Cloud Infrastructure Engineer 2

Public Consulting Group LLC (PCG) is a leading public sector solutions implementation and operations improvement firm that partners with health, education, and human services agencies to improve lives. Founded in 1986, PCG employs approximately 2,000 professionals throughout the U.S.—all committed to delivering solutions that change lives for the better. The firm is a member of a family of companies with experience in all 50 states, and clients in three Canadian provinces and Europe. PCG offers clients a multidisciplinary approach to meet challenges, pursue opportunities, and serve constituents across the public sector. To learn more, visit www.publicconsultinggroup.com.

Job Description: Cloud Operation Engineer

Role Summary

Own operational stability, security, and performance of Microsoft Exchange Online and SMTP services within Microsoft 365. Administer mail flow, hygiene, identity integrations, and tenant configurations. Support DNS, SSL, Backup and Recovery and SFTP services. Execute incident response, change management, and service reliability engineering for core Microsoft operations as needed.

Core Responsibilities

• Exchange Online Administration & Mail Flow

• Manage mailboxes, shared resources, distribution lists, room/equipment, and address policies.

• Configure retention, litigation hold, eDiscovery, MRM, and mailbox audit.

• Administer transport rules, journaling, connectors, and accepted domains.

• Monitor queues, throttling, and service health; remediate mail flow disruptions.

• Design, configure, and maintain SMTP relay paths (M365, hybrid, and on-prem relays).

• Manage Exchange Online connectors, DKIM, DMARC, SPF, ARC, and reverse DNS alignment.

• Troubleshoot NDRs, TLS issues, routing loops, spoofing, and deliverability.

• Coordinate IP reputation, blocklists, and feedback loops; maintain allow/deny lists.

Other Responsibilities

General Server Operations

• Administer and maintain DNS records, ensuring accurate domain resolution and troubleshooting issues as they arise.

• Manage SSL certificate lifecycle, including procurement, installation, renewal, and validation to support secure communications.

• Oversee SFTP server setup, access provisioning, and regular audits for secure file transfers.

• Coordinate and monitor regular backup processes, verify data integrity, and support timely restoration as needed.

• Respond to and resolve general service tickets, providing timely remediation for operational issues and user requests.

• Monitor and report on service health and performance using Azure Monitor and AWS CloudWatch, ensuring visibility into operational metrics and timely identification of issues.

• Manage configuration across endpoints and servers using Microsoft Endpoint Configuration Manager (MECM) and Intune, maintaining compliance and standardization throughout the environment.

• Execute change, incident, and problem management to ITIL standards.

• Build and maintain SOPs, runbooks, and knowledge base artifacts.

• Automate routine tasks via PowerShell; implement guardrails and peer-reviewed scripts.

• Participate in on-call rotation and major incident bridges.

Required Qualifications

• 3–5 years administering Exchange (Online and/or Hybrid) in enterprise environments and other operational tasks.

• 3-5 AWS/Azure Experience (can be combined with above experience.

• Strong expertise with SMTP, DNS, TLS, mail authentication (SPF/DKIM/DMARC/ARC).

• Proficiency with PowerShell (Exchange Online, Entra ID, Security & Compliance modules).

• Solid understanding of Entra ID, Conditional Access, RBAC, and identity lifecycle.

• Proven incident response, root cause analysis, and service restoration track record.

• Experience with ITIL-aligned operations, change control, and documentation.

Preferred Qualifications

• Experience with Valimail

• Familiarity with DLP frameworks, sensitivity labeling, and regulatory controls (HIPAA, SOX, GDPR as applicable).

• Scripting beyond PowerShell (e.g., Graph API, Python, Json automation pipelines).

• Knowledge of mail deliverability, IP reputation, and anti-abuse ecosystems.

• Familiarity with Azure Monitor, AWS CloudWatch, and Grafana for observability.

Tools & Technologies

• AWS and Azure Cloud Operations

• Exchange Admin Center, Security & Compliance Portals.

• Microsoft Defender for Office 365, Purview (DLP, eDiscovery).

• Entra ID / Conditional Access / PIM.

• PowerShell, Graph API, Azure Automation, Git (for script versioning).

• Monitoring/Observability: Azure Monitor, AWS CloudWatch, Grafana (optional), M365 Service Health, Message Trace, SIEM (e.g., Sentinel), ticketing (ServiceNow/Jira).

• Valimail

Education

• Bachelor’s in Computer Science, Information Systems, or equivalent experience. Comparable experience substitutes for degree.

Certifications (Preferred but not required)

• AWS Certified Cloud Practitioner (CLF-C02)

• Microsoft 365 Certified: Messaging Administrator Associate (MS-203).

• Microsoft Certified: Azure Administrator Associate (AZ-104)

• Microsoft Certified: Azure Fundamentals (AZ-900)

• AWS Certified SysOps Administrator – Associate

        Bachelor’s in Computer Science
        Microsoft 365 Certified: Messaging Administrator Associate
        Microsoft 365 Certified: Enterprise Administrator Expert
        Microsoft Certified: Cybersecurity Architect
        Security Operations Analyst
        CompTIA Security+
     
   

Working Conditions

• Remote. May need to work outside regular work hours (8-5 CST) or weekends in emergency situations.

The above is intended to describe the general contents and requirements of work being performed by people assigned to this classification. It is not intended to be construed as an exhaustive statement of all duties, responsibilities or skills of personnel so classified.

Compensation:

Compensation for roles at Public Consulting Group varies depending on a wide array of factors including, but not limited to, the specific office location, role, skill set, and level of experience.  As required by applicable law, PCG provides a reasonable range of compensation for this role. In addition, PCG provides a range of benefits for this role, including medical and dental care benefits, 401k, PTO, parental leave, bereavement leave.

As required by applicable law, PCG provides the following reasonable range of compensation for this role: Range: $118,800-$131,500

PCG does not sponsor newly hired foreign national workers for work authorization, including H-1B sponsorship.

EEO Statement:

Public Consulting Group is an Equal Opportunity Employer dedicated to celebrating diversity and intentionally creating a culture of inclusion. We believe that we work best when our employees feel empowered and accepted, and that starts by honoring each of our unique life experiences. At PCG, all aspects of employment regarding recruitment, hiring, training, promotion, compensation, benefits, transfers, layoffs, return from layoff, company-sponsored training, education, and social and recreational programs are based on merit, business needs, job requirements, and individual qualifications. We do not discriminate on the basis of race, color, religion or belief, national, social, or ethnic origin, sex, gender identity and/or expression, age, physical, mental, or sensory disability, sexual orientation, marital, civil union, or domestic partnership status, past or present military service, citizenship status, family medical history or genetic information, family or parental status, or any other status protected under federal, state, or local law. PCG will not tolerate discrimination or harassment based on any of these characteristics. PCG believes in health, equality, and prosperity for everyone so we can succeed in changing the ways the public sector, including health, education, technology and human services industries, work.