Azure & M365 Engineer with Security Clearance

---

Job description

We are seeking a highly motivated engineer with a thirst for learning, in support of geographically dispersed, state of the art systems built on a foundation of Microsoft services. Candidates with proven depth creating solutions on-premises, and in the cloud, will be positioned for success in our organization. Proven experience with the design, deployment and management of Microsoft cloud solutions would be a differentiator. Additionally, engineers will build, maintain, and migrate large scale multi-domain enterprise Windows Server environments to both on-premises, cloud, or hybrid infrastructures including Azure/M365. Engineers will provide support to multiple globally dispersed WAN connected sites. Embracing the DevOps model, engineers will be responsible for supporting their solutions throughout the entire IT project lifecycle, to include refining requirements, creating design documentation, creating installation instructions and deployment plans, and providing O&M support. Project assignments will vary based on skill level, and may include engineering geographically dispersed services, integrating services into public, private and hybrid cloud environments, engineering solutions to be deployed via automated CM tools, and hardening the solutions to address security, compliance and regulatory initiatives. Responsibilities: Plans and directs Azure/M365 infrastructure and related components, services and applications
Designs and defines system architecture for new or existing computer systems utilizing both on-premises, cloud-based and hybrid hosting technologies and solutions
Analyze requirements and system architectures to refine system requirements, specifications and resulting design plans
Administer, operate, manage, and maintain components for on-premises and cloud-based environments and systems
Reviews completion and implementation of system configurations and/or enhancements and makes recommendations to management and/or clients Required Skills: Strong understanding or direct experience with onboarding and operating within Azure and M365 environments
Strong understanding and experience with the designing, engineering, administering and operating Azure Active Directory/Entra ID based identity and access management solutions and authentication services and Single Sign On (SOO) solutions such as ADFS, Ping Federate, Okta or other SAML or OAuth technologies/solutions
Develop solutions integrating Microsoft Azure commercial clouds (public and government community) with services hosted on-premises and in other?clouds
Understanding of Hybrid Identities, Azure Active Directory Connector (AADC)/ Entra Connect and/or other Identity Management or synchronization technologies like Microsoft Identity Manager (MIM), Okta, etc.
Architectural understanding of M365 security constructs and data protections such as Purview, DLP, RMS/IRM, Azure Information Protection
Experience with Multi Factor Authentication (MFA) and Public Key Infrastructure (PKI)
Experience managing and implementing Azure Policy for resource governance and compliance management
Experience managing Azure/M365 using PowerShell and Microsoft Graph
Experience with Active Directory design, topology, and implementation best practices
Experience with Group Policy Objects and Management
Experience with Windows DNS and DHCP
Experience with Windows Server 2019 and 2022
Experience with File and Storage Services, to include Distributed File System (DFS), including Namespace, Target and Replication management
Experience with Microsoft Windows automation scripting with PowerShell or other scripting languages
System configuration based on security guidelines such as DISA STIGs, CIS or Azure Security Benchmarks
CompTIA Security+ or similar for IAT Level II DoD 8570 certification Apex Benefits Overview: Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Apex team member can provide.

<!– job description page –>