Senior Cloud Engineer (Azure/Identity)

Job summary

This senior technical contributor designs, engineers, implements, and sustains secure Microsoft Azure solutions for classified Department of Defense cloud modernization initiatives. The role translates mission requirements into hybrid-cloud architectures and delivers identity and Zero Trust controls, Azure Landing Zones, governance, Infrastructure as Code, and secure networking, while supporting ATO and RMF compliance, troubleshooting complex issues, and documenting solutions.

Qualifications

• Active Top Secret/SCI clearance.
• DoD 8570/8140 IAT Level II certification.
• Microsoft Certified: Azure Solutions Architect Expert certification.
• At least five years designing and implementing Microsoft Azure enterprise cloud solutions.
• Experience architecting hybrid Azure environments integrating on-premises infrastructure.
• Advanced experience with Microsoft Entra ID, Entra Connect, Active Directory, AWS IAM, identity synchronization, federation, and E-ICAM.
• Experience implementing Entra ID Governance capabilities and Azure Landing Zones.
• Knowledge of Azure networking, storage, compute, governance, and security services.
• Experience with Terraform, Azure Bicep, ARM Templates, or similar Infrastructure as Code technologies.
• Experience with Azure CLI, PowerShell, and Python or comparable scripting languages.
• Knowledge of Zero Trust architecture, identity-centric security, and cloud security best practices.
• Excellent written and verbal communication skills.
• AWS Certified Solutions Architect – Professional certification is desired.
• Desired experience with Azure and AWS hybrid environments, DoD cloud initiatives, Azure Arc, Azure Stack HCI, Azure Local, AKS, Microsoft security and management services, and DevSecOps pipelines.

Responsibilities

• Design, engineer, implement, and sustain secure Azure cloud solutions for DoD missions.
• Build greenfield Azure environments and hybrid architectures integrating on-premises infrastructure.
• Design and maintain hybrid identity solutions using Microsoft Entra ID, Entra Connect, and Active Directory.
• Implement secure authentication, authorization, identity governance, and privileged access controls aligned with Zero Trust.
• Design Azure Landing Zones, governance frameworks, subscription architectures, and management group strategies.
• Develop Infrastructure as Code using Bicep, ARM Templates, Terraform, or comparable technologies.
• Design secure Azure networking with Virtual Networks, ExpressRoute, VPN Gateway, Azure Firewall, Virtual WAN, and private connectivity.
• Implement Azure monitoring, backup, disaster recovery, governance, and security capabilities.
• Administer Entra ID Governance features, including Access Reviews, Entitlement Management, Lifecycle Workflows, Conditional Access, and Privileged Identity Management.
• Collaborate with cybersecurity, systems engineering, networking, and application development teams.
• Support ATO activities and compliance with DoD cybersecurity policies, RMF, and applicable STIGs.
• Produce architecture documentation, engineering diagrams, implementation guides, procedures, and technical documentation.
• Troubleshoot cloud infrastructure, networking, identity, and security issues.
• Evaluate Microsoft cloud technologies and recommend solutions for mission objectives.

Skills

Certifications

Degrees

Industry

Security clearance

Relocation