Azure Cloud Engineer

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Oversee the maintenance and implementation of cloud resources within the Tolling Azure environment.

• Ensure adherence to Virginia government regulations regarding security, IAM, network controls, and cost governance.

• Enhance and maintain infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.

• Assist in conducting access reviews, role assignments, and evaluations for least-privilege IAM.

• Manage updates required by vendors and ensure compatibility.

• Deploy fault-tolerant and highly available solutions on Azure.

• Monitor Azure services and application workloads to guarantee uptime and availability.

• Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.

• Conduct diagnostic deep-dives utilizing logs, metrics, traces, Azure Monitor, and Log Analytics.

• Analyze and optimize system/application performance.

• Participate in daily/weekly operational cycles, monitoring patterns, incident reviews, and maintenance readiness checks.

• Triage production issues, ensure timely resolutions, and document root-cause analyses.

• Perform and support off-hours work as necessary.

• Define change requests, detailed implementation plans, and rollback procedures.

• Comprehend end-to-end data flows across tolling systems, roadway data, financial transactions, and reporting tools.

• Assist in optimizing integrations and data movement.

• Apply PCI or other regulatory compliance standards when assessing system behavior and logging patterns.

• Manage key vaults, passwords, certificates, and secure credential storage.

• Collaborate with architects, engineers, managers, and cross-functional teams to utilize Azure services effectively.

• Offer best-practice guidance concerning SaaS, PaaS, and IaaS.

• Communicate effectively with both internal and external stakeholders.

• Support multiple concurrent projects with complex technical scopes.

⛳️ Requirements

• At least 3 years of experience with Microsoft Azure services.

• Minimum of 3 years supporting VDOT/E-ZPass Virginia tolling applications, infrastructure, and cloud workloads, including hands-on diagnostic tasks with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.

• Bachelor's degree in computer science, information systems, or equivalent experience.

• Proven ability to clearly communicate requirements and design concepts.

• Experience working within Windows environments.

• Proven experience in implementing Rubrik backup and recovery for Azure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DR validation.

• Experience with Office 365 services and administering Single Sign-On (SSO) including Entra ID.

• Experience managing SecretServer privileged access vaults, including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.

• Solid scripting skills in PowerShell and/or Python.

• Capability to create network and system topology documentation.

• Familiar with Azure Virtual Desktops.

• Experience with Office 365 services and Power Apps.

• Fingerprint-based background check is required.

• Microsoft Azure administration/engineering: 3 years required.

• Microsoft Windows environments (2019+): 5 years required.

• Experience with server infrastructure, protocols, firewalls, certificates, and load balancers: 2 years required.

• Background in networking, server administration (Windows/Linux), databases, and cloud environments: 2 years required.

• Implementing Rubrik backup & recovery for Azure IaaS/PaaS: 2 years required.

• Scripting in PowerShell/Python: 2 years required.

• Administration of SecretServer privileged access vaults: 2 years required.

• Experience with Office 365 and Power Apps platforms: 1 year required.

• Familiarity with PCI or similar compliance frameworks: 1 year required.

• Experience in Single Sign-On and identity administration (Entra ID): 1 year required.

• Experience with enterprise governance models: 1 year required.

• Azure certification is preferred.

• Experience with continuous integration tools (Azure DevOps, Jenkins, Git, TFS): 1 year desired.

• Knowledge of Infrastructure as Code (Terraform or equivalent): 1 year desired.

• Familiarity with containerization (Docker, Kubernetes): 1 year desired.

• Experience with Key Vault, secrets, and certificate management: 1 year desired.

• Azure certification (AZ-104, AZ-305, or similar): 1 year desired.

🏝️ Benefits

• Full-time contract employment.

• Continued education expected to stay current with VDOT technologies.