RDTS is seeking a Senior Microsoft Cloud Engineer to support the Congressional Budget Office (CBO). This is a senior individual contributor role carrying full technical authority over enterprise Microsoft 365, Azure, and Microsoft Security platforms. This role will operate independently with minimal supervision, serve as the primary technical advisor to CBO engineering teams, and own the design, implementation, and optimization of Microsoft cloud infrastructure across a 700+ endpoint enterprise environment.
This position requires all eight (8) Microsoft certifications listed below, each maintained and continuously active in professional use for a minimum of five (5) years. Expired or professionally unused certifications will not be considered.
Responsibilities:
- Provide senior-level technical leadership and independent operational support across M365, Azure, and the full Microsoft Security stack.
- Design, implement, operate, and optimize Microsoft cloud services for high availability, scalability, and performance.
- Implement and maintain cloud security architectures aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust), and FedRAMP Moderate.
- Fully implement and manage hybrid Active Directory / M365 / Entra ID using the Microsoft tiered security framework.
- Create and manage Windows, macOS, and Apple iOS devices in Microsoft Intune, including compliance policies and configuration delivery across 700+ endpoints.
- Deliver OS images via Windows Autopilot; manage on-demand software delivery through Intune.
- Lock down remote PowerShell in Entra / Azure across all APIs, including headless Exchange Online mailbox provisioning, SharePoint custom user profile imports, and Microsoft Graph access controls.
- Implement advanced IAM: Entra ID, Conditional Access, Privileged Access Management (PAM), least-privilege enforcement, MFA provider transitions, third-party MFA as Entra provider, and Smart Card / FIDO2 authentication across Windows and macOS.
- Manage Exchange Online, Microsoft Teams, SharePoint Online, and the full M365 workload suite.
- Support Azure infrastructure: cloud networking, workload configuration, troubleshooting, and hybrid integration.
- Configure and manage Microsoft Defender, Microsoft Sentinel, and Microsoft Purview for threat protection, data governance, and IR readiness.
- Manage Sentinel data sources with health reporting and alerting on ingest log data quality.
- Build automated Power BI reporting covering system health, compliance posture, current and forecasted spend, and utilization across all CBO Microsoft cloud infrastructure.
- Configure Azure budget alerts providing 90+ day lead time for potential overage decisions.
- Develop and maintain IR and disaster response playbooks integrated with CBO's existing IR/COOP documentation.
- Produce and maintain technical documentation, training materials, and standard operating procedures.
- Support audits, security assessments, and compliance reviews; act as senior technical advisor to CBO engineering teams.