Microsoft Cloud Security Engineer

The Middlesex Corporation is a nationally recognized and award-winning leader in the heavy civil construction industry. Since 1972, the family business founded by Robert W. Pereira has developed an extensive client and project list through its consistent efforts to safely build Americas infrastructure. The Middlesex Corporation specializes in building and reconstructing highways, bridges, marine, rail, and transit facilities through its collaborative team approach and focus on core values. In addition, Middlesex Asphalt in Central Florida is one of the largest and most productive asphalt plants in the United States, with Middlesex Paving earning an equally solid regional presence and reputation.

Position Summary:

As a Microsoft Cloud & Security Engineer, reporting to the IT Operations Manager, you will take ownership of endpoint management and security across Middlesexs Microsoft environment. This role is primarily responsible for Microsoft Intune and Microsoft Defender, ensuring devices are secure, compliant, and consistently managed across the organization.

The position also supports core Microsoft 365 services and plays a key role in strengthening security, improving device management, and delivering a reliable end-user experience across both office and field teams.

Responsibilities:

• Own Microsoft Intune for device provisioning, configuration, and lifecycle management
  Design and manage application deployment (Win32 apps, Microsoft 365 apps, updates)
  Enforce device compliance policies and security baselines
  Standardize endpoint configurations across laptops, tablets, and mobile devices
• Administer Microsoft Defender (Endpoint, Office 365, Identity)
  Monitor, triage, and respond to security alerts and incidents
  Implement and maintain endpoint protection and threat detection policies
• Manage Entra ID (Azure AD) users, groups, and access controls
  Design and maintain Conditional Access policies
  Support MFA and device-based access enforcement
• Support Exchange Online, Teams, and SharePoint
  Assist with configuration, troubleshooting, and service optimization
  Manage licensing and identify optimization opportunities
• Provide L2/L3 escalation support for endpoint and cloud-related issues
  Maintain documentation, standards, and procedures
  Collaborate with IT team members on system improvements and security initiatives
• Operate in a small, nimble IT team with shared ownership and accountability
  Partner with external providers, including MSPs and MSSPs, to support and enhance internal capabilities
  Take a hands-on, roll up your sleeves approach to problem solving and implementation
  Continuously improve Microsoft Secure Score and overall security posture
  Stay current with Microsoft technologies and security best practices through ongoing learning
  Contribute ideas and drive improvements to systems, processes, and security controls
• Participation in an on-call rotation may be required
  Occasional travel may be required
  Perform other duties as assigned, consistent with the scope and level of this role

Qualifications:

• 35+ years of experience in Microsoft cloud administration
  Strong hands-on experience with:
  Microsoft Intune (Endpoint Manager)
  Microsoft Defender suite
  Microsoft 365 administration
  Entra ID (Azure AD)
• Experience with application deployment, Conditional Access, and device compliance policies
  Experience managing Windows endpoints in a business environment
  Strong troubleshooting and problem-solving skills
  Effective communication and organizational skills
• This is a 5-day a week in office position in Littleton, MA (hybrid/remote N/A)

Preferred Qualifications:

• Familiarity with Microsoft Azure services
  Basic scripting or automation experience (e.g., PowerShell)
  Understanding of Zero Trust security principles
  Experience working in structured IT environments (change control, risk management, and ITIL-aligned practices)
  Experience supporting distributed or field-based workforces

We offer our full-time and eligible part-time team members a comprehensive benefits package thats among the best in our industry. Benefits include medical, dental, and vision plans covering eligible team members and dependents, employee assistance programs, life insurance, disability, top-tier 401k with matching, tuition reimbursement, industry-leading referral program, and generous paid time off.

Middlesex provides equal employment opportunities to all team members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status, or other characteristics protected by law.