Azure Platform Engineer
About The Position
The Azure Platform Engineer designs, automates, secures, and operates a large-scale enterprise Azure environment. The role has day-to-day responsibility for administration, governance, and ongoing development of a multi-subscription Azure platform supporting mission-critical workloads. It is a hands-on engineering position with operational ownership, taking infrastructure and automation solutions from architecture through production support. The engineer builds Infrastructure as Code, automation solutions, CI/CD pipelines, security controls, and governance frameworks to keep the platform secure, compliant, cost-efficient, and resilient. The role works across Azure platform administration, automation, DevOps, security, networking, incident response, and audit readiness, and serves as an escalation point for complex production issues. The position is based in the Reston, Virginia / Rockville, Maryland area in a hybrid work arrangement, with occasional on-site collaboration. It supports production systems and a shared on-call rotation, including after-hours and weekend maintenance windows when required.
Requirements
- U.S. citizenship is required by federal contracts.
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
- Five or more years of hands-on Azure infrastructure or platform administration experience.
- Experience managing enterprise Azure environments across multiple subscriptions and environments.
- Strong understanding of networking, systems administration, cloud architecture, and identity management.
- Practical experience with Infrastructure as Code using Terraform, Bicep, ARM templates, or comparable tools.
- Experience designing or operating CI/CD pipelines using GitHub Actions or Azure DevOps.
- Ability to diagnose, resolve, document, and prevent recurrence of production issues.
- Strong communication and collaboration skills in a small, high-ownership team.
- Availability for a shared on-call rotation and after-hours or weekend change-window support.
- All candidates must be authorized to work in the United States.
Nice To Haves
- Microsoft Certified: Azure Administrator Associate (AZ-104).
- Microsoft Certified: Azure Solutions Architect Expert (AZ-305).
- Microsoft Certified: DevOps Engineer Expert (AZ-400).
- Microsoft Certified: Azure Security Engineer Associate (AZ-500).
- Ability to use AI-assisted tools such as Microsoft Copilot or GitHub Copilot to improve engineering productivity, scripting, documentation, troubleshooting, and operational analysis while applying human review and maintaining security, privacy, and compliance standards.
- Experience with enterprise Azure Landing Zone implementations.
- Experience with Microsoft Defender XDR, Microsoft Defender for Cloud, or Microsoft Sentinel.
- Experience operating in compliance-driven environments using NIST 800-53, FedRAMP, SOX, or similar frameworks.
- Automation experience with PowerShell, Python, or C#.
- Experience supporting hybrid Azure and on-premises environments.
- Experience with Azure Databricks, Microsoft Fabric, Kubernetes, or advanced data-platform services.
Responsibilities
- Administer enterprise Azure environments across multiple subscriptions and management groups.
- Manage Azure Landing Zones, Management Groups, Azure Policy, role-based access control (RBAC), and subscription lifecycle processes.
- Govern Azure resources to support security, compliance, and operational consistency.
- Design, deploy, and maintain cloud infrastructure using Terraform, Bicep, ARM templates, or similar Infrastructure as Code tools.
- Manage infrastructure deployments through governed CI/CD pipelines rather than manual portal-based changes.
- Develop reusable modules and templates that enforce enterprise standards.
- Build automation to reduce operational overhead and enable controlled self-service capabilities.
- Develop Azure Automation runbooks, Azure Functions, Logic Apps, and PowerShell-based automation.
- Automate governance, compliance validation, resource provisioning, drift detection, and remediation.
- Design and maintain GitHub Actions and Azure DevOps deployment pipelines.
- Implement environment promotion strategies across development, test, staging, and production.
- Build secure deployment workflows with validation, approvals, automated testing, and notifications.
- Implement and maintain controls using Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Key Vault, and Microsoft Entra ID.
- Design and enforce identity, access management, privileged access, and least-privilege processes.
- Support security assessments, vulnerability remediation, and compliance initiatives.
- Design, deploy, and troubleshoot Azure networking services, including Virtual Networks, Private Endpoints, ExpressRoute, VPN Gateway, Azure Firewall, NSGs, Application Gateway, and Web Application Firewall.
- Support hybrid connectivity, routing, DNS, segmentation, and secure application access patterns.
- Serve as an escalation point for complex production issues.
- Perform incident response, root cause analysis, and post-incident corrective actions.
- Own problems end to end across infrastructure, networking, identity, and platform services.
- Support NIST 800-53, FedRAMP, SOX, and other applicable compliance initiatives.
- Maintain evidence collection, control documentation, and audit readiness.
- Participate in code reviews, design reviews, change management (CAB), and operational documentation.
- Participate in a shared on-call rotation and support production changes, incidents, and after-hours or weekend maintenance windows when required.
Benefits
- Flexible hybrid environment.
- Opportunities to grow into senior engineering and cloud architecture leadership roles.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
