Description

• Candidates need to have strong scripting and automation experience. A key focus of the role is scripting and automation to help expand and support the client’s infrastructure environment. The candidate needs to be able to come in on day one with hands-on experience using automation/scripting languages such as PowerShell, Python, and C++/C#.
• Candidates must have deep, hands-on Microsoft Entra expertise that goes well beyond standard out-of-the-box administration. The CMS Entra environment is highly customized, with numerous divisions, subgroups, user populations, and client-specific requirements.
• Candidates whose experience is primarily limited to standard Entra administration, basic configuration, or out-of-the-box functionality will not be a fit. We should focus on candidates who have directly designed and implemented customized Microsoft Entra solutions in complex enterprise environments.
• The client needs someone who understands the platform at a technical level and can design, configure, and build customized identity solutions and automation from scratch.
  • Ex: mapping user fields across various CMS groups may need to be manually configured, with different fields and processes for each group. Some processes cannot be easily automated using standard functionality, so the client needs someone who can bulk-create users, customize workflows, and fully understand how Microsoft Entra works in a complex enterprise environment.
• Overall, they are looking for someone who can quickly pick up the current environment, understand the existing automation work, and help move it forward without needing significant ramp-up.

Basic Qualifications:

MINIMUM requirements to be considered for the position is a BS degree and 8+ years of prior relevant experience or Master with 6+ years of prior relevant experience. Additional years of experience may be substituted in lieu of degree. Must be able to obtain and maintain a Public Trust or higher security Clearance.

Experience with implementation and administration Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Microsoft 365 Apps, Intune, Entra ID, and hybrid Microsoft 365 environments.

Experience with Microsoft 365 Security Services, Microsoft Defender capabilities, Conditional Access, identity protection, endpoint security, and secure service configuration.

Demonstrated Knowledge of Microsoft 365 support technology including but not limited to, Active Directory, DirSync, Entra Connect, Active Directory Federation Services (ADFS), Entra, Conditional Access Policies, MFA, PIM, application registrations, and hybrid identity services.

General Knowledge of Microsoft 365 service administration, Exchange Online mail flow, SharePoint Online, OneDrive, Intune, Entra, endpoint management, routing, and related security appliances or services.

Strong experience in PowerShell, Microsoft Graph, and scripting/programming languages such as C#, C++, Python, or related technologies to support administration, automation, reporting, system health checks, and operational validation of Active Directory and Microsoft 365 technologies including Exchange Online, SharePoint Online, OneDrive, Entra, Intune, and related services.

Strong understanding of standard client/server, networking, TCP/IP, and Internet fundamentals.

Strong knowledge of Microsoft Authentication Protocols, Modern Authentication, identity lifecycle, token-based authentication, and Conditional Access behavior

Proven experience with standard monitoring tools, scripting methodologies, practices, automation-based system or environment health checks, and maintaining existing operational automation.

Experience with Azure application registrations migrating apps from Basic Auth to Modern Auth and supporting application permissions, Graph permissions, certificates, secrets, and service principal lifecycle management

Strong Active Directory Group/User object manipulation, Entra user and group administration, dynamic groups, role assignments, and hybrid identity troubleshooting.

Working knowledge of Microsoft PKI, certificate-based authentication, device certificates, and certificate dependencies for Microsoft 365 and endpoint management services

Strong understanding of infrastructure services: DNS, WINS, DHCP and how they support hybrid Microsoft 365, identity, endpoint, and application services

Strong technical writing and presentation skills with ability to effectively communicate with all levels of customer organization (technical resources, management)

Ability to communicate effectively with all leadership levels and multiple IT teams consuming Microsoft 365, identity, endpoint, and automation services

Ability to resolve complex problems using significant application of technical knowledge conceptualizing, reasoning and interpretation

Ability to obtain a Public Trust clearance

Demonstrated knowledge of the Microsoft 365 product suite, including but not limited to SharePoint Online, OneDrive, Teams, Microsoft 365 Groups, Lists, OneNote, Forms, Power Automate, Power BI, and related productivity, collaboration, and automation services.

Experience using Microsoft 365 products and services to support daily operations, engineering activities, projects, initiatives, customer requirements, and end-user support needs.

Preferred Qualifications:

Previous experience working in an Agile Scrum environment.

Previous experience employing DevOps methodologies.

Experience with change control principles and tickets with Service Now (SNOW).

Understanding of agency Capstone and NARA data retention compliance principles.

Experience with design, planning and implementation in environment with 10,000+ users.

Experience with Azure services that support Microsoft 365 automation, integration, and operations, including Logic Apps, Azure Automation, Azure Functions, Key Vault, storage accounts, managed identities, service principals, and application registrations.

Experience building or maintaining Power Automate flows, Power BI reports or dashboards, SharePoint Online lists/libraries, Forms-based intake processes, and other Microsoft 365-based operational tools

Key Skills

Education

Any Gradute