Senior Microsoft M365 and Azure Cloud Engineer

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience).
• At least 5 years of experience working directly with M365 and Azure Client Operations Tools
• At least 2 years of experience working with other Azure components
• Preferred, at least 2 years of experience in cybersecurity.
• One or more certifications in Microsoft Azure
• Strong understanding of M365 services and including Intune and Mobile Device Management (MDM).
• Administrative experience with multiple operating systems, including Windows, MacOS, Linux, Android, and iPhone OS.
• Familiarity with networking concepts, including VPNs, firewalls, and DNS.
• Experience with virtual machines, storage, networking, security, and database services.
• Background with Active Directory Services, including DNS, DHCP, and DFS.
• Demonstrated ability to maintain cloud network configurations and network diagrams.
• Proficiency in scripting or automation (e.g., PowerShell, CLI).
• Excellent communication and collaboration skills
• Ability to work in a fast-paced and dynamic environment.
• Self-motivated with the ability to work independently or in a team.
• Flexible schedule to accommodate client service hours.
• Strong organizational and multitasking skills.

Work Environment

• Currently, Clearwater is a "virtual" company, and all colleagues work remotely.
• Travel is required, estimated at less than 10% of the time.
• Colleagues are expected to provide their computer, printer/scanner, computer audio capability, cell phone, internet service, and Microsoft Office software.
• The company provides subscriptions to various tools, including Microsoft Online Services, Salesforce.com, Encryption tools, data backup and others selected as standard by the company.

• Microsoft Entra ID — day-to-day identity management: Conditional Access policies, SSPR, PIM (Privileged Identity Management), directory sync (Entra Connect / Cloud Sync), B2B/B2C configurations, app registrations, enterprise app management
• Microsoft Intune – device enrollment (BYOD + corporate), compliance policies, configuration profiles, app deployment, co-management with SCCM if applicable, Autopilot
• Microsoft Purview – data classification, sensitivity labels, DLP policies, insider risk management, communication compliance, audit log review
• Exchange Online – mail flow rules, connectors, hybrid config, anti-spam/anti-phishing policies (Defender for Office 365)
• SharePoint Online & OneDrive – permissions governance, external sharing controls, tenant-level configuration
• Microsoft Teams – policy management, governance (lifecycle, guest access, DLP integration)
• Microsoft 365 Defender / Defender XDR – incident response integration, alert triage, threat hunting basics

• Azure IaaS/PaaS operations – Setup VMs, VNets, NSGs, storage accounts, Key Vault
• Entra ID integration with Azure resources – Setup RBAC, managed identities, configure service principals
• Azure Policy and Defender for Cloud – Perform and monitor compliance posture management
• Hybrid connectivity – Setup ExpressRoute, VPN Gateways, Azure Arc
• PowerShell / Microsoft Graph API – Enable Automation of both Azure and M365 workloads using Graph
• Azure Monitor, Log Analytics, Sentinel

• Continuously monitor and optimize Azure resources to minimize costs while maximizing performance and efficiency.
• Identify and implement automation opportunities using PowerShell scripts, ARM templates, or other cloud-based automation tools.
• Maintain cloud network configurations and network diagrams.

• Familiarity with key Azure security tools such as Defender Suite, Sentinel and Purview
• Implement security best practices and ensure compliance with industry standards and regulatory requirements within the Azure environment.
• Manage access control and identity management within Azure Active Directory.

• Maintain detailed documentation of configurations, procedures, and troubleshooting steps for Azure infrastructure.

• Competitive base salary
• Participation in the company's medical/RX, disability, life/ADD insurance, and 401K benefit programs.
• Flexible Time Off (FTO) vacation policy.

Join our dynamic team and help us maintain a secure, efficient, and highly available Azure infrastructure that supports our organization's growth and innovation. If you are a passionate Azure Infrastructure Engineer with a strong skill set in Azure Virtual Desktop, MDM Intune, Azure Backup, and PowerShell, along with expertise in cloud computing and cybersecurity, we encourage you to apply.

Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed.

Mental/Physical Requirements: Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.