Senior Azure Systems Engineer (GCC High / CMMC)

ERG • Washington, DC

10d • $125,000 - $145,000

About The Position

ERG is seeking a highly skilled Senior Azure Systems Engineer with a minimum of seven years of cloud systems engineering experience to support and enhance our mature, enterprise-level cloud environment with a strong focus on Azure and Office 365. This role requires at least three years of hands-on experience operating within GCC High environments or supporting infrastructures aligned with NIST SP 800-171 (CMMC Level 2), ensuring all solutions meet rigorous security, compliance, and operational standards.

In this role, you will contribute to the full lifecycle of our Azure infrastructure — including analysis, architecture, planning, implementation, deployment, optimization, and troubleshooting. You will play a critical part in maintaining a secure, resilient, and scalable cloud ecosystem that supports mission-driven work.

The ideal candidate is a collaborative problem-solver who brings both technical depth and a proactive mindset. They are energized by complex challenges, communicate effectively with clients and colleagues, and demonstrate a continuous desire to learn, innovate, and stay ahead of evolving cloud technologies.

Requirements

• Minimum of Seven (7) years of Azure cloud Administration experience
• A BS in information technology is strongly preferred
• Three years of experience that demonstrates deep knowledge of NIST 800-171/CMMC Level 2 security frameworks
• Microsoft certification: Azure Administrator Associate or Azure Security Engineer Associate
• Must be a U.S. citizen
• Expertise in setting up and configuring Windows Terminal Services/remote desktop
• Strong grasp of security concepts and best practices

Nice To Haves

• Security clearance (current or recently expired)
• Certified Security Plus, Network Plus, or CMMC Certified Professional
• Experience with SIEM tools such as Microsoft Sentinel or CrowdStrike
• Familiar with CrowdStrike, Qualys, and Microsoft Sentinel

Responsibilities

• Designing and deploying Azure infrastructure components, including compute, storage, networking, identity, governance, and managing hybrid Office365 environments
• Architect and configure virtual networks (VNets), Network security groups (NSGs), Express Route, and private endpoints in Azure
• Create and maintain architecture diagrams
• Propose environmental improvements or impacts, when needed, using diagrams and risk management principles
• Managing Microsoft identity management tools like Active Directory, Azure AD, AD Connect, Duo, and Office 365
• Supporting Azure firewall and Windows Virtual Desktop (WVD) environments
• Maintain infrastructure that meets or exceeds CMMC Level 2 requirements, including proper handling of CUI
• Optimizing Windows Virtual Desktop (WVD) for cost, performance, rightsizing, reservations, savings plans, and security
• Writing and updating automation scripts using PowerShell or similar languages
• Understanding and configuring Azure Sentinel, including SIEM rules, correlations, and dashboards
• Setting up data loss prevention (DLP) and Azure Information Protection (AIP) policies
• Creating and maintaining documentation, evidence, procedures, and training to support third-party CMMC assessments and audits
• Monitoring, troubleshooting, and improving cloud computing performance
• Offering technical and analytical assistance to diagnose network issues and provide users with solutions, participating in the change management meeting and stakeholder meetings
• Familiarity with federation and single sign-on (SSO) solutions using Duo and user provisioning

Benefits

• health and dental insurance
• life insurance
• long-term disability
• educational benefits
• FSAs
• a generous 401k plan
• profit sharing
• an EAP
• 11-20 paid vacation days per year
• 10 paid holidays per year
• 56 hours or more of sick leave (based on the state you work in) per year (pro-rated for part-time)

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level