MICROSOFT CLOUD ADMINISTRATOR

JOB TITLE: MICROSOFT CLOUD ADMINISTRATOR

DEPARTMENT: IT

REPORTS TO: SENIOR MANAGER OF IT & SYSTEMS

CLASSIFICATION: EXEMPT

LOCATION: HOLLYWOOD, MD

STATUS: FULL TIME

JOB SUMMARY:

The Microsoft Cloud Administrator is responsible for the design, implementation, and ongoing administration of Microsoft 365 and Azure services across both the Government Community Cloud High (GCC High) environment supporting CMMC Level 2 requirements and the Microsoft UK Commercial Cloud supporting Cyber Essentials Plus (CE+) compliance. This role oversees the initial buildout and the daily operation, configuration, monitoring, and security of all GCC High and Commercial Microsoft 365 and Azure tenant services, ensuring continuous alignment with applicable federal and international cybersecurity standards.

The Cloud Administrator works closely with IT leadership, security, and operations teams to uphold a resilient and well-governed cloud infrastructure and to support audit readiness, policy enforcement, and incident response.

JOB RESPONSIBILITIES:

• Administer Microsoft 365 and Azure services within GCC High and UK CE+ environments
• Manage identity and access control (Entra ID/Azure AD), conditional access, and RBAC configurations
• Configure and monitor Microsoft cloud services (Entra/Sentinel/Intune/Purview/Defender XDR)
• Maintain system health, perform troubleshooting, and respond to service outages or incidents
• Implement and maintain NIST SP 800-171 and organizational security controls
• Develop and maintain SOPs, configuration baselines, and audit documentation
• Support internal and external audits through evidence collection and compliance reporting
• Collaborate with IT and business stakeholders to deploy secure capabilities and enhancements
• Leverage PowerShell and other tools to automate configuration and reporting workflows

• Stay current with Microsoft security features, best practices, and compliance
• Perform other duties as necessary and required.

REQUIRED QUALIFICATIONS:

• High school diploma or GED
• Minimum five (5) years hands-on administration of Microsoft 365 and Azure cloud services
• Knowledge of CMMC, NISTSP800-171, or Cyber Essentials Plus(CE+)security requirements
• Experience with:
  • Entra ID (Azure AD) including conditional access and RBAC
  • Microsoft Sentinel for monitoring and incident triage
  • Microsoft Purview features (e.g., DLP, sensitivity labels)
  • Intune or GPO for secure configuration baselines
  • PowerShell scripting for automation and reporting
• Strong documentation skills (SOPs, audit evidence, config records)
• Ability to obtain and maintain a U.S. Secret security clearance

PREFERRED QUALIFICATIONS:

• Relevant Microsoft Cloud certifications (e.g., Azure Administrator Associate)
• CompTIA Security+, Net+, or CySA +
• 2+ years administering GCC High or other sovereign cloud environments
• Strong understanding of Zero-Trust architecture

• Deep understanding of CMMC Level 2/3, NIST 800171, and CE+ controls
• Advanced competency configuring or managing:
  • Microsoft Sentinel (KQL, custom rules, playbooks)
  • Entra ID governance (PIM, identity lifecycle, risk protection)
  • Microsoft Purview advanced features (custom SITs, Insider Risk)
  • Microsoft Defender XDR
• Experience with audit support and evidence collection in regulated environments
• Familiarity with automation frameworks (e.g., Azure Automation, Graph API, CI/CD pipelines)

PHYSICAL REQUIREMENTS:

• Ability to traverse manufacturing facility when needed
• Prolonged periods of sitting at a desk and working on a computer