Note: The job is a remote job and is open to candidates in USA. Capgemini is a global business and technology transformation partner, and they are seeking a highly motivated Microsoft 365 Operations Engineer. The role involves providing strategic input to identity and security architecture in Microsoft 365 and managing Azure Virtual Desktop environments.
Responsibilities
- Provide strategic input to identity and security architecture in Microsoft 365, Azure AD, and related services
- Collaborate with security, operations, and compliance teams to implement secure-by-design configurations
- Develop technical documentation, runbooks, and executive-level reporting for compliance audits and operational transparency
- Troubleshoot Tier 3 issues related Intune policy conflicts, AVD connectivity, and security misconfigurations
- Serve as the SME for endpoint security, AVD and Zero Trust implementations within Microsoft ecosystems
- Plan, deploy, and manage scalable AVD environments in Azure Government Cloud, ensuring optimal user experience and policy enforcement
- Implement FSLogix profile management, MSIX app attach, and integration with Defender and Sentinel
- Monitor AVD performance and usage analytics for capacity planning and optimization
- Work within Microsoft 365 GCC High environments, ensuring full compliance with DoD, FedRAMP High, and NIST 800-53 frameworks
- Secure M365 workloads with a strong focus on tenant hardening, conditional access, DLP, and insider risk policies
Skills
- US Citizenship or Green Card Holder
- BS/BA degree and 8 years of IT experience, or 10 years total without a degree
- Demonstrated experience in M365 GCC High, Azure Government Cloud, and DoD-compliant environments
- Experience in hybrid cloud/on prem environments
- Experience managing MS, Unix, Linux environments
- Expert knowledge Intune, and Azure AD Conditional Access
- Working knowledge of AVD architecture, deployment, and management in regulated environments
- Proficiency in PowerShell scripting for automation, policy enforcement, and monitoring
- Experience designing solutions aligned with Zero Trust Architecture, NIST, and FedRAMP High standards
- Strong communication skills for technical and executive-level briefings and documentation
- Microsoft certifications such as SC-200, MS-500, AZ-104, MD-102, or AZ-140
- Experience integrating third-party SIEM, EDR, or MDM platforms with Microsoft solutions
- Hands-on experience with Log Analytics, KQL, Playbook automation (Logic Apps), and Graph API
- Familiarity with Microsoft Purview, DLP, and Insider Risk Management
- One or more of the following DoD 8570 Level II Certifications: Security+ CE, GSEC, SSCP, CCNA Security, or equivalent
Benefits
- Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
- Other benefits as provided by local policy and eligibility
Company Overview