Senior Azure Cloud Platform Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, automate, and sustain scalable infrastructure services on the IL5 Azure platform.

• Create and implement custom Azure Policies, Initiatives, and Management Group guardrails to uphold IL5 and Zero Trust standards across ECS.

• Automate workflows for Privileged Identity Management, just-in-time access, and RBAC lifecycles.

• Convert DoD Zero Trust capability objectives and TASKORD specifications into operational cloud architectures and network setups.

• Develop Azure Automation Runbooks, Logic Apps, and real-time dashboards for telemetry gathering and audit artifact collection.

• Optimize triage and remediation processes for Microsoft Defender for Cloud and Azure Advisor recommendations.

• Manage boundary configurations to ensure compliance with DoD SCCA and Cloud Computing SRG standards.

• Incorporate infrastructure linting, template validation, and automated policy testing into Azure DevOps build and release pipelines.

• Provide support for the EITaaS program by delivering enterprise ITSM, service desk, endpoint management, security, field support, and end-user device lifecycle capabilities for the DAF.

⛳️ Requirements

• Over 15 years of relevant experience (a Bachelor’s Degree in a related field can substitute for 5 years of relevant experience).

• Active Secret clearance is required.

• DoD 8570/8140-compliant cybersecurity certification, such as CompTIA Security+ CE or an approved equivalent.

• Extensive practical experience in engineering, deploying, and managing Microsoft Azure infrastructure in enterprise settings.

• Strong expertise in Infrastructure-as-Code (IaC), including Azure Bicep, ARM templates, and/or Terraform.

• Experience in implementing Azure Policy, RBAC, PIM, and Microsoft Entra ID.

• Proficient in developing and maintaining CI/CD pipelines utilizing Azure DevOps, Git, and automated deployment methodologies.

• Familiarity with Azure Virtual Networks, Network Security Groups, Azure Firewall, Private Endpoints, DNS, and hybrid connectivity.

• Experience in implementing cloud security controls, automated compliance monitoring, and remediation using Microsoft Defender for Cloud, Azure Monitor, and Azure Advisor.

• Strong troubleshooting, scripting, and automation abilities using PowerShell, Azure CLI, and/or Python.

• Desired: Experience supporting DoD IL5 cloud environments and implementing controls aligned with DISA STIGs, DoD Cloud Computing SRG, and Zero Trust requirements.

• Desired: Understanding of DoD SCCA, RMF, and ATO processes.

• Desired: Experience in implementing enterprise-scale Azure governance using Management Groups, Azure Policy Initiatives, and automated compliance enforcement.

• Desired: Microsoft Azure certifications such as AZ-305, AZ-104, or AZ-400.

• Desired: Experience in supporting large-scale federal or Department of Defense cloud modernization initiatives.

• Desired: Capacity to collaborate with cloud engineering, cybersecurity, networking, and application teams.

🏝️ Benefits

• Flexible time off benefit.

• Robust learning resources.

• Healthcare benefits.

• Wellness benefits.

• Financial benefits.

• Retirement benefits.

• Family support benefits.

• Continuing education benefits.

• Time off benefits.

• Competitive compensation.

• Learning and development opportunities.