Cloud Engineer

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com

DMI is seeking a Senior Microsoft Cloud Engineer to serve as the senior technical authority for a federal agency client's Microsoft cloud environment spanning Microsoft 365, Azure, and Microsoft Security platforms. In this role, you will design, operate, and continuously improve a resilient and compliant cloud environment in alignment with Zero Trust principles, FedRAMP Moderate requirements, and federal cybersecurity standards.

• →Design, implement, operate, and optimize Microsoft 365, Azure, and Microsoft Security services for high availability, scalability, and mission performance
• →Implement and maintain cloud security architecture aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust), and FedRAMP Moderate requirements, including continuous monitoring and risk mitigation
• →Administer Entra ID, Conditional Access, and privileged access management; implement MFA providers and Smart Card and FIDO-based authentication across Windows and macOS systems
• →Manage Windows, macOS, and iOS devices in Intune, including compliance, configuration policies, and Autopilot OS imaging for environments of 700+ endpoints
• →Configure and manage Microsoft Defender, Sentinel, and Purview for threat protection, data governance, and incident response readiness; manage Sentinel data sources, log ingestion health, and alerting
• →Manage Exchange Online, Microsoft Teams, SharePoint Online, and related M365 collaboration services
• →Implement automated Power BI dashboards for systems health, compliance, spend, and utilization reporting; configure Azure budget alerts with a 90-day lead time for overages
• →Develop incident response and disaster recovery playbooks integrated into existing IR and COOP documentation
• →Perform duties with minimal supervision, exercising independent technical judgment and authority 

Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.

• Bachelor's degree in Information Technology, Computer Science, or a related field; extensive Microsoft certifications and demonstrated enterprise experience may be considered in lieu of a degree.

• All of the following current Microsoft certifications, maintained continuously for a minimum of 5 years: Microsoft 365 Certified Administrator Expert; Microsoft Certified Cybersecurity Architect Expert; Microsoft Certified Azure Solutions Architect Expert; Microsoft 365 Certified Endpoint Administrator Associate; Microsoft Certified Identity and Access Administrator Associate; Microsoft Certified Windows Server Hybrid Administrator Associate; Microsoft 365 Certified Teams Administrator Associate; Microsoft Certified Information Security Administrator Associate
• Proven experience designing and operating hybrid Active Directory, M365, and Entra environments with Microsoft tiered security standards
• Hands-on experience managing Intune for 700+ endpoints, including Autopilot provisioning and on-demand software delivery
• Advanced proficiency in Entra ID, Conditional Access, PAM, and MFA, including Smart Card and FIDO-based key authentication
• Experience managing Microsoft Sentinel, including data source configuration, log ingestion health monitoring, and alerting
• Experience implementing Power BI reporting and Azure budget management with proactive alerting
• Must provide 2–4 short examples of personally written technical documents (documentation, design documents, diagrams, PowerShell scripts, SOPs, or training materials) not to exceed 5 total pages
• 8+ years of enterprise Microsoft cloud engineering experience
• Experience supporting FedRAMP Moderate authorization processes in a federal environment
• Familiarity with IRS 1075 or similar federal data protection requirements