HybridHybrid work opportunities are available; required in-office schedule is not stated.
No H1B Sponsorship
US Citizenship Required
About the job
Requirements
U.S. citizenship is required by federal regulation.
A bachelor's degree in Computer Science or Information Systems, or equivalent work or military experience, is required.
At least 3 years of experience in IT engineering, cloud computing, or Microsoft 365 administration is required.
Working knowledge of Microsoft 365, Microsoft Entra ID, and Microsoft Azure is required.
Familiarity with NIST SP 800-171, CMMC, and DFARS compliance standards is required.
Understanding of basic networking principles and security concepts is required.
Strong communication and documentation skills for customer-facing migration and compliance work are required.
Responsibilities
Assist in deploying and hardening Microsoft 365 tenants, including Microsoft Entra ID, Exchange Online, SharePoint, and Teams, according to CMMC, NIST SP 800-171, and ISO 27001 requirements.
Support configuration of Conditional Access policies, Microsoft Defender for Office 365 and Endpoint, and Microsoft Purview for data governance and compliance.
Help implement zero-trust architecture within Microsoft 365, including identity-based access controls, multi-factor authentication, and least-privilege policies.
Develop and support solutions for migrating customer data and on-premises servers into Microsoft 365 and Azure environments.
Assist with migration planning, data mapping, pre-migration cleanup, and post-migration validation.
Document migration configurations, timelines, and rollback procedures for customer environments.
Support customer preparation for CMMC assessments by helping implement and document required security controls within Microsoft 365 and Azure.
Assist with gap assessments against NIST SP 800-171 practices and translate findings into remediation tasks.
Help maintain System Security Plans and Plans of Action and Milestones tied to cloud configurations.
Support implementation and maintenance of identity solutions in Microsoft Entra ID, including hybrid identity and conditional access.
Help troubleshoot identity and access management issues and validate access configurations against least-privilege standards.
Help enforce endpoint compliance using Microsoft Intune and Microsoft Defender.
Assist with deploying Microsoft Purview Information Protection for data classification, labeling, and retention.
Support compliance efforts related to ITAR, DFARS, and CUI handling requirements.
Assist in configuring Microsoft Sentinel for threat detection and monitoring within Microsoft 365 and Azure environments.
Contribute to risk assessments and threat modeling for customer cloud deployments.
Document security configurations, migration procedures, and compliance evidence for audit readiness.
Support cloud and Microsoft 365 migration projects end-to-end, from data preparation through implementation and documentation.
Shadow and assist with training sessions on AvePoint tools, Microsoft Power BI dashboards, and SharePoint solutions.
Desired Qualifications
Certifications such as Microsoft 365 Certified: Administrator Expert (MS-102), Azure Administrator Associate (AZ-104), or CompTIA Security+ are preferred.
A Secret or higher security clearance is preferred.
Hands-on experience with Microsoft 365 tenant-to-tenant or on-premises-to-cloud migrations is preferred.
Experience supporting CMMC or NIST SP 800-171 assessments or gap analyses is preferred.
Experience with Microsoft Intune, Microsoft Defender, and Microsoft Purview is preferred.
Experience with automation tools such as Autopilot, PowerShell, or Bicep/Azure Resource Manager is preferred.
Basic familiarity with Google Cloud Platform and Google Cloud Identity is a plus.
Familiarity with other cloud platforms, such as Google Cloud, is a plus.
Exposure to Google Cloud Identity is a plus for engineers supporting mixed-environment customers.
Cloud Engineer ISI Enterprises is seeking a Cloud Engineer to support the design, deployment, and hardening of Microsoft 365 environments under the guidance of senior engineers. This role is ideal for someone who wants hands-on experience configuring M365 security controls, building customer migration solutions, and helping clients prepare for CMMC assessments. You'll work directly with security best practices and configurations aligned to CMMC, NIST, CIS, and ISO 27001 standards within the Microsoft ecosystem. Familiarity with other cloud platforms, such as Google Cloud, is a plus, as ISI supports a range of customer environments. Key Responsibilities Microsoft 365 Security Configuration
Assist in deploying and hardening Microsoft 365 tenants, including Microsoft Entra ID, Exchange Online, SharePoint, and Teams, per CMMC, NIST SP 800-171, and ISO 27001 requirements.
Support configuration of Conditional Access policies, Microsoft Defender for Office 365/Endpoint, and Microsoft Purview for data governance and compliance.
Help implement zero-trust architecture within M365, including identity-based access controls, multi-factor authentication, and least-privilege policies.
Cloud & Server Migration Engineering
Develop and support solutions for migrating customer data and on-premises servers into Microsoft 365 and Azure environments.
Assist with migration planning, data mapping, pre-migration cleanup, and post-migration validation.
Document migration configurations, timelines, and rollback procedures for customer environments.
CMMC Readiness Support
Support customer preparation for CMMC assessments by helping implement and document required security controls within M365/Azure.
Assist with gap assessments against NIST SP 800-171 practices and translating findings into remediation tasks.
Help maintain System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms) tied to cloud configurations.
Identity & Access Management (IAM)
Support implementation and maintenance of identity solutions in Microsoft Entra ID, including hybrid identity and conditional access.
Help troubleshoot IAM issues and validate access configurations against least-privilege standards.
Exposure to Google Cloud Identity is a plus for engineers supporting mixed-environment customers.
Endpoint & Data Protection
Help enforce endpoint compliance using Microsoft Intune and Microsoft Defender.
Assist with deploying Microsoft Purview Information Protection for data classification, labeling, and retention.
Support compliance efforts related to ITAR, DFARS, and CUI handling requirements.
Threat Detection & Documentation
Assist in configuring Microsoft Sentinel for threat detection and monitoring within M365/Azure environments.
Contribute to risk assessments and threat modeling for customer cloud deployments.
Document security configurations, migration procedures, and compliance evidence for audit readiness.
Project Support & Learning
Support cloud and M365 migration projects end-to-end, from data preparation through implementation and documentation.
Shadow and assist with training sessions on AvePoint tools, Microsoft Power BI dashboards, and SharePoint solutions.
Qualifications
U.S. citizenship is required by federal regulation.
Bachelor's degree in Computer Science, Information Systems, or equivalent work/military experience.
Minimum 3 years of experience in IT engineering, cloud computing, or Microsoft 365 administration.
Working knowledge of Microsoft 365, Microsoft Entra ID, and Microsoft Azure.
Familiarity with compliance standards such as NIST SP 800-171, CMMC, and DFARS.
Understanding of basic networking principles and security concepts.
Strong communication and documentation skills for customer-facing migration and compliance work.
Preferred Qualifications
Certifications such as Microsoft 365 Certified: Administrator Expert (MS-102), Azure Administrator Associate (AZ-104), or CompTIA Security+.
Security clearance of Secret or higher
Hands-on experience with Microsoft 365 tenant-to-tenant or on-prem-to-cloud migrations.
Experience supporting CMMC or NIST SP 800-171 assessments/gap analyses.
Experience with Microsoft Intune, Microsoft Defender, and Microsoft Purview.
Experience with automation tools such as Autopilot, Powershell, or Bicep/Azure Resource Manager
Basic familiarity with Google Cloud Platform (GCP) and Google Cloud Identity is a plus.
What We Offer
Salary range: $110,000-$125,000, commensurate with experience.
Comprehensive benefits package, including PTO and flexible scheduling.
Hybrid work opportunities.
Mentorship and training opportunities to support professional development and career growth.
About Industrial Security Integrators, LLC (ISI Enterprises) ISI Enterprises is an equal opportunity employer committed to fostering diversity in the workplace. We believe in empowering a workforce that reflects a wide range of backgrounds, traditions, and experiences to strengthen our team and ensure innovation.