Cloud Solutions Associate

CSUSA is one of the nation's largest and fastest-growing K-12 education management organizations, committed to operational excellence and innovation across our network of schools and support teams. We invest in technology that empowers our people and improves outcomes for students and educators alike. Our Cloud team plays a central role in that mission building and maintaining the infrastructure, applications, and cloud systems that keep our organization running.

To join a team of people with the mission: Relentless Commitment to Student Greatness in School and in Life™. If you love supporting the teams that make education work and want to put students first, CSUSA is the right place for you. We deliver on our promise of Strong Minds, Good Hearts™ through an education model that gives every student the opportunity for success.

The Cloud Solutions Associate takes ownership of cloud operations, infrastructure delivery, and security posture across CSUSA's cloud environment. In this role, you will independently manage cloud services including Microsoft 365, Azure, and other cloud platforms; drive resolution of complex technical issues; lead infrastructure projects; and maintain a strong, compliant security posture across our cloud ecosystem. A successful candidate brings demonstrated experience in cloud administration and security, strong problem-solving capabilities, and the ability to operate with minimal supervision in a dynamic, multi-school environment.

• Administer and maintain Microsoft 365 services across the organization, including Exchange Online, Teams, SharePoint, OneDrive, and Intune.
• Own and execute user onboarding and offboarding workflows within M365, including license assignment, mailbox provisioning, and group membership management.
• Monitor M365 service health proactively; investigate, remediate, and document anomalies and recurring issues.
• Own the triage, tracking, and resolution of M365-related support tickets; communicate status and outcomes clearly to stakeholders.
• Leverage PowerShell and Microsoft Graph API to automate M365 administrative tasks and reporting.

• Administer Identity and Access Management (IAM) operations in Okta and Microsoft Entra ID, including user provisioning, SSO configuration, Conditional Access policies, and MFA enforcement.
• Manage user lifecycle workflows across multiple tenants, ensuring accurate access provisioning, role assignments, and timely deprovisioning.
• Maintain and audit IAM policies, group memberships, and application integrations to enforce least-privilege access across the organization.
• Troubleshoot and resolve IAM-related issues including SSO failures, MFA challenges, and access conflicts in a timely manner.

• Manage email security operations using Proofpoint, including maintaining and tuning filtering policies, reviewing quarantined messages, and leading threat response when needed.
• Monitor and maintain the security posture of CSUSA's cloud environment, applying security best practices across M365, Azure, and connected platforms.
• Implement and enforce security controls including Conditional Access policies, data loss prevention (DLP) rules, and compliance configurations within Microsoft Purview and Entra ID.
• Participate in security incident triage and response, contributing to containment, investigation, and documentation efforts.
• Ensure adherence to company security policies, compliance requirements, and regulatory guidelines across all cloud platforms.

• Provision, configure, and manage virtual machines (VMs), containers, and related compute resources across Azure and other cloud platforms.
• Manage Azure storage solutions including Blob storage, file shares, and backup configurations, ensuring data availability and retention compliance.
• Monitor and manage cloud cost efficiency, including resource rightsizing, reserved instance planning, and identification of unused or underutilized resources.
• Design and implement infrastructure configurations for SaaS applications using automation and infrastructure as code (IaC) practices (Terraform, Bicep, ARM, or equivalent).
• Deploy and maintain containerized workloads using Docker and/or Azure Kubernetes Service (AKS), supporting application availability and scalability.
• Monitor, identify, and resolve performance and availability issues across deployment layers; maintain operational SLAs.
• Develop and maintain automation scripts and tooling (Python, PowerShell, Shell, etc.) to improve infrastructure operations and reduce manual effort.
• Partner with engineers and technology teams across CSUSA to deliver infrastructure solutions and drive adoption of best practices.
• Participate in on-call rotation as needed.

• Collaborative, solutions-oriented mindset with demonstrated expertise in cloud technology and a track record of delivering results independently.
• Strong communication skills; comfortable working with end users and technical teammates alike.
• Organized and dependable; able to manage tickets and tasks and follow through consistently.
• Analytical mindset with a practical approach to identifying and resolving issues.
• Customer-oriented approach with a commitment to delivering quality work.
• Ability to work effectively in a fast-paced environment where priorities can shift.
• Proactive, detail-oriented, and receptive to feedback.
• Working knowledge of web and network protocols and standards (HTTP, TLS, DNS, etc.).
• Hands-on experience with Azure (required); familiarity with AWS or GCP is a plus. Experience with Azure compute, networking, storage, and monitoring services.
• Experience with email security and filtering platforms such as Proofpoint; hands-on administration of similar enterprise email security tools will be considered.
• Experience administering Identity and Access Management (IAM) platforms such as Okta or Microsoft Entra ID, with demonstrated proficiency in SSO configuration, MFA policy management, and user lifecycle workflows.
• Proficiency in at least one scripting or programming language (PowerShell, Python, or equivalent) for automation and administration tasks.

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• 3--5 years of experience in a cloud engineering, cloud administration, or related technical role.
• Proficiency in Microsoft 365 administration (Exchange Online, Teams, SharePoint, OneDrive) and other cloud platforms.
• Experience writing automation tools and an eagerness to automate all the things.
• Comfortable working with ticketing systems and documenting support issues clearly.
• Willingness to travel within and outside of Florida when needed.
• Ability to work flexible hours, including occasional evenings or weekends.
• Commitment to CSUSA's values and mission.

• Master's degree in a related field is a plus.
• Experience with GitHub or similar version control platforms is preferred.

• Technical problem-solving and analytical thinking
• Strong communication and cross-functional collaboration
• Customer service orientation and professionalism
• Initiative and ownership mindset
• Adaptability and continuous improvement mindset
• Attention to detail and commitment to quality

While performing the responsibilities of this position, the work environment characteristics listed below are representative of the environment the employee will encounter: Usual office working conditions.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. No physical exertion required. Travel within or outside of state. Light work: Exerting up to 20 pounds of force occasionally, and/or up to 10 pounds of force as frequently as needed to move objects.

Job is exempt from the overtime provisions of the Fair Labor Standards Act.