Senior Systems Cloud Administrator

Build the future, spark innovation and align your career with purpose.

McKinstry is innovating the waste and climate harm out of the built environment and creating lasting impact. Together, we're building a thriving planet.

Buildings are a leading contributor to the climate crisis, generating nearly 40% of total global energy-related carbon emissions. We're making a lasting impact on our industry and within our communities by addressing the climate, affordability and equity crises through:

• renewables and energy services
• engineering and design
• construction and facility services

To get where we're going, we need big thinkers, problem solvers and collaborative mindsets. Does that sound like you?

The Opportunity with McKinstry

We are looking for an Senior Systems Cloud Administrator to be a part of our Information Technology division located in Seattle, WA. The Senior Systems Cloud Administrator is responsible for the administration, configuration, and continuous improvement of McKinstry's Microsoft 365 tenant and Azure cloud infrastructure. This is a hybrid role combining hands-on M365 tenant administration - identity, security, productivity services, and licensing - with Azure infrastructure support in a mixed on-premises and IaaS environment.

The role operates at the intersection of IT operations, security, and end-user enablement, requiring both deep technical skill and the ability to collaborate across the organization. Additionally, some responsibilities you will have include:

Microsoft 365 Administration

• Administer and optimize the McKinstry Microsoft 365 tenant, including Exchange Online, SharePoint Online, OneDrive, Teams, and Microsoft Purview.

• Manage Microsoft Entra ID: user and group lifecycle, Conditional Access policies, MFA and password-less/passkey authentication, and hybrid identity (Entra Connect sync).

• Administer Intune and endpoint compliance policies; enforce device-based Conditional Access in coordination with the security team.

• Manage M365 licensing: monitor consumption, optimize assignments, and support cost governance in coordination with IT leadership.

• Manage enterprise application registrations, SSO integrations (SAML/OIDC), and app permission governance in Entra ID.

Azure Infrastructure

• Support and maintain Azure infrastructure including compute, storage, networking, and security services in a hybrid on-premise/IaaS environment.

• Manage Azure Monitor, Log Analytics workspaces, and alerting; write and maintain KQL queries for operational visibility.

• Support hybrid connectivity and identity: VPN/ExpressRoute, Azure AD Connect, DNS, and on-premises Active Directory integration.

• Participate in Azure cost management: monitor spend, identify optimization opportunities, and support EA billing governance.

Security & Compliance

• Implement and maintain technical controls aligned with McKinstry security policies and regulatory requirements.

• Collaborate with the security engineering team on identity security, MFA enforcement, and Zero Trust initiatives.

• Conduct access reviews, audit log analysis, and license/permission hygiene.

• Support incident response activities related to M365 and Azure environments.

Automation & Continuous Improvement

• Develop and maintain PowerShell scripts and Microsoft Graph API integrations to automate administration, reporting, and lifecycle management tasks.

• Manage production incidents and participate in problem management, root cause analysis, and change management processes.

• Support cloud migration initiatives including cross-tenant SharePoint/OneDrive migrations and legacy application transitions.

• Participate in disaster recovery planning and periodic DR testing.

• Maintain accurate, up-to-date technical documentation for all systems and processes.

Communication & Collaboration

• Collaborate with IT managers, architects, security, and business stakeholders to deliver cloud services aligned with business objectives.

• Communicate service interruptions, changes, and operational health clearly to technical and non-technical audiences.

• Contribute to team standards, best practices, and knowledge sharing.

• Other duties as assigned.

What You Need to Succeed at McKinstry

Required Qualifications

• 3+ years of hands-on Microsoft 365 tenant administration experience in a production environment.

• 3+ years of experience with Microsoft Entra ID (Azure AD), including Conditional Access, MFA, and hybrid identity.

• 3+ years of experience with Azure infrastructure administration (compute, storage, networking, security).

• Proficiency in PowerShell scripting for M365 and Azure administration; familiarity with Microsoft Graph API.

• Working knowledge of Microsoft Intune / Endpoint Manager and device compliance policies.

• Strong understanding of identity and access management principles, security best practices, and Zero Trust concepts.

Preferred Qualifications - Certifications

• Microsoft 365 Certified: Administrator Expert (MS-102) or equivalent

• Microsoft Certified: Azure Administrator Associate (AZ-104) or equivalent

• Microsoft Certified: Identity and Access Administrator (SC-300)

Preferred Qualifications - Technical

• Experience with Microsoft Purview (DLP, sensitivity labels, compliance policies, eDiscovery).

• Experience with Microsoft Fabric and/or Power BI administration (workspace governance, F-SKU/P-SKU capacity).

• Cross-tenant migration experience (SharePoint, OneDrive, Exchange) including third-party tooling such as Sharegate or AvePoint.

• Azure Monitor / Log Analytics and KQL query authoring.

• Active Directory administration: Group Policy, DNS, OU structure, AD Connect sync troubleshooting.

• Experience with ITSM/change management processes (ServiceNow or equivalent).

• Familiarity with Microsoft Secure Score, Defender for M365, and security baseline configurations.

Behavioral Qualifications

• Strong analytical, problem-solving, and troubleshooting skills - able to diagnose complex issues across identity, infrastructure, and productivity platforms.

• Excellent documentation habits; produces clear runbooks, process guides, and incident records.

• Effective communicator across technical and non-technical audiences; comfortable presenting to IT leadership and business stakeholders.

• Self-directed and organized; able to manage multiple workstreams, shifting priorities, and operational deadlines simultaneously.

• Collaborative mindset; builds strong working relationships across IT, security, and business teams.

• Proactive about learning; stays current with the rapidly evolving Microsoft cloud platform.

PeopleFirst Benefits

When it comes to the basics, we have you covered:

• Competitive pay
• 401(k) with employer match and profit-sharing plan
• Paid time off and holidays
• Comprehensive medical, prescription, dental, and vision with low or zero deductible options and low out of pocket maximums

People come first at McKinstry, and we go beyond the basic benefits with:

• Family formation benefits, including adoption and IVF assistance
• Up to 16 weeks paid parental leave
• Transgender inclusive benefits
• Commuter benefits
• Pet insurance
• "Building Good" paid community service time
• Learning and advancement opportunities via McKinstry University
• McKinstry Moves onsite gyms or reimbursement for remote workers

See benefit plan documents for complete details.

If you're driven by our vision to build a thriving planet together, McKinstry is the place to build your career.

The pay range for this position is $99,270 - $140,900 per year; however, base pay offered may vary depending on job-related knowledge, skills, and experience. Base pay information is based on market location. A bonus may be provided as part of the compensation package, in addition to a full range of medical, financial, and/or other benefits, dependent on the position offered.

The McKinstry group of companies are equal opportunity employers. We are committed to providing equal employment opportunities to all employees and qualified applicants without regard to sex, gender identity, sexual orientation, age, race, color, creed, marital status, national origin, disability, veteran status, genetic information or any other basis protected by law. This policy applies to all terms and conditions of employment including, but not limited to employment, advancement, assignment, and training. This commitment to Equal Employment Opportunity is made equally as a social responsibility and as an economic and business necessity.

McKinstry is a drug-free workplace. Employment iscontingent upon successfully passing a pre-employment drug and alcohol test, complying with the requirements of the Immigration Reform and Control Act and a Confidentiality Agreement, in addition to successful outcomes of background and reference checks.

Applicants for this role will only be considered if they possess current US Work Authorization, and do not require employer-sponsored VISA support to begin or remain in this role.

#LI-MD1