Enterprise Cloud Engineer

The Enterprise Cloud Engineer is responsible for administering and securing Microsoft 365 services, including Entra ID, Intune, Exchange Online, Teams, OneDrive, and SharePoint Online. This role ensures high availability, governance, and security of the organization’s cloud collaboration and identity platforms. The engineer also helps plan and implement policies and procedures to align with company goals, industry best practices, and regulatory requirements.

• Perform and support capacity planning to aid in the development of long‑term strategic goals for Microsoft 365 services such as Exchange Online, OneDrive, Teams, and SharePoint Online.
• Perform cloud security analysis, evaluate configurations, and provide recommendations for Microsoft 365, Entra ID, and Windows 10/11 environments in alignment with the company’s Cloud Cyber Risk Framework. This includes Microsoft Defender for Cloud Apps, Microsoft 365 Defender, Microsoft Information Protection (MIP), Conditional Access policies, Intune, Microsoft Defender for Cloud, and Microsoft Defender for Endpoint.
• Lead migration efforts to Microsoft 365 cloud services for newly acquired companies. This includes tenant‑to‑tenant migrations, on‑premises Exchange to Exchange Online, or Google Workspace to Microsoft 365.
• Design, implement, and maintain cloud‑specific security policies, standards, and procedures, including tenant management, auditing and monitoring, security incident management, data protection (DLP and encryption), user and administrator account management, and conditional access controls.
• Support hybrid IT environments by integrating on‑premises identity and collaboration systems with Microsoft 365 services.
• Act as the primary point of contact and subject matter expert for Microsoft 365 services, including Entra ID, Intune, Exchange Online, Teams, OneDrive, and SharePoint Online.
• Write, maintain, and execute custom PowerShell scripts to automate administrative tasks and remediate issues.
• Monitor service health, review performance logs, and proactively optimize Microsoft 365 and Mimecast service performance and security.
• Ensure the integrity and security of enterprise data in compliance with business, privacy, and regulatory requirements.
• Develop, document, and maintain policies, procedures, and associated training plans for Microsoft 365 administration and governance.

ASRC’s Core competencies include Leading Self, Leading People and Leading the Organization. In addition to our core competency model, our framework includes competencies specific to the various levels of positions within our company. For more information on our core competencies please contact the HR (Human Resources) Department and reference the ASRC (Arctic Slope Regional Corporation) Leadership Framework.

Customer Focus

• Is dedicated to meeting the expectations and requirements of internal and external customers; gets first-hand customer information and uses it for improvements in products and services; acts with customers in mind; establishes and maintains effective relationships with customers and gains their trust and respect.

Drive for Results

• Can be counted on to exceed goals successfully; is constantly and consistently one of the top performers; very bottom-line oriented; steadfastly pushes self and others for results.

Problem Solving

• Uses rigorous logic and methods to solve difficult problems with effective solutions; probes all fruitful sources for answers; can see hidden problems; is excellent at honest analysis; looks beyond the obvious and does not stop at the first answers.

Time Management

• Uses time effectively and efficiently, concentrating his/her efforts on the more important priorities.

1. Five (5) years' experience with email systems and supporting services including Exchange, Office 365, Active Directory and Azure Active Directory.
2. Five (5) years of senior-level (tier 2 or 3) administration and engineering experience in an enterprise IT environment, having performed operational and break/fix activity along with engineering and design
3. Four (4) years of hands-on technical experience in Identity and Access Management (IAM) on Active Directory (Integration, consolidation), Microsoft Information Protection and other O365 security and compliance technologies
4. Three (3) years of hands-on technical experience with enterprise-level systems management systems such as SCCM and endpoint engineering, or Mobile Device Management (e.g., Intune) implementation or operations, preferred but not required.
5. Knowledge of industry best practices for email routing, filtering, monitoring, tiered storage, backups, and disaster recovery.
6. Strong knowledge of Microsoft security solutions (Defender suite, Conditional Access, Intune).
7. Experience with tenant migrations and hybrid identity integration.
8. Proficiency in PowerShell scripting for automation and administration.

Ability to read and interpret documents such as safety rules, operating and maintenance instructions, and procedure manuals. Ability to write routine reports and correspondence. Ability to speak effectively before groups of employees or customers.

Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to draw and interpret bar graphs.

Ability to apply common sense understanding to carry out instructions furnished in written, oral, or diagram form. Ability to deal with problems involving several concrete variables in standardized situations.

The physical demands described herein represent those that must be met by an employee to perform the essential functions of this position successfully.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to talk or hear.  The employee is frequently required to sit; reach with hands and arms; and to use hands to finger, handle, or feel.  The employee is occasionally required to stand, walk, climb, or balance.  The employee must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds.   Specific vision abilities required by this job include the ability to adjust focus.

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The work environment is in a busy office setting.  The noise level in the work environment is usually moderate. While performing the duties of this job, the employee may be occasionally exposed to outside weather conditions and may be required to travel in small and large commercial aircraft.

NOTE: This document does not create an employment contract, implied or otherwise. The statements contained herein are intended to describe the principal functions of this position, the level of knowledge and skill typically required, and the scope of responsibilities but should not be considered an all-inclusive listing of work requirements.

ASRC is a drug-free workplace and pre-employment drug testing is part of the hiring process.

ASRC and its family of companies is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, national origin, religion, disability, protected veteran status, age or any other legal protected status.  EOE:  M|F|D|V EEO Poster

Arctic Slope Regional Corporation, an Inupiat-owned corporation created as a result of the Alaska Native Claims Settlement Act.

ASRC's family of companies apply a shareholder preference in employment, to the maximum extent feasible, as authorized by law.