VDOT Azure Cloud Engineer - remote
About The Position
VDOT ITD Tolling is seeking an Azure Cloud Engineer to join the Eng and Ops team. The role includes engineering, application support, and rotational help-desk support within the Tolling group. This position involves working with API Gateways, Azure Virtual Desktop (AVD), Application Insights, and Office 365. The engineer will be responsible for maintaining and implementing cloud resources in the Tolling Azure environment, ensuring compliance with Virginia government policies, and maintaining infrastructure documentation. The role also includes monitoring, troubleshooting, and diagnostics of Azure services and applications, participating in daily/weekly operational cycles, triaging production issues, and supporting off-hours work as needed. Additionally, the engineer will define change requests, support optimization of integrations and data movement, apply regulatory compliance requirements, and manage key vaults, passwords, certificates, and secure credential storage. Collaboration with architects, engineers, managers, and cross-functional teams is essential, along with providing best-practice guidance on SaaS, PaaS, and IaaS, and supporting multiple concurrent projects.
Requirements
- Minimum 3 years of experience with Microsoft Azure services.
- Minimum 3 years experience supporting VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads, including hands-on diagnostic work with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.
- Bachelor’s degree in computer science, information systems, or equivalent experience.
- Demonstrated ability to communicate requirements and design concepts clearly.
- Experience working in Windows environments.
- Implementing Rubrik backup & recovery for Azure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DR validation.
- Experience with Office 365 services and administering Single Sign-On (SSO) including Entra ID.
- Experience administering SecretServer privileged access vaults including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.
- Solid scripting experience (PowerShell and/or Python).
- Ability to create network and system topology documentation.
- Experience with Azure Virtual Desktops.
- Office 365 services and Power Apps.
- Microsoft Azure administration/engineering (Required, 3 Years)
- Microsoft Windows environments (2019+) (Required, 5 Years)
- Server infrastructure, protocols, firewalls, certificates, load balancers (Required, 2 Years)
- Support of VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads (Required, 3 Years)
- Networking, server administration (Windows/Linux), databases, cloud environments (Required, 2 Years)
- Implementing Rubrik backup & recovery for Azure IaaS/PaaS (Required, 2 Years)
- Scripting with PowerShell/Python (Required, 2 Years)
- Administration of SecretServer privileged access vaults. (Required, 2 Years)
- Office 365 and Power Apps platforms (Required, 1 Years)
- Experience with PCI or similar compliance frameworks (Required, 1 Years)
- Single Sign On and identity administration (Entra ID) (Required, 1 Years)
- Experience with enterprise governance models (Required, 1 Years)
Nice To Haves
- Azure certification (preferred).
- Continuous integration tools (Azure DevOps, Jenkins, Git, TFS) (Desired, 1 Years)
- Infrastructure as Code (Terraform or equivalent) (Desired, 1 Years)
- Containerization (Docker, Kubernetes) (Desired, 1 Years)
- Key Vault, secrets and certificate management (Desired, 1 Years)
- Azure certification (AZ 104, AZ 305, or similar) (Desired, 1 Years)
Responsibilities
- Maintain and implement cloud resources in the Tolling Azure environment.
- Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.
- Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.
- Assist with access reviews, role assignments, and least-privilege IAM evaluations.
- Manage vendor-required updates and ensure compatibility.
- Implement fault-tolerant and highly available Azure solutions.
- Monitor Azure services and application workloads to ensure uptime and availability.
- Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.
- Perform diagnostic deep-dives using logs, metrics, traces, Azure Monitor, and Log Analytics.
- Analyze and tune system/application performance.
- Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.
- Triage production issues, ensure timely resolution, and document root-cause findings.
- Execute and support off-hours work as needed.
- Define change requests, detailed implementation plans, and roll-back procedures.
- Understand end-to-end data flows across tolling systems, roadways data, financial transactions, and reporting tools.
- Support optimization of integrations and data movement.
- Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns.
- Manage key vaults, passwords, certificates, and secure credential storage.
- Work directly with architects, engineers, managers, and cross-functional teams to use Azure services effectively.
- Provide best-practice guidance related to SaaS, PaaS, and IaaS.
- Communicate clearly in written and verbal form with internal and external stakeholders.
- Support multiple concurrent projects of complex technical scope.
Benefits
- Continued education is expected at the contractor’s own expense to stay current with VDOT technologies.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
