Senior Cloud Engineer (Azure/Identity)

JCS Solutions LLC•Fort Belvoir, VA

4d•$96,000 - $105,000

About The Position

JCS Solutions is seeking a Senior Cloud Engineer to support mission-critical Department of Defense cloud modernization initiatives. The position is a senior, hands-on technical contributor responsible for designing, engineering, implementing, and sustaining secure Microsoft Azure cloud solutions in classified enterprise environments. The role focuses on Azure architecture, hybrid cloud engineering, enterprise identity management, and solutions aligned with Zero Trust principles and DoD cybersecurity requirements. The engineer will design and deploy Azure environments and hybrid architectures; establish landing zones and governance models; implement identity, access, networking, security, monitoring, and automation capabilities; and support compliance, accreditation, and Authority to Operate activities. The role also involves evaluating Microsoft cloud technologies, troubleshooting complex technical issues, collaborating across technical teams, and producing engineering and operational documentation. The position is located in Ft. Meade, Maryland. The posting lists a Secret clearance in the role details, but the qualifications section specifies an active DoD Top Secret/SCI clearance. The listed salary range is $96,000–$105,000.

Requirements

Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical discipline and 12–15 years of relevant experience; or a related master's degree and 10–13 years of relevant experience; or a doctorate in a related technical discipline; or an equivalent combination of education, training, and directly related experience where permitted.
At least five years of experience designing and implementing Microsoft Azure enterprise cloud solutions.
Demonstrated experience architecting hybrid Azure environments that integrate enterprise on-premises infrastructure with Azure cloud services.
Advanced experience with Microsoft Entra ID, Microsoft Entra Connect, Active Directory, AWS IAM, hybrid identity synchronization, federation, enterprise identity management, and E-ICAM solutions.
Experience implementing Microsoft Entra ID Governance capabilities, including Conditional Access, Policy Information Points and Policy Engines, Access Reviews, Entitlement Management, Lifecycle Workflows, and identity lifecycle automation.
Experience implementing Azure landing zones and enterprise governance models.
Strong understanding of Azure networking, storage, compute, governance, and security services.
Experience implementing infrastructure as code using Terraform, Azure Bicep, ARM Templates, or similar technologies.
Experience with Azure CLI, PowerShell, Python, or comparable automation languages.
Strong understanding of Zero Trust architecture, identity-centric security, and cloud security best practices.
Excellent written and verbal communication skills.
Active DoD Top Secret/SCI clearance, as stated in the qualifications section.
Current DoD 8570/8140 IAT Level II certification, such as Security+ CE, CySA+, CCNA Security, CASP+ CE, CISSP Associate or Full, CCSP, CISA, SSCP, GSEC, GCIH, GCED, CND, or another approved IAT Level II certification.
Microsoft Certified: Azure Solutions Architect Expert.

Nice To Haves

AWS Certified Solutions Architect – Professional certification is described as required/preferred in the posting; additional AWS Professional and/or Specialty certifications are highly desired.
Experience designing, implementing, and managing hybrid multi-cloud environments integrating Microsoft Azure and AWS.
Familiarity with DoD cloud initiatives and environments, including JWCC, DoD Joint Tenant Cloud Environments, and the DoD Enterprise Cloud Strategy and related modernization efforts.
Understanding of DoD E-ICAM architecture and principles.
Experience supporting identity federation, identity governance and administration, Zero Trust Architecture initiatives, and secure access and authorization in DoD cloud environments.
Hands-on experience with Azure Arc, Azure Stack HCI, Azure Local, and enterprise hybrid cloud management and orchestration platforms.
Experience deploying and managing cloud-native applications using Azure Kubernetes Service, Kubernetes, and container orchestration technologies.
Experience implementing cloud security, compliance, and governance solutions such as Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Intune, and Microsoft Purview.
Experience designing and implementing DevSecOps practices and CI/CD pipelines using Azure DevOps or GitHub Enterprise.
Ability to integrate security controls, compliance checks, and automation throughout the software development lifecycle.
Experience supporting DoD cloud initiatives and classified enterprise environments.

Responsibilities

Architect, design, engineer, and implement secure Microsoft Azure cloud solutions for DoD mission requirements.
Design and deploy greenfield Azure environments and hybrid cloud architectures connecting on-premises infrastructure with Azure services.
Design Azure landing zones, governance frameworks, subscription architectures, and management group strategies using Microsoft Cloud Adoption Framework and Azure Well-Architected Framework guidance.
Implement Azure-native monitoring, governance, backup, disaster recovery, and security capabilities.
Troubleshoot complex cloud infrastructure, networking, identity, and security issues.
Evaluate emerging Microsoft cloud technologies and recommend solutions for mission objectives.
Design, implement, and maintain hybrid identity solutions using Microsoft Entra ID, Microsoft Entra Connect, Active Directory, and E-ICAM capabilities.
Engineer authentication, authorization, identity governance, and privileged access management solutions, including JIT access, RBAC, ABAC, and Zero Trust models.
Configure and administer Microsoft Entra ID Governance capabilities, including Conditional Access, Access Reviews, Entitlement Management, Lifecycle Workflows, and PIM.
Design and implement secure Azure networking using VNets, ExpressRoute, VPN Gateway, Azure Firewall, Virtual WAN, and private connectivity services.
Support compliance with RMF, STIGs, DoD cybersecurity requirements, and Zero Trust initiatives.
Develop infrastructure-as-code solutions using Terraform, Azure Bicep, ARM Templates, or similar technologies.
Automate cloud administration using Azure CLI, PowerShell, Python, or comparable scripting languages.
Collaborate with cybersecurity, networking, systems engineering, and application development teams.
Support Authority to Operate activities and accreditation efforts.
Produce architecture documentation, engineering diagrams, implementation guides, standard operating procedures, and technical documentation.