Position Summary
We are seeking a mid to senior level Cloud Administrator with deep expertise administering Microsoft 365 and Microsoft Entra ID within a Microsoft GCC High environment. This role will be responsible for identity, access, collaboration services, and cloud platform operations supporting a CMMC Level 2–aligned organization. The ideal candidate has strong hands-on experience with hybrid identity (Active Directory to Entra ID), authentication and access controls, M365 services, and Tier 3 troubleshooting across complex cloud ecosystems. This position plays a key role in ensuring secure, compliant, and reliable operations across our identity and collaboration platforms.
Essential Duties and Responsibilities
- Operate confidently within a Microsoft GCC High environment and support compliance with CMMC Level 2 requirements.
- Administer and maintain hybrid identities including Entra Connect / Cloud Sync, object lifecycle management, sync health, and identity governance.
- Manage Privileged Identity Management (PIM) including role assignments, approval workflows, access reviews, and just‑in‑time access.
- Administer Multi-Factor Authentication (MFA) including support for third-party OATH tokens such as Deepnet SafeID.
- Configure and support SSO integrations for first-party and third-party applications (SAML/OIDC), including certificate and claims management.
- Design, monitor, and maintain Conditional Access policies including break-glass strategies, device/user risk controls, and policy governance.
- Provide Tier 3 support for escalated incidents related to M365, identity, authentication, collaboration tools, and user lifecycle issues.
- Administer core M365 platform services including Exchange Online, Microsoft Teams, and SharePoint Online.
- Support Microsoft Teams capabilities including meeting policies, guest access, settings configuration, and collaboration governance.
- Manage Exchange Online mail flow, transport rules, mailbox administration, and related security controls.
- Support SharePoint Online site lifecycle, permissions, sharing governance, and integration with compliance tooling.
- Manage Microsoft licensing assignments and consumption with understanding of Enterprise Agreement (EA) structures.
- Maintain operational documentation, SOPs, configuration standards, and technical runbooks.
- Collaborate with cybersecurity, compliance, and vendor partners to align identity and cloud configurations to security standards.
- Administer M365 backup solutions, using platforms such as AvePoint, ensuring reliable protection and recovery of Microsoft 365 data.
- Administer print management solutions, using PaperCut or Universal Print, supporting printing policies and device integrations.
Requirements
Minimum Requirements
- 4–7 years of experience administering Microsoft 365 and Microsoft Entra ID in an enterprise environment.
- Strong hands-on experience with hybrid identity technologies including Entra Connect / Cloud Sync and Active Directory.
- Experience with MFA, PIM, SSO (SAML/OIDC), and Conditional Access policy management.
- Proficiency administering Exchange Online, Teams, and SharePoint Online at an advanced operational level.
- Experience supporting identity and cloud operations in regulated environments (GCC High, NIST 800‑171, CMMC Level 2).
- Strong understanding of Microsoft licensing models, including EA concepts and SKU assignments.
- Advanced troubleshooting skills across authentication, identity, M365 workloads, and escalated end‑user issues.
- Experience with PowerShell for automation and operational support.
- Experience using ServiceNow or another enterprise ITSM platform for ticketing and workflow management.
Nice-to-Have Skills
- Experience with Microsoft Purview (DLP, sensitivity labels, eDiscovery, information governance).
- Experience with Microsoft Defender XDR and identity security integrations.
- Experience with Teams Room systems, resource accounts, and meeting room integrations.
- Experience managing third-party vendor relationships for cloud licensing and services.
- Experience administering M365 backup solutions such as AvePoint.
- Experience with print management using PaperCut or Microsoft Universal Print.
- Scripting experience (PowerShell, Python, or similar) for automation and tooling.
Soft Skills
- Strong communication and documentation abilities.
- Ability to collaborate effectively with Security, Cloud, Infrastructure, and End User Services teams.
- Ownership mindset with the ability to drive initiatives and improvements independently.
Special Note
The position is contingent upon candidate’s ability to meet physical and medical requirements as needed by the position; including compliance with all applicable federal, state, and local jurisdictional requirements.
Benefits and CompensationAt MAG Aerospace, we value your contributions providing our employees with a robust Total Rewards package that supports your total well-being. Full-time and part-time employees working at least 30 hours a week on a regular basis are eligible to participate in MAGs Total Rewards programs. Our offerings include health, life, disability, financial, and retirement benefits as well as paid leave, professional development, and tuition assistance. Individuals that do not meet the threshold are only eligible for select offerings not inclusive of health benefits. We encourage you to learn more about our Total Rewards Program by visiting the Resource page on our Careers site: https://www.magaero.com/benefits/. Salary at MAG Aerospace is determined by various factors including but not limited to location, the particular combination of education, knowledge, skills, competencies, and experience as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $110,000 to $140,000 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of MAGs total compensation package for employees.