Microsoft Cloud Engineer

PHEAA is a nonprofit student aid organization that holds a mission of providing affordable access to higher education.
 
Give back tomorrow by joining us today!

Salary: Grade 17 ($92,720-$143,952)
 
Shift: Monday through Friday 8:00 AM - 5:00 PM
 
Location: 1200 North 7th Street, Harrisburg, PA. Hybrid one day a week on-site (can fluctuate as needed based upon projects and Agency initiatives).
 
Department: Enterprise Support Center 

This position is responsible for providing subject matter expertise in the design, implementation, and ongoing support and administration of the Microsoft M365 suite, including Exchange Online, Teams, OneDrive, SharePoint, Entra ID, etc. as well as the Microsoft Purview suite inclusive of data governance, data security, and risk/compliance tools, the Microsoft Defender suite, and Microsoft Intune platform. This position performs at a high level of complexity with a high level of proficiency under general supervision.  The individual in this position plays a key role in helping to develop the overall architectural design of the M365 solution, configuration of the tenant, and implementation, administration, and ongoing support of the various components described above.

Primary Duties and Responsibilities 

Design, Implementation, and Administration of M365 Suite 

•    Contribute to developing architectural design of the M365 solution, performing configuration of the M365 tenant, and executing migration of email, calendar, and collaboration services from existing solutions to the equivalent M365 components.
•    Perform security vulnerability mitigation and ensure that configuration of systems is consistent with recommended industry and security best practices (e.g. STIGs).
•    Assist in the development and perform the deployment of policies and other best practice configurations using Microsoft 365 Security Center and related components.
•    Troubleshoot moderate to complex issues across the breadth of the M365 solution. 
•    Create and maintain comprehensive engineering documentation, including: design, configuration and implementation procedures, diagrams, and operational SOPs.
•    Create complex custom Powershell scripts to aid in the automated administration of applications.
•    Perform proactive system, user, and mailbox administration according to best practices to ensure smooth and efficient operation of email services.

Install, Configure, Administer, and support Various IT and App Dev Tools 
•    Assist with the management of systems and applications used to build, deploy, and update desktop operating systems and software.
•    Provide guidance and recommendations related to the design, deployment, and ongoing management of end user device “images” and configurations.
•    Maintain technical expertise of the various workstation deployment and management systems within the Agency.
•    Provide backup support for systems outside of incumbent’s primary responsibility.

Other Duties and Responsibilities 
•    Remain current on Microsoft solutions including Active Directory, Microsoft 365, Azure, SCCM, and Windows servers.
•    Develop and publish project schedules, roadmaps and report on accomplishments.
•    Communicate outages and issues to senior management and business units, provide cause and resolution once issues have been resolved.
•    Comply with the Agency’s enterprise security and privacy policies and departmental procedures.
•    Maintain accurate and current National Institute of Standards Technology (NIST) procedures and documentation.
•    Participate in Business Continuity/Disaster Recovery planning and testing.
•    Other duties as assigned.

Required Skills

Bachelor’s degree in computer science and five to ten years of relevant experience or any equivalent combination of training/certification, experience and 5 plus years of applicable experience.

•    Demonstrated experience with Microsoft 365 migrations.
•    Strong knowledge of advanced PowerShell usage.
•    Advanced knowledge of SQL databases.
•    Advanced knowledge of ADFS, Entra ID, and, Microsoft 365 authentication methods. 
•    Hands on administration experience with Microsoft 365 suite, including: Exchange Online, Teams, OneDrive, SharePoint, etc.
•    Possess a history of thinking strategically and investigating/analyzing information independently.
•    Effective communication skills necessary to make complex technical subjects understandable to non-technical audiences.
•    Track record of managing multiple activities with varying priorities while ensuring accurate and timely results. 
•    Demonstrated experience working in a multi-platform environment.
•    Proficient experience in scripting languages. 
•    Proven ability to focus on details for extended periods of time.

Preferred Qualifications- Experience with some or all the following:
•    Microsoft Purview and Defender platform security and compliance tools (Entra ID conditional access and MFA, DLP, eDiscovery, Data Retention, Information Protection, Defender for Identity, Defender for Endpoint, etc.)Experience with Microsoft 365 data/service migrations - especially from legacy file servers / confluence to SharePoint Online
•    Configuration, deployment, and administration of Windows, Mac, and iOS endpoints using hybrid and modern MDM platforms including MECM and Microsoft Intune.

Essential Duties and Responsibilities 
•    This position requires participation in a 24x7x365 on-call rotation.  The frequency of the rotation depends on the number of members in the team.  On-call requires carrying a cell-phone and responding to calls within the agreed upon timeframe set within PHEAA’s standards.  Internet connectivity from home is required as part of the on-call rotation.  

PHEAA’s environment welcomes and supports our employees, customers, and stakeholders; we seek out and value differing perspectives and contributions.

Required Experience

  Bachelor's Degree