Microsoft Azure Systems Engineer

Ridgeline International•Tysons, VA

About The Position

Build the Azure Platform Engineers Want to Inherit We are looking for a hands on Azure engineer who wants to own a platform, not just contribute to one. This role is for someone who has personally built and operated production Azure environments and wants the autonomy to mature, standardize, and scale an enterprise cloud platform the right way. If you care about clean architecture, automation over manual work, strong security posture, and eliminating technical debt instead of managing around it, you will thrive here. You will not be buried in process. You will not be stuck reviewing other people’s diagrams. You will design, build, automate, and improve real infrastructure that supports real missions. What You Will Do Architect and Engineer Azure Environments Design and implement scalable, secure Azure infrastructure including IaaS, PaaS, and hybrid models Build and manage virtual networks, network security groups, Azure Firewall, and private endpoints Architect hybrid connectivity using VPN and ExpressRoute Implement high availability and disaster recovery patterns Own Identity and Systems Deploy and maintain Windows workloads in Azure Integrate Azure AD and Entra ID with enterprise systems Implement role based access control, Conditional Access, and least privilege models Support Microsoft 365 and identity integrations as required Automate Everything Build infrastructure using Terraform preferred, ARM or Bicep, PowerShell, and Azure CLI Deliver idempotent, repeatable deployments with no manual builds Contribute to continuous integration and continuous delivery pipelines for infrastructure Secure and Operationalize Implement Defender for Cloud and Azure security controls Configure Azure Monitor and Log Analytics Support compliance frameworks such as NIST, RMF, and CMMC as applicable Lead vulnerability remediation and hardening Own backup, recovery, monitoring, and incident response What You Will Accomplish in Your First Six Months Within six months, you will: Gain full command of the existing Azure environment and create a clear modernization roadmap aligned to business objectives Standardize infrastructure through Infrastructure as Code, eliminating drift and reducing operational risk Strengthen identity, access, and network architecture to meet enterprise grade security expectations Enhance observability and monitoring so systems are visible, measurable, and proactively managed Deliver a scalable, documented, and resilient Azure platform ready to support long term growth By month six, the environment will be more consistent, secure, automated, and operationally mature because of your direct impact.

Requirements

An Active Secret Clearance at a minimum
Five or more years of hands on systems engineering
Three or more years building and operating Azure in production
Direct experience deploying and troubleshooting Azure networking including virtual networks, network security groups, peering, private endpoints, VPN, and ExpressRoute
Hands on Azure AD and Entra ID implementation including Conditional Access, role based access control, and enterprise integrations
Proven Infrastructure as Code practice in real environments with Terraform preferred
Strong PowerShell automation experience
Experience as primary engineer for production Azure workloads

Nice To Haves

Azure certifications such as AZ 104 or AZ 305
Experience in regulated or Department of Defense environments
Azure Kubernetes Service experience
Azure DevOps or GitHub Actions pipeline experience
Microsoft Defender suite experience
Zero trust architecture implementation

Responsibilities

Design and implement scalable, secure Azure infrastructure including IaaS, PaaS, and hybrid models
Build and manage virtual networks, network security groups, Azure Firewall, and private endpoints
Architect hybrid connectivity using VPN and ExpressRoute
Implement high availability and disaster recovery patterns
Deploy and maintain Windows workloads in Azure
Integrate Azure AD and Entra ID with enterprise systems
Implement role based access control, Conditional Access, and least privilege models
Support Microsoft 365 and identity integrations as required
Build infrastructure using Terraform preferred, ARM or Bicep, PowerShell, and Azure CLI
Deliver idempotent, repeatable deployments with no manual builds
Contribute to continuous integration and continuous delivery pipelines for infrastructure
Implement Defender for Cloud and Azure security controls
Configure Azure Monitor and Log Analytics
Support compliance frameworks such as NIST, RMF, and CMMC as applicable
Lead vulnerability remediation and hardening
Own backup, recovery, monitoring, and incident response

Benefits

Flexible PTO + holidays
Generous 401k match benefit up to 10%, with an automatic 3% safe harbor contribution and additional matching based on employee contributions.
Medical (HSA & PPO Plans Available), dental, vision, disability, and life insurance
Employer Contribution to Health Savings Account (HSA)
Learning & Development opportunities
Professional coaching services
Free Personal Privacy Protection Services
Get the technology you want to do your job
We have free daily snacks & drinks

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume