Senior Infrastructure Engineer, Azure

This is a fully remote position, open to applicants in Alabama, +29 more states.

📋 Description

• Create and oversee a code-first platform that includes automated infrastructure, provisioning, configuration, and lifecycle management.

• Evaluate or enhance the current Azure environment, infrastructure dependencies, and modernization needs to guide target architecture.

• Act as a trusted advisor or key figure in a client-facing capacity.

• Lead and implement architecture design and construction decisions for IT infrastructure and platforms in collaboration with clients.

• Develop the Azure tenant structure, encompassing management groups, subscriptions, landing zones, networking, and resource organization.

• Establish cloud architecture standards, naming conventions, tagging strategies, and documentation of architectural decisions.

• Provide guidance on identity and access management, including Entra ID, RBAC, PIM, Conditional Access, and least-privilege models.

• Create secure networking and connectivity patterns bridging Azure, on-premises systems, federal partners, and external integrations.

• Define and uphold Infrastructure-as-Code standards, reusable modules, repository structures, and CI/CD workflows.

• Generate architecture documentation, operational guidelines, governance artifacts, and platform runbooks.

• Support and manage a planned production platform that serves multiple systems.

• Collaborate within a small team to assist government clients in utilizing modern cloud technology.

⛳️ Requirements

• Demonstrated expertise in Azure Cloud, including Azure Landing Zones, Management Groups, and subscription design in large-scale government or regulated settings.

• Experience in supporting enterprise-scale infrastructure platforms.

• Proficiency in Infrastructure as Code using Azure Bicep, ARM templates, Terraform, CI/CD automation, and GitOps.

• Scripting skills in Python, PowerShell, and Bash.

• Background in designing identity and access management solutions using Microsoft Entra ID, RBAC, PIM, and Conditional Access.

• Understanding of cloud security, governance, and compliance frameworks, including HIPAA, NIST, Azure Policy, Microsoft Defender for Cloud, and ATO processes.

• Experience in establishing cloud governance standards, resource organization, naming conventions, tagging strategies, policy guardrails, and cost management practices.

• Proficient in DevSecOps, automated deployment pipelines, infrastructure monitoring, operational observability, and SIEM integration.

• Skilled in developing architecture documentation, ADRs, technical standards, and operational runbooks.

• Experience working with government stakeholders, infrastructure teams, security teams, and multiple vendors.

• Proven ability to design highly available platforms and disaster recovery strategies.

• Familiarity with working in an agile delivery team.

• Strong technical leadership and communication skills, including the ability to coach and mentor engineers.

• Willingness and motivation to enhance Nava’s Azure community of practice.

• Legal authorization to work in the United States.

• Capability to meet other prerequisites for applicable government contracts.

• Work authorization that does not necessitate visa sponsorship, now or in the future.

• May be required to undergo a government background check or attain security clearance.

🏝️ Benefits

• Comprehensive medical, dental, and vision plans.

• Disability, life, and accidental death insurance at no cost.

• Vacation, holidays including Juneteenth, and floating holidays.

• 12 paid federal holidays each year in addition to regular PTO.

• Performance-based annual bonus when Nava achieves its goals.

• Paid parental leave.

• Weekly meals delivered to new parents’ homes.

• Wellness program offering resources and support tools for physical, mental, and emotional health.

• Virtual doctor visits with no copay, subject to available providers.

• Extended unpaid sabbatical leave after continuous service.

• 401(k) matching at 4% of salary.

• Remote-first flexible work environment.

• Company laptop and home office setup assistance through Staples.

• Monthly reimbursement for eligible home office utility expenses.

• Internal training programs and professional learning resources.

• Access to LinkedIn Learning and an annual allowance for courses, tuition, and certifications.

• Referral bonus.

• Pre-tax commuter programs when applicable.

• Collaborative and remote-friendly team environment.