Azure Cloud Engineer
About The Position
The Azure Cloud Engineer will maintain and implement cloud resources in the Tolling Azure environment, ensuring compliance with Virginia government policies for security, identity and access management, network controls, and cost governance. The role maintains infrastructure documentation, naming conventions, tagging standards, and governance artifacts; supports access reviews and least-privilege evaluations; manages vendor-required updates; and implements fault-tolerant, highly available Azure solutions. The engineer monitors Azure services and application workloads for uptime and availability, troubleshoots connectivity, access, security, performance, and service-degradation issues, and performs diagnostics using logs, metrics, traces, Azure Monitor, and Log Analytics. Responsibilities also include performance analysis and tuning, operational cycles and incident reviews, production issue triage, root-cause documentation, maintenance readiness, and off-hours work as needed. The engineer defines change requests, implementation plans, and rollback procedures. The position supports understanding and optimizing data flows and integrations across tolling systems, roadway data, financial transactions, and reporting tools. It applies PCI or other regulatory requirements when evaluating system behavior and logging, and manages key vaults, passwords, certificates, and secure credential storage. The engineer collaborates with architects, engineers, managers, and cross-functional teams, provides guidance on SaaS, PaaS, and IaaS best practices, communicates with internal and external stakeholders, and supports multiple concurrent projects of complex technical scope.
Requirements
- Minimum 3 years of experience with Microsoft Azure services.
- Bachelor’s degree in computer science, information systems, or equivalent experience.
- Ability to communicate requirements and design concepts clearly.
- Experience working in Windows environments.
- Experience with Office 365 services and administering Single Sign-On (SSO), including Entra ID.
- Scripting experience with PowerShell and/or Python.
- Ability to create network and system topology documentation.
- Experience with Azure Virtual Desktops.
- Experience with Office 365 services and Power Apps.
- Required experience with Microsoft Windows environments (2019+) — 2 years.
- Required experience with server infrastructure, protocols, firewalls, certificates, and load balancers — 2 years.
- Required Microsoft Azure administration/engineering experience — 3 years.
- Required experience with networking, server administration (Windows/Linux), databases, and cloud environments — 2 years.
- Required scripting experience with PowerShell/Python — 2 years.
- Required Office 365 and Power Apps platform experience — 1 year.
- Required Infrastructure as Code experience (Terraform or equivalent) — 1 year.
- Required experience with PCI or similar compliance frameworks — 1 year.
- Required Single Sign-On and identity administration (Entra ID) experience — 1 year.
- Position requires a fingerprint-based background check.
Nice To Haves
- Azure certification is preferred; AZ-104, AZ-305, or similar is listed as desired (1 year).
- Desired experience with continuous integration tools such as Azure DevOps, Jenkins, Git, or TFS — 1 year.
- Desired containerization experience with Docker or Kubernetes — 1 year.
- Desired Key Vault, secrets, and certificate management experience — 1 year.
- Desired experience with enterprise governance models — 1 year.
- Desired experience analyzing cloud cost trends and delivering cost-optimization recommendations — 1 year.
- Azure Virtual Desktops experience is listed as desired — 1 year.
Responsibilities
- Maintain and implement cloud resources in the Tolling Azure environment.
- Ensure compliance with Virginia government policies concerning security, IAM, network controls, and cost governance.
- Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.
- Assist with access reviews, role assignments, and least-privilege IAM evaluations.
- Manage vendor-required updates and ensure compatibility.
- Implement fault-tolerant and highly available Azure solutions.
- Monitor Azure services and application workloads to ensure uptime and availability.
- Troubleshoot connectivity, access, security, application performance, and service-degradation issues.
- Perform diagnostic deep-dives using logs, metrics, traces, Azure Monitor, and Log Analytics.
- Analyze and tune system and application performance.
- Participate in operational cycles, including pattern monitoring, incident reviews, and maintenance readiness checks.
- Triage production issues, ensure timely resolution, and document root-cause findings.
- Execute and support off-hours work as needed.
- Define change requests, detailed implementation plans, and rollback procedures.
- Understand end-to-end data flows across tolling systems, roadway data, financial transactions, and reporting tools.
- Support optimization of integrations and data movement.
- Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns.
- Manage key vaults, passwords, certificates, and secure credential storage.
- Work with architects, engineers, managers, and cross-functional teams to use Azure services effectively.
- Provide best-practice guidance related to SaaS, PaaS, and IaaS.
- Communicate clearly in writing and verbally with internal and external stakeholders.
- Support multiple concurrent projects of complex technical scope.
- Complete continued education at the contractor’s own expense to stay current with VDOT technologies.
