Senior Cloud Engineer I

AIR is seeking a Senior Cloud Engineer I to lead the design, administration, and advancement of our Microsoft 365 and Entra ID ecosystem in support of our mission‑driven, research‑focused organization. In this role, you will serve as a technical expert and strategic partner, ensuring our cloud collaboration and identity platforms are secure, resilient, and optimized for a diverse, distributed workforce. You will work across engineering, security, and operational teams to strengthen AIR’s cloud posture, drive automation, and implement best‑in‑class governance and security practices. This position is ideal for an experienced engineer who excels in complex enterprise environments, enjoys solving challenging technical problems, and is passionate about building scalable, secure, and well‑architected cloud services. You will have the opportunity to influence long‑term cloud strategy, mentor junior staff, and play a key role in supporting AIR’s mission to improve lives through research, evidence, and innovation. This position has the flexibility to work remotely within the United States (U.S.) or from one of AIR’s U.S. office locations . This does not include U.S. territories. About AIR: Founded in 1946 and headquartered in Arlington, Virginia, the American Institutes for Research (AIR) is a nonpartisan, not-for-profit organization that conducts behavioral and social science research and delivers technical assistance to address some of the most pressing challenges in the United States and globally. We generate evidence and apply data-driven solutions that expand opportunities and improve lives for all. Responsibilities The responsibilities for the position include: Design, configure, and administer Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, Copilot, and related security/compliance features. Administer and harden Entra ID (Azure AD), including conditional access, identity protection, app registrations, and role‑based access control. Own Exchange Online configuration: mail flow, transport rules, connectors, policies, hybrid connectivity (if applicable), and advanced troubleshooting of mail delivery issues. Use Kusto Query Language (KQL) in tools such as Microsoft 365 Defender, Purview, and Log Analytics to investigate incidents, identify patterns, and develop detection queries and reports. Collaborate with security and networking teams to implement and maintain security baselines, DLP, retention, eDiscovery, and auditing across the M365 environment. Develop and maintain automation, scripts, and integrations using PowerShell and Microsoft Graph API to streamline administration, reporting, and provisioning. Contribute to CI/CD and infrastructure‑as‑code practices (e.g., Azure DevOps, GitHub) for Microsoft 365 configuration and related workloads. Work with containerized and cloud workloads (e.g., Kubernetes) where they integrate with M365/Entra for identity, security, or application access. Lead complex incident response and root‑cause analysis for M365 and identity‑related outages or security events. Produce and maintain technical documentation, standards, runbooks, and architectural diagrams for Microsoft 365 and Entra services. Mentor junior administrators and provide guidance on best practices, governance, and operational excellence. Qualifications: Education, Knowledge, and Experience: Bachelor’s degree in Computer Science, Computer Engineering, or related discipline and at least 9 years of relevant experience in the IT industry, or a master’s degree with at least 7 years of relevant experience, or at least 15 years of relevant industry experience. At least 5 years experience of hands‑on administration experience with Microsoft 365 and Entra ID in a mid‑ to large‑enterprise environment. Skills: Effective communicator with demonstrated ability to communicate with and understand the needs of both technical and non-technical internal and external clients. Additionally, effectively collaborate i