Posted May 22, 2026
AIR is seeking a Senior Cloud Engineer I to lead the design, administration, and advancement of our Microsoft 365 and Entra ID ecosystem in support of our mission‑driven, research‑focused organization. In this role, you will serve as a technical expert and strategic partner, ensuring our cloud collaboration and identity platforms are secure, resilient, and optimized for a diverse, distributed workforce. You will work across engineering, security, and operational teams to strengthen AIR’s cloud posture, drive automation, and implement best‑in‑class governance and security practices. This position is ideal for an experienced engineer who excels in complex enterprise environments, enjoys solving challenging technical problems, and is passionate about building scalable, secure, and well‑architected cloud services. You will have the opportunity to influence long‑term cloud strategy, mentor junior staff, and play a key role in supporting AIR’s mission to improve lives through research, evidence, and innovation. This position has the flexibility to work remotely within the United States (U.S.) or from one of AIR’s U.S. office locations. This does not include U.S. territories. #### Responsibilities
The responsibilities for the position include:
Education, Knowledge, and Experience:
Bachelor’s degree in Computer Science, Computer Engineering, or related discipline and at least 9 years of relevant experience in the IT industry, or a master’s degree with at least 7 years of relevant experience, or at least 15 years of relevant industry experience. - At least 5 years experience of hands‑on administration experience with Microsoft 365 and Entra ID in a mid‑ to large‑enterprise environment. Skills:
Effective communicator with demonstrated ability to communicate with and understand the needs of both technical and non-technical internal and external clients. Additionally, effectively collaborate in a virtual, cross-functional team environment. - Demonstrated ability to work well independently, and collaboratively as needed. - Adept in a fast-paced environment to manage multiple concurrent deliveries. - Demonstrated analytical, critical thinking, and problem-solving skills with a focus on detail and high quality. - Demonstrated expert‑level experience with Exchange Online: mail flow troubleshooting, advanced transport configuration, security and compliance policies, and integration with third‑party services. - Strong experience using KQL in Microsoft 365 Defender, Sentinel, or Log Analytics to query logs, create custom detections, and analyze security or operational events. - Deep understanding of identity and access concepts: SSO, OAuth/OIDC, federation, conditional access, MFA, and privileged identity management. - Proficiency with PowerShell for automation, bulk operations, and configuration management in Microsoft 365 and Entra ID. - Solid knowledge of security, compliance, and governance capabilities in M365 (e.g., DLP, retention, eDiscovery, audit, safe links/attachments). - Exposure to Azure DevOps, GitHub, or similar tools to manage scripts, pipelines, and infrastructure‑as‑code definitions for Microsoft 365. - Familiarity with container platforms (e.g., Kubernetes/AKS) and how they integrate with Entra ID for identity and access control. - Experience using Microsoft Graph API for automation, integration, and advanced reporting scenarios is preferred, but not required. - Experience with Microsoft Sentinel or similar SIEM platforms for M365 and Entra monitoring and analytics is preferred, but not required. - Experience with the Varonis platform, AWS, and/or Google Workspace is preferred, but not required. - Passion for the craft with a demonstrated ability to learn and understand the technology both at a high level and at a detailed level. Disclosures: Applicants must be currently authorized to work in the U.S. on a full-time basis. Employment-based visa sponsorship (including H-1B sponsorship) is not available for this position. Depending on project work, qualified candidates may need to meet certain residency requirements. American Institutes for Research is an equal employment opportunity/affirmative action employer. AIR adheres to strict child safeguarding principles. All selected candidates will be expected to adhere to these standards and principles and will therefore undergo reference and background checks. AIR maintains a drug-free work environment. **ACCESSIBILITY NOTICE:**If you need a reasonable accommodation for any part of the employment process due to a physical or mental disability, please send an email to Taliba Boone at tboone@air.org or call 202.403.5000. **Fraudulent Job Scams Warning & Disclaimer:**AIR is aware of individuals falsely presenting themselves as AIR representatives. Fraudulent job scams seek to extract sensitive information or money from victims. To protect yourself, please be aware that AIR recruitment will only email you from an “@air.org” domain. Please take extra caution while examining the email address, for example jdoe@air.org is correct and jdoe@aircareers.org is not a legitimate AIR email address. If you are unsure of the legitimacy of a communication you have received, please reach out to- recruitment@air.org. If you see a job scam, or lose money to one, report it to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov. You can also report it to your state attorney general. Find out more about how to avoid scams atftc.gov/scams. #LI-AS1 #LI-REMOTE
AIR’s Total Rewards Program, is designed to reward our staff competitively and motivate them to achieve our critical mission. This position offers the anticipated annual salary as listed. Salary offers are made based on internal equity within the institution and external equity with competitive markets. Please note this is the annual salary range for candidates that are based in the United States. Anticipated Annual Salary Range
$140,000—$164,000 USD
Don't want to apply yourself?
Our team writes your resume, applies for you, preps you for interviews, and negotiates your offer.
Browse Jobs
By Role
By City