Senior Cloud Engineer

Responsibilities

This position description does not represent a current opening but may be used to identify candidates with skills and experience to fill a position within Technica Corporation once the contract is awarded. The position is for a Contractor role to support an approximate 3-4 month project. Candidates who express an interest may be considered for future positions at Technica Corporation. If a position becomes available that aligns with your qualifications, our recruitment team will contact you.

 

Technica is seeking a Senior Cloud Engineer to support the design, implementation, integration, hardening, documentation, and sustainment of Microsoft cloud, endpoint, security, collaboration, and compliance capabilities. The engineer will serve as a hands-on technical resource supporting Microsoft 365 Commercial, Microsoft GCC High, Microsoft Entra ID, Intune, Purview, Defender, Sentinel, SharePoint Online, Teams, Azure-hosted infrastructure, VDI integration, endpoint compliance, data labeling, DLP, secure collaboration, and CUI/manufacturing data protection.

 

The Senior Cloud Engineer will work as part of an integrated implementation team responsible for establishing secure-by-default Microsoft cloud services, operational GCC High capabilities, endpoint and device compliance, SIEM telemetry integration, secure remote access support, and protected collaboration environments for commercial, CUI, and restricted manufacturing/vault workflows. The role requires strong Microsoft cloud engineering experience, familiarity with regulated environments, and the ability to translate security and compliance requirements into practical, maintainable technical configurations.

 

The successful candidate will analyze applications and make recommendations across multiple areas to determine which platforms can be moved, migrated, or deployed into a cloud environment.

 

Typical responsibilities may include:

• Design, configure, and support Microsoft 365 Commercial and Microsoft GCC High capabilities, including tenant configuration, administrative role management, audit logging, security baseline implementation, and operational readiness.
• Support GCC High operational setup, including SharePoint Online, Teams, OneDrive, Exchange, Microsoft Purview, Intune, Defender, and related Microsoft security and compliance services.
• Implement SharePoint and Teams segmentation for commercial, CUI, vault, collaboration, partner, and project-specific workspaces.
• Design and implement Microsoft Purview sensitivity labels, CUI labeling, data-handling rules, DLP policies, information-protection controls, audit-readiness, and eDiscovery support configurations.
• Work with automating build pipelines, migrations, security, and compliance in the cloud, automation using Azure, and the ability to script or program. 
• Support DLP gateway or equivalent controls for GCC High SharePoint, OneDrive, Teams, email, and related data flows.
• Implement Intune device enrollment, compliance policies, configuration profiles, device restrictions, patch rings, endpoint baselines, BYOD restrictions, and device reporting.
• Support endpoint hardening baselines for standard users, administrators, engineering users, CUI users, and manufacturing-related endpoints.
• Coordinate with identity engineering teams to support Conditional Access, MFA enforcement, device compliance signals, role-based access, administrator protection, and secure access policies.
• Support VDI design and implementation activities for commercial Microsoft 365 remote administration, CUI access, restricted manufacturing collaboration, and secure customer-site workflows.
• Coordinate with network security teams to support Azure-hosted infrastructure, secure remote access, VPN dependencies, Palo Alto firewall logging, network segmentation, and GCC High-aligned connectivity.
• Integrate Microsoft cloud, endpoint, identity, DLP, and network telemetry with Microsoft Sentinel or other approved SIEM workflows.
• Configure and validate Microsoft Sentinel connectors, diagnostic settings, data ingestion, log source health, analytics rules, workbooks, dashboards, and alerting use cases in coordination with SOC/SIEM engineers.
• Support the design and implementation of secure manufacturing and IP protection workflows, including information vaults, restricted collaboration spaces, protected recipe workflows, controlled technical data repositories, and external sharing restrictions.
• Implement access and data protection controls to support commercial, CUI, export-controlled, ITAR-sensitive, restricted-manufacturing, and high-value engineering data workflows.
• Produce and maintain implementation documentation, configuration baselines, diagrams, policy sets, runbooks, test results, e