TechSur is seeking a Senior Cloud Engineer with deep Microsoft Azure expertise to design, build, and operate a federal customer's Azure cloud foundation. You will implement Azure landing zones, management group and subscription hierarchies, hub-and-spoke networking, and Entra ID federation that follow the customer's enterprise, cloud-agnostic architecture.
After build-out, you will own day-to-day health of the Azure environment: monitoring, patching, cost hygiene, and incident response. You will automate through Infrastructure-as-Code, work alongside customer and SAIC engineers across all four cloud providers, and help customer IT teams adopt Azure safely.
Key Responsibilities
- Design and deploy Azure landing zones using the Cloud Adoption Framework, including management groups, subscriptions, and hub-and-spoke or Virtual WAN networking integrated with the customer's WAN and DNS.
- Build and maintain Infrastructure-as-Code (Terraform, Bicep) and GitOps workflows that provision consistent production, integration, development, and sandbox environments.
- Configure Microsoft Entra ID, RBAC, and federation with the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles.
- Enforce security and compliance guardrails with Azure Policy, Microsoft Defender for Cloud, and Microsoft Sentinel against NIST SP 800-53 Rev 5 and customer security standards.
- Apply the enterprise tagging strategy for asset management, cost tracking, and chargeback/showback using Azure Cost Management and Advisor.
- Monitor environments with Azure Monitor and enterprise tools such as Datadog, Splunk, and Dynatrace; integrate events, incidents, and changes with ServiceNow.
- Perform patching (Azure Update Manager), routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support.
- Design and test high availability, Azure Backup, and Azure Site Recovery for cloud workloads.
- Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.
Required Qualifications
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
- At least 9 years of experience deploying and configuring cloud environments, including significant hands-on Azure work.
- Production experience with Infrastructure-as-Code using Terraform and/or Bicep (ARM).
- Hands-on experience with Azure landing zones, VNet design, Azure Firewall, and ExpressRoute or site-to-site VPN.
- Experience administering Microsoft Entra ID, RBAC, and single sign-on federation (SAML 2.0/OIDC).
- Experience monitoring, patching, and troubleshooting Windows and Linux workloads in Azure.
- Working knowledge of NIST SP 800-53 security controls in a federal environment.
- Ability to obtain and maintain the background investigation required by the federal customer.
Preferred Qualifications
- Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or DevOps Engineer Expert (AZ-400).
- Microsoft Certified: Azure Security Engineer Associate (AZ-500) or HashiCorp Certified Terraform Associate.
- Experience in Azure Government or FedRAMP Moderate/High environments, including support for ATO packages.
- Working knowledge of AWS, Google Cloud, or Oracle Cloud Infrastructure.
- Experience with Azure DevOps or GitHub Actions pipelines, Ansible, and policy-as-code.
- Experience integrating Azure tooling with ServiceNow ITSM and CMDB.
- Prior support of a civilian federal agency.
All your information will be kept confidential according to EEO guidelines.