Overview
Senior Microsoft 365 and Azure Cloud Engineer responsible for managing and maintaining the client's M365 and Azure infrastructure, ensuring its reliability, security, and scalability.
What you'll do
- Manage day-to-day identity in Microsoft Entra ID: Conditional Access policies, SSPR, PIM, directory sync (Entra Connect / Cloud Sync), B2B/B2C configurations, app registrations, enterprise app management.
- Manage devices in Microsoft Intune: enrollment (BYOD and corporate), compliance policies, configuration profiles, app deployment, co-management with SCCM if applicable, Autopilot.
- Manage Microsoft Purview: data classification, sensitivity labels, DLP policies, insider risk management, communication compliance, audit log review.
- Manage Exchange Online: mail flow rules, connectors, hybrid configuration, anti-spam and anti-phishing policies (Defender for Office 365).
- Govern SharePoint Online and OneDrive permissions, external sharing controls and tenant-level configuration.
- Manage Microsoft Teams policies and governance (lifecycle, guest access, DLP integration).
- Integrate Microsoft 365 Defender / Defender XDR with incident response, alert triage and basic threat hunting.
- Operate Azure IaaS/PaaS: set up VMs, VNets, NSGs, storage accounts and Key Vault.
- Integrate Entra ID with Azure resources: set up RBAC, managed identities and service principals.
- Perform and monitor compliance posture with Azure Policy and Defender for Cloud.
- Set up hybrid connectivity: ExpressRoute, VPN Gateways and Azure Arc.
- Automate Azure and M365 workloads using PowerShell and Microsoft Graph API.
- Operate Azure Monitor, Log Analytics and Sentinel.
- Continuously monitor and optimize Azure resources to minimize costs while maximizing performance and efficiency.
- Identify and implement automation opportunities using PowerShell scripts, ARM templates or other cloud-based automation tools.
- Maintain cloud network configurations and network diagrams.
- Implement security best practices and ensure compliance with industry standards and regulatory requirements within the Azure environment.
- Manage access control and identity management within Azure Active Directory.
- Maintain detailed documentation of configurations, procedures and troubleshooting steps for Azure infrastructure.
What you'll need
- Bachelor's degree in Computer Science, Information Technology or a related field (or equivalent work experience).
- At least 5 years of experience working directly with M365 and Azure client operations tools.
- At least 2 years of experience working with other Azure components.
- Strong understanding of M365 services, including Intune and Mobile Device Management (MDM).
- Administrative experience with multiple operating systems, including Windows, macOS, Linux, Android and iPhone OS.
- Familiarity with networking concepts, including VPNs, firewalls and DNS.
- Experience with virtual machines, storage, networking, security and database services.
- Background with Active Directory Services, including DNS, DHCP and DFS.
- Demonstrated ability to maintain cloud network configurations and network diagrams.
- Proficiency in scripting or automation (e.g., PowerShell, CLI).
- Excellent communication and collaboration skills.
- Ability to work in a fast-paced and dynamic environment.
- Self-motivated, with the ability to work independently or in a team.
- Flexible schedule to accommodate client service hours.
- Strong organizational and multitasking skills.
- One or more certifications in Microsoft Azure.
Nice to have
- At least 2 years of experience in cybersecurity.
Details
- Location: Pune, Maharashtra, India.
- Fully remote; Clearwater is a virtual company and all colleagues work remotely.
- Travel required, estimated at less than 10% of the time.
- Colleagues provide their own computer, printer/scanner, computer audio capability, cell phone, internet service and Microsoft Office software.
- Mental/physical requirements: fast-paced environment handling multiple demands; requires a high level of initiative and independence; excellent written and oral communication; extended personal computer use.
Read the full description and apply on the company’s own careers page.