Senior Cloud Engineer - Azure/Identity

Job summary

Designs, engineers, implements, and sustains secure Microsoft Azure solutions for DoD cloud modernization in classified enterprise environments. The role focuses on hybrid cloud architectures, enterprise identity and Zero Trust security, Azure Landing Zones, Infrastructure as Code, and secure networking, while supporting Authority to Operate activities and compliance with DoD cybersecurity requirements.

Benefits

Qualifications

• Active Top Secret clearance with eligibility for SCI access.
• DoD 8570/8140 IAT Level II certification.
• Microsoft Certified: Azure Solutions Architect Expert certification.
• At least five years designing and implementing Azure enterprise cloud solutions.
• Experience architecting hybrid Azure environments that integrate on-premises infrastructure.
• Advanced experience with Microsoft Entra ID, Entra Connect, Active Directory, AWS IAM, identity synchronization, federation, and E-ICAM.
• Experience implementing Entra ID Governance capabilities and Azure Landing Zones.
• Strong understanding of Zero Trust, identity-centric security, and cloud security best practices.
• Bachelor's degree in a relevant technical discipline and 12–15 years of relevant experience, or a master's degree and 10–13 years; equivalent experience, education, and training may be considered.

Responsibilities

• Architect, design, engineer, and implement secure Azure solutions for DoD missions.
• Build greenfield Azure environments and hybrid architectures integrating on-premises infrastructure.
• Implement and maintain hybrid identity solutions using Microsoft Entra ID, Entra Connect, and Active Directory.
• Engineer authentication, authorization, identity governance, and privileged access management solutions.
• Design Azure Landing Zones, governance frameworks, subscription architectures, and management group strategies.
• Develop Infrastructure as Code using Bicep, ARM Templates, Terraform, or comparable tools.
• Design secure Azure networking with Virtual Networks, ExpressRoute, VPN Gateway, Azure Firewall, and Virtual WAN.
• Implement Azure monitoring, backup, disaster recovery, governance, and security capabilities.
• Support Authority to Operate activities and compliance with DoD cybersecurity policies, RMF, and STIGs.
• Produce architecture and engineering documentation, implementation guides, and procedures.
• Troubleshoot cloud infrastructure, networking, identity, and security issues.
• Collaborate with cybersecurity, systems engineering, networking, and application development teams.

Skills

Certifications

Degrees

Languages

Industry

Security clearance

Relocation