Senior Cloud Engineer – Microsoft Azure

Job summary

Design, build, and operate a federal customer's Microsoft Azure cloud foundation, including landing zones, management groups, subscription hierarchies, hub-and-spoke networking, and Entra ID federation. Automate environments with Terraform or Bicep and GitOps, enforce controls aligned with NIST SP 800-53 Rev. 5, and manage monitoring, patching, cost optimization, incident response, high availability, and disaster recovery.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 9 years of experience deploying and configuring cloud environments, including significant hands-on Azure experience.
• Production experience with Terraform and/or Bicep for infrastructure as code.
• Hands-on experience with Azure landing zones, VNet design, Azure Firewall, and ExpressRoute or site-to-site VPN.
• Experience administering Microsoft Entra ID, RBAC, and SAML 2.0 or OIDC single sign-on federation.
• Experience monitoring, patching, and troubleshooting Windows and Linux workloads in Azure.
• Working knowledge of NIST SP 800-53 controls in a federal environment.
• Ability to obtain and maintain the federal customer's required background investigation.

Responsibilities

• Design and deploy Azure landing zones, management groups, subscriptions, and hub-and-spoke or Virtual WAN networking.
• Build and maintain Terraform or Bicep infrastructure and GitOps workflows for production and non-production environments.
• Configure Entra ID, RBAC, and SAML 2.0 or OIDC federation.
• Enforce security and compliance guardrails using Azure Policy, Microsoft Defender for Cloud, and Microsoft Sentinel.
• Apply tagging strategies and manage cost tracking, chargeback, and showback.
• Monitor environments with Azure Monitor, Datadog, Splunk, and Dynatrace, integrating incidents and changes with ServiceNow.
• Perform patching, maintenance, capacity planning, rightsizing, and incident response.
• Design and test high availability, Azure Backup, and Azure Site Recovery.
• Write runbooks and standard operating procedures, provide authorization-to-operate evidence, and transfer knowledge to customer operations staff.

Skills

Certifications

Degrees

Work schedule

Industry

Security clearance

Relocation