Hybrid Multi-Cloud Engineer SME (Azure/Identity)

Job summary

Designs, engineers, implements, and sustains secure Microsoft Azure solutions for DoD cloud modernization in classified enterprise environments. The role covers hybrid cloud and identity architecture, Azure Landing Zones, identity governance and privileged access, infrastructure as code, secure networking, and compliance with DoD cybersecurity requirements. It also supports Authority to Operate activities and produces technical documentation, using technologies such as Microsoft Entra ID, Terraform, Bicep, PowerShell, and Azure CLI.

Qualifications

• Active Top Secret clearance with eligibility for SCI access.
• Current DoD 8570/8140 IAT Level II certification.
• Microsoft Certified: Azure Solutions Architect Expert certification.
• At least five years designing and implementing Microsoft Azure enterprise cloud solutions.
• Experience architecting hybrid Azure environments that integrate on-premises infrastructure with Azure services.
• Advanced experience with Microsoft Entra ID, Entra Connect, Active Directory, AWS IAM, identity synchronization, federation, and enterprise identity management.
• Experience implementing Entra ID Governance capabilities, including Conditional Access, Access Reviews, Entitlement Management, Lifecycle Workflows, policy information points and policy engines, and identity lifecycle automation.
• Experience implementing Azure Landing Zones and enterprise governance models.
• Strong knowledge of Azure networking, storage, compute, governance, and security services.
• Experience with Infrastructure as Code using Terraform, Azure Bicep, ARM Templates, or similar technologies.
• Experience with Azure CLI, PowerShell, and Python or comparable scripting languages.
• Strong understanding of Zero Trust architecture, identity-centric security, and cloud security practices.
• Excellent written and verbal communication skills.
• A relevant bachelor's degree and 12–15 years of prior experience, or a master's degree and 10–13 years; a technical doctorate or equivalent experience, education, or training may also qualify.

Responsibilities

• Architect, engineer, implement, and sustain secure Azure cloud solutions for DoD mission requirements.
• Design greenfield Azure environments and hybrid architectures integrating on-premises infrastructure.
• Build and maintain hybrid identity solutions using Microsoft Entra ID, Entra Connect, and Active Directory.
• Implement secure authentication, authorization, identity governance, privileged access, and Zero Trust controls, including just-in-time access and ABAC/RBAC.
• Design Azure Landing Zones, governance frameworks, subscription architectures, and management group strategies.
• Develop Infrastructure as Code using Bicep, ARM Templates, Terraform, or comparable technologies.
• Design secure Azure networking using Virtual Networks, ExpressRoute, VPN Gateway, Azure Firewall, Virtual WAN, and private connectivity.
• Implement Azure monitoring, backup, disaster recovery, governance, and security capabilities.
• Configure Entra ID Governance features, including Access Reviews, Entitlement Management, Lifecycle Workflows, Conditional Access, and Privileged Identity Management.
• Coordinate with cybersecurity, systems engineering, networking, and application development teams.
• Support Authority to Operate activities and compliance with DoD policies, RMF, and applicable STIGs.
• Produce architecture diagrams, implementation guides, standard operating procedures, and technical documentation.
• Troubleshoot cloud infrastructure, networking, identity, and security issues.
• Evaluate Microsoft cloud technologies and recommend solutions for mission objectives.

Skills

Certifications

Degrees

Languages

Industry

Security clearance

Relocation