Kinsale is seeking an accomplished and forward-thinking Senior Microsoft Cloud Engineer to implement our enterprise's Microsoft cloud strategy and enable digital innovation through Azure, Entra, Intune, and Microsoft 365 platforms.
This role will serve as a senior technical authority for Microsoft cloud services-designing secure, scalable, and automated solutions that empower modern work and align with Kinsale's strategic objectives. You'll partner closely with architecture, application development, information security, and operations teams to modernize and standardize identity, enhance endpoint management, and optimize our use of the Microsoft ecosystem.
All team members collaborate in our Richmond, VA office.
Responsibilities
Cloud Strategy & Engineering
- Architect, implement, and manage Azure environments supporting enterprise workloads and software development needs
- Develop governance frameworks, policies, and automation to ensure secure, compliant, and cost-effective cloud operations
- Define Azure landing zones, networking standards, and identity integration patterns
- Build Infrastructure-as-Code (IaC) deployments using Terraform, ARM templates, and PowerShell
- Regularly evaluate Microsoft cloud offerings and recommend innovations that enhance performance and scalability
- Share expertise with team members, providing training and guidance to strengthen the broader Microsoft Technology Team's cloud proficiency
Identity and Access Management (Entra)
Participate in the development of plans, designs, and readiness assessments for potential future migrations from hybrid Active Directory to cloud-only Entra IDDesign and manage Conditional Access, Privileged Identity Management (PIM), and Role-Based Access Control (RBAC) frameworksDrive passwordless authentication adoption using Windows Hello for Business, FIDO2, and other modern identity solutionsManage Azure app registrations, service principals, and single sign-on (SSO) integrations across enterprise applicationsEndpoint and Device Management
Provide strategic and architectural direction for Intune and Windows 365 environments to ensure alignment with enterprise security, compliance, and scalability goalsCollaborate with operational owners to refine compliance baselines, configuration policies, and device enrollment processesPartner with Information Security operations to implement zero trust controls and strengthen device security postureMicrosoft 365 and Collaboration Modernization
Administer, in conjunction with other team members, Microsoft 365 services, including Exchange Online, Teams, and SharePoint OnlineLead department-level migrations from legacy file shares to Teams / SharePoint for modern collaboration and document managementSupport the implementation of governance, retention, and lifecycle policies within M365Automation, Integration & Continuous Improvement
Design and maintain automation workflows leveraging PowerShell, Graph API, and Azure AutomationImprove monitoring, alerting, and self-healing solutions for cloud resourcesPartner with architects and DevOps teams to ensure cloud environments are secure, efficient, and aligned with business prioritiesChampion continuous learning and adoption of emerging Microsoft technologiesQualifications
Education & Experience
Bachelor's degree in Information Technology, Computer Science, or related field (or equivalent experience)7+ years of experience with cloud-based Microsoft infrastructure technologiesMinimum 3 years of hands-on experience designing, deploying, and managing Azure and Microsoft 365 environments at scalePreferred Certifications
Microsoft Certified : Azure Administrator Associate (AZ-104)Microsoft Certified : Identity and Access Administrator Associate (SC-300)Microsoft Certified : Azure Solutions Architect Expert or Cybersecurity Architect ExpertTechnical Expertise
Deep knowledge of Azure architecture, networking, governance, and cost managementProven experience managing Entra ID, Conditional Access, and PIM / RBAC frameworksFamiliarity with hybrid AD and migration strategies to Entra-only modelsStrong automation and scripting skills using PowerShell and Graph APIExperience implementing zero trust and passwordless authentication strategiesProficiency with Intune, Windows 365, and device compliance policiesSolid understanding of M365 administration, including Exchange Online, Teams, and SharePoint OnlineKnowledge of Defender for Cloud, Sentinel, or equivalent cloud security solutionsSoft Skills
Strong desire to assist and share knowledge, both within the immediate team and across the IT department-fostering a culture of growth, mentorship, and cross-functional collaborationExcellent analytical, problem-solving, and troubleshooting abilitiesStrong communication and collaboration skills across technical and business teamsAbility to translate strategic goals into actionable cloud initiativesSelf-driven, curious, and passionate about innovation and continuous improvementAt Kinsale we offer the following great benefits :
Competitive salary with performance-based bonus opportunitiesSingle and Family Health, Dental and Vision Insurance plans with HSA funds contributedShort-Term and Long-Term disabilityLife InsuranceMatching 401(k) - 6%Generous Paid Time Off and Holidays$3K yearly in Education dollars for training and certificationsKinsale values strong financial responsibility. A credit check will be conducted as a part of the selection process for roles that require sound judgement, trustworthiness, or access to sensitive information.
Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.