Azure Automation Engineer

This is a fully remote position, open to applicants in Ohio.

📋 Description

• Assist with the Arkloud IRAD initiative.

• Design, automate, and maintain Azure Government cloud infrastructure.

• Create and oversee production Infrastructure-as-Code modules utilizing Bicep/ARM, Terraform, Pulumi, or Crossplane.

• Engineer and manage comprehensive CI/CD pipelines using GitLab CI, GitHub Actions, or Azure DevOps.

• Conduct Azure platform engineering across compute, networking, storage, identity, PaaS data services, observability, and ARM control-plane operations.

• Develop production-grade automation scripts using Python and Bash/PowerShell.

• Create tools and API clients leveraging Azure REST and JSON/YAML manipulation.

• Support compliance for the DoD workforce.

• Deliver solutions within Azure Government environments, GCC High, or air-gapped sovereign clouds.

• Construct and maintain golden images using Packer, Ansible, Salt, or DSC.

• Publish images through Azure Compute Gallery and ensure STIG/SCAP hardening along with an automated patch schedule.

• Manage AKS clusters and workloads, including private clusters, node pool automation, CNI/network policy, Helm delivery, GitOps, and cross-layer debugging.

• Automate identity lifecycles using Entra ID Graph API/CLI, covering app registrations, service principals, RBAC-as-code, managed identity, workload identity federation, and Key Vault/CSI integration.

• Implement network automation for NSG, UDR, private endpoints, Private DNS, hub-spoke, forced-tunnel, and IPAM discipline.

• Perform additional duties as assigned.

⛳️ Requirements

• Must be a US citizen.

• Must possess or be willing to obtain a Secret Clearance.

• Bachelor's degree in Computer Science, Information Technology, or a related technical field.

• CompTIA Security+ (or an equivalent qualifying credential) is required within 90 days of start date.

• 3+ years of experience in Azure automation, Infrastructure-as-Code, or platform engineering.

• Proficiency in Python and Bash/PowerShell; Go is preferred.

• In-depth Azure knowledge across compute, networking, storage, identity, PaaS, and monitoring.

• Extensive experience in building and managing CI/CD pipelines.

• Strong debugging skills across Azure control plane, IaC state, and Kubernetes boundaries.

• Hands-on experience with Azure Government, GCC High, IL4/IL5 is preferred.

• Experience with STIG/SCAP image hardening pipelines is preferred.

• Familiarity with AKS, GitOps (ArgoCD/Flux), Helm delivery, and container platform automation is preferred.

• Experience in Entra ID identity automation and federated identity is preferred.

• Preference for network topology automation (hub-spoke, forced tunnel, private endpoints, IPAM).

• All positions are subject to background investigations.

• Employment is contingent upon the successful completion of a background investigation, including criminal history and identity verification.

🏝️ Benefits

• Competitive benefits package within the industry.

• Awards and recognition program.

• Personalized support from ARS Senior Managers.

• Work/life balance.

• Career development support and opportunities.

• Reasonable accommodations for applicants with disabilities.