Senior Cloud Engineer

Location: 3249 Quality Drive Rancho Cordova, CA 95670

Department: Information Technology (Network, Security, Service Desk)

Location Type: IN_OFFICE

Employment Type: FULL_TIME

• Serve as the senior technical owner for Microsoft 365 and related cloud services.
• Design and maintain platform standards, governance controls, documentation, roadmaps, and configuration baselines.
• Lead complex troubleshooting, major changes, platform improvements, and Tier 3 escalations.
• Reduce reliance on MSPs and outside vendors by building sustainable internal capability and documented operating practices.

• Architect and administer Microsoft Entra ID, Conditional Access, identity governance, privileged access controls, and identity lifecycle standards.
• Own Intune and Windows Autopilot architecture, compliance policies, configuration profiles, application deployment standards, and endpoint-management governance.
• Improve endpoint lifecycle, security posture, reporting, provisioning reliability, and operational consistency.

• Assume long-term technical ownership of SharePoint Online after the initial consulting engagement.
• Implement and maintain SharePoint governance, permissions, site lifecycle, ownership, and information architecture standards.
• Support Microsoft Teams, Exchange Online, OneDrive, Purview, retention, and collaboration governance.

• Define and maintain recovery architecture for Microsoft 365 and related cloud services, including Exchange Online, SharePoint Online, OneDrive, Teams, Entra ID, Intune, and applicable Azure-hosted workloads.
• Evaluate, implement, and govern third-party backup and recovery platforms for Microsoft cloud services.
• Document Microsoft, vendor, and internal recovery responsibilities, service dependencies, recovery procedures, and escalation paths.
• Establish and maintain recovery runbooks, service-recovery requirements, restore procedures, and evidence of recovery readiness.
• Plan and execute recurring restore tests and participate in broader disaster-recovery and business-continuity exercises.
• Partner with the Senior Security and Network Engineer, system owners, vendors, and IT leadership to validate end-to-end recovery capabilities.
• Identify recovery gaps and recommend technical, procedural, or vendor changes to improve resilience.

• Partner with the Senior Security and Network Engineer on Microsoft Defender, identity security, audit remediation, and Zero Trust initiatives.
• Develop PowerShell, Microsoft Graph, and workflow automation that reduces manual administration and repetitive support work.
• Evaluate and govern Power Platform, Microsoft Copilot, and emerging Microsoft cloud capabilities.
• Support secure and supportable integration patterns across Microsoft cloud services and business platforms.

• Mentor the Junior Cloud Engineer and assist the VP, Information Systems in establishing a practical development path.
• Provide technical guidance to the Service Desk and improve escalation procedures, troubleshooting documentation, and knowledge articles.
• Coordinate with business stakeholders, consultants, vendors, and IT leadership on cloud projects, priorities, service changes, and recovery requirements.
• Create and maintain clear SOPs, architecture decisions, runbooks, and operating documentation as part of normal delivery.

• Five or more years of progressively responsible Microsoft 365 administration and engineering experience, including senior-level design, implementation, and troubleshooting.
• Advanced experience with Microsoft 365, Entra ID, Intune, Exchange Online, Teams, SharePoint Online, OneDrive, and Windows Autopilot.
• Experience administering Azure services relevant to identity, automation, monitoring, application integrations, backup, recovery, and Microsoft cloud operations, together with strong PowerShell automation skills.
• Experience designing, documenting, and testing backup, restoration, and recovery capabilities for Microsoft 365 or comparable enterprise cloud platforms.
• Demonstrated ability to translate business and recovery requirements into scalable, secure, supportable, and operationally sustainable technical solutions.
• Strong documentation, stakeholder communication, troubleshooting, mentoring, and vendor-management skills.
• Experience supporting multi-site organizations; manufacturing experience is preferred.

• Experience with Microsoft Defender, Purview, Power Platform governance, Copilot readiness, and Zero Trust architecture.
• Experience leading SharePoint Online governance or information architecture initiatives.
• Experience evaluating or administering Microsoft 365 backup platforms such as Barracuda, Veeam, Rubrik, Commvault, AvePoint, or comparable enterprise cloud backup solutions.
• Experience developing recovery runbooks and participating in disaster-recovery or business-continuity exercises.
• Working knowledge of recovery point objectives, recovery time objectives, service dependencies, restore validation, and recovery-testing evidence.
• Relevant Microsoft certifications such as Azure Administrator, Identity and Access Administrator, Endpoint Administrator, or Azure Solutions Architect.
• Experience supporting the Microsoft platform, identity, integration, security, or operational dependencies surrounding Dynamics 365 is a plus.

• Microsoft Cloud Platform Leadership
• Identity & Endpoint Management
• Cloud Resilience & Disaster Recovery
• Security, Risk Management & Governance
• Automation & Continuous Improvement
• Technical Mentorship & Stakeholder Partnership