Cloud & IT Infrastructure Engineer

Job Details: Job Location: Corporate Headquarters

• Mc. Lean, VA, Position Type: Full Time, Salary Range: $130000.00 - $160000.00Salary/year, We are seeking a hands-on Cloud & IT Infrastructure Engineer to administer, secure, and continue modernizing our cloud environment while directly supporting the people and technology that run our business day to day. Our environment is approximately 98% cloud-based, built on Microsoft 365 and Azure. The person in this role will spend most of their time in that environment: managing identity and access, securing endpoints, automating recurring work, and completing the remaining migration of legacy on-premises workloads. They will also handle the practical corporate IT work that keeps two operating companies running, from laptop deployment to conference room technology. This is a working engineer role, not a management or architecture role. You will be the person configuring the Conditional Access policy, writing the Power. Shell script, imaging the laptop, and fixing the conference room display. If you have moved away from hands-on daily work, this is not the right fit. You will report to the IT Director and support two affiliated operating companies with separate infrastructure and differing security and compliance requirements.

Qualifications

Key responsibilities Cloud administration and migration (primary focus) Administer and optimize our Azure environment day to day: VMs, storage, virtual networks, NSGs, VPN gateways, DNS, backup, and recovery. Own Microsoft 365 tenant administration across Exchange Online, SharePoint, OneDrive, and Teams, plus Entra ID identity, Conditional Access, MFA, and RBAC.

Plan and execute the migration of remaining on-premises workloads and services into the cloud, including cutover and rollback. Maintain cloud backup, disaster recovery, and business continuity, and keep appropriate data separation between the two company environments. Endpoint management and corporate IT Manage endpoints through Intune: configuration profiles, compliance policies, application deployment, update rings, and Autopilot.

Configure, deploy, and support laptops, desktops, and mobile devices, and troubleshoot hardware, software, network, and authentication issues. Support printers, office Wi-Fi, conference room technology, Teams Rooms, displays, and wireless presentation systems. Run employee onboarding and offboarding, maintain inventory and licensing, and coordinate with vendors.

Security and compliance Implement, maintain, test, and document technical security controls across the cloud environment. Manage endpoint security, patching, vulnerability remediation, logging, and monitoring. Implement technical controls supporting CMMC and NIST SP 800-171 alongside our compliance resource, including evidence collection, control validation, and assessment preparation.

Automation and scripting Write and maintain Power. Shell automation for provisioning, deprovisioning, configuration enforcement, software deployment, and reporting. Use Microsoft Graph API or equivalent tooling for bulk operations across the tenant. Automate recurring administrative work rather than performing it manually.

Required qualifications 6+ years in IT infrastructure, systems administration, or cloud engineering, mostly in hands-on delivery rather than management. Current, hands-on administration of a production Azure environment, including compute, storage, virtual networking, and backup. Direct experience migrating workloads, mailboxes, file shares, or services from on-premises into Microsoft 365 or Azure.

Strong Microsoft 365 administration across Exchange Online, SharePoint, OneDrive, and Teams. Hands-on Entra ID and Active Directory administration, including Conditional Access, MFA, and RBAC. Hands-on Intune experience: configuration profiles, compliance policies, application deployment, and Autopilot. Demonstrated Power.

Shell scripting, with specific examples of work you automated end to end. Working knowledge of endpoint security, patching, vulnerability remediation, DNS, VPN, and firewalls. Recent track record of hands-on end-user support and office technology work alongside engineering responsibilities. Eligibility for Top Secret clearance.

Benefits

Medical, Dental and Vision Coverage 401(k) Matching PTO