 years of experience working with other Azure components
Preferred, at least 2 years of experience in cybersecurity.
One or more certifications in Microsoft Azure
Strong understanding of M365 services and including Intune and Mobile Device Management (MDM).
Administrative experience with multiple operating systems, including Windows, MacOS, Linux, Android, and iPhone OS.
Familiarity with networking concepts, including VPNs, firewalls, and DNS.
Experience with virtual machines, storage, networking, security, and database services.
Background with Active Directory Services, including DNS, DHCP, and DFS.
Demonstrated ability to maintain cloud network configurations and network diagrams.
Proficiency in scripting or automation (e.g., PowerShell, CLI).
Excellent communication and collaboration skills
Ability to work in a fast-paced and dynamic environment.
Self-motivated with the ability to work independently or in a team.
Flexible schedule to accommodate client service hours.
Strong organizational and multitasking skills.
Work Environment:
Currently, Clearwater is a "virtual" company, and all colleagues work remotely.
Travel is required, estimated at less than 10% of the time.
Colleagues are expected to provide their computer, printer/scanner, computer audio capability, cell phone, internet service, and Microsoft Office software.
The company provides subscriptions to various tools, including Microsoft Online Services, Salesforce.com, Encryption tools, data backup and others selected as standard by the company.
Compensation & Benefits:
Competitive base salary
Participation in the company's medical/RX, disability, life/ADD insurance, and 401K benefit programs.
Flexible Time Off (FTO) vacation policy.
Join our dynamic team and help us maintain a secure, efficient, and highly available Azure infrastructure that supports our organization's growth and innovation. If you are a passionate Azure Infrastructure Engineer with a strong skill set in Azure Virtual Desktop, MDM Intune, Azure Backup, and PowerShell, along with expertise in cloud computing and cybersecurity, we encourage you to apply.
Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed.
Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Recruiting team if you need any assistance completing any forms or to otherwise participating in the application process.
Mental/Physical Requirements: Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.