Azure Cloud Engineer

Our client is seeking an experienced Azure Cloud Engineer to support secure, mission-critical Microsoft Azure environments in Lorton, Virginia .

The Azure Cloud Engineer will be responsible for deploying, automating, maintaining, and troubleshooting Azure infrastructure within secure enclave environments. This position requires strong hands-on experience with Azure DevOps, Infrastructure as Code (IaC), Azure Virtual Desktop (AVD), PowerShell, Active Directory, and cloud automation .

The ideal candidate is an automation-focused Azure engineer who can build and maintain secure cloud environments while supporting infrastructure modernization, CI/CD pipelines, identity and access management, and Windows enterprise services.

Key Responsibilities

- Deploy Azure resources, including Azure Virtual Machines, Key Vaults, networking, storage, and other core Azure services , using Azure DevOps pipelines.
- Implement, manage, and troubleshoot Azure DevOps CI/CD pipelines .
- Develop and maintain cloud infrastructure using Infrastructure as Code (IaC) technologies such as Terraform, Bicep, and ARM templates.
- Review, refine, test, and troubleshoot new and existing IaC deployments.
- Automate the deployment, configuration, and management of Azure infrastructure.
- Monitor Azure infrastructure and proactively address performance, availability, capacity, and security issues.
- Design, implement, and maintain secure enclave environments within Microsoft Azure .
- Ensure the stability, performance, availability, and security of Azure enclave systems.
- Manage Identity and Access Management (IAM) policies and enforce least-privilege access across cloud environments.
- Build, maintain, and automate Azure Virtual Desktop (AVD) images and image rotation .
- Administer and maintain Windows infrastructure services, including:

Active Directory Domain Services (AD DS)
- Active Directory Certificate Services (AD CS)
- Group Policy

- Support secure account provisioning, certificate management, policy enforcement, and troubleshooting of domain-related issues.
- Assist customers with installing and deploying software to baseline desktop environments using an automation-first approach , including technologies such as DSC and Packer.
- Develop automation using PowerShell, YAML, JSON, Bicep , and related scripting/configuration technologies.
- Collaborate with engineering, cybersecurity, development, and operations teams to design and enhance cloud solutions.
- Troubleshoot complex Azure and Windows infrastructure issues and provide escalation support when required.
- Develop and maintain technical documentation covering configurations, procedures, automation, and troubleshooting processes.

Required Qualifications

- Active Top Secret/SCI (TS/SCI) clearance or higher .
- Bachelor's degree in Computer Science, Information Technology , or a related technical discipline, or equivalent professional experience.
- Minimum 5 years of experience in cloud administration, engineering, or development, with a focus on Microsoft Azure .
- Strong hands-on experience deploying and managing Azure resources.
- Experience supporting secure enclave environments and working with applicable security and compliance requirements.
- Strong knowledge of Azure services, including Azure Virtual Desktop (AVD) .
- Hands-on experience developing and maintaining Infrastructure as Code using technologies such as:

Terraform
- Bicep
- ARM Templates
- Azure DevOps

- Strong experience automating Azure infrastructure deployment through code and CI/CD pipelines.
- Strong proficiency with PowerShell and infrastructure automation.
- Working knowledge of YAML, JSON, and Bicep .
- Experience administering Windows infrastructure services, including Active Directory, Certificate Services, and Group Policy .
- Experience with Identity and Access Management and implementation of least-privilege principles.
- Ability to troubleshoot complex Azure infrastructure and automation issues.

Preferred Qualifications

- Microsoft Azure certifications such as:

AZ-104 – Microsoft Azure Administrator
- AZ-305 – Designing Microsoft Azure Infrastructure Solutions
- Other relevant Microsoft Azure certifications

- Experience with Azure DevOps in enterprise or government environments.
- Experience with Azure Virtual Desktop image creation, management, and automated image rotation .
- Experience with DSC and/or Packer .
- Experience supporting cloud environments subject to federal or DoD security requirements.
- Experience developing reusable IaC modules, templates, and deployment pipelines.

Technical Skills

- Microsoft Azure
- Azure DevOps
- Azure Virtual Desktop (AVD)
- Terraform
- Bicep
- ARM Templates
- Infrastructure as Code (IaC)
- CI/CD Pipelines
- PowerShell
- YAML / JSON
- Active Directory Domain Services (AD DS)
- Active Directory Certificate Services (AD CS)
- Group Policy
- Identity & Access Management (IAM)
- Azure Key Vault
- Azure Virtual Machines
- DSC
- Packer
- Windows Server
- Cloud Automation
- Secure Cloud Environments

Additional Requirements

- Must reside within driving distance of Lorton, VA or be willing to relocate.
- Must be willing to work onsite .
- Must be willing and able to travel up to 10% .
- Must possess an active TS/SCI clearance or higher .
- Pursuant to the requirements of the government contract, this position requires U.S. citizenship .