Senior Cloud Engineer

Syms Strategic Group, LLC (SSG)•Detroit, MI

1d•$109,623 - $126,790•Remote

About The Position

Syms Strategic Group (SSG) is hiring a Senior Cloud Engineer for a full-time, 100% U.S.-based remote role supporting the Department of Veterans Affairs. The position provides cloud engineering and support services for VA Enterprise Cloud (VAEC) Azure GovCloud environments. Candidates residing in California, Colorado, Illinois, Minnesota, New Jersey, New York, Oregon, or Washington will not be considered. This is a W-2 position, and U.S. citizenship is required. The candidate must possess or qualify for a Public Trust (MBI) and be eligible for a government security investigation and clearance. The Senior Cloud Engineer designs, deploys, manages, and supports secure, scalable, highly available Azure infrastructure and services. The role includes cloud architecture and diagramming, automation and CI/CD, cloud permissions, monitoring and compliance, cloud security documentation, and customer-focused provisioning and support for VA systems and applications. The engineer will work within VA requirements for development, release, and documentation and help design cloud-hosted solutions and address cloud-readiness gaps. The posting states a requirement of 20+ years of professional experience and a bachelor's degree in Computer Science, Systems Engineering, Cloud Engineering, or a related technical discipline. Desired experience includes hands-on EDIFECS and EDI X.12 transactions, as well as advanced Azure certifications. Salary range: $109,623–$126,790. Interviews are conducted on Microsoft Teams with the candidate's camera on; applicants will also be asked to provide a LinkedIn profile link.

Requirements

20+ years of professional experience.
Bachelor's degree in Computer Science, Systems Engineering, Cloud Engineering, or a related technical discipline.
U.S. citizenship is required.
Must possess or qualify for a Public Trust (MBI); selected applicants are subject to a government security investigation and must meet eligibility requirements for access to classified information and a government-granted security clearance.
Proven experience designing, deploying, and managing Azure infrastructure and services, including large-scale, highly available, scalable cloud architecture.
Expertise in Azure services including Virtual Machines, Blob Storage, Azure SQL Database, Virtual Network (VNet), Functions, Microsoft Entra ID, Azure Resource Manager (ARM), Azure Monitor, and Azure DNS.
Experience with Azure security practices and services, including Microsoft Entra ID, Azure RBAC, DDoS Protection, and Web Application Firewall (WAF).
Proficiency with Azure networking components, including VNet Peering, ExpressRoute, VPN Gateway, Private Endpoints, and Azure Load Balancer.
Ability to design, deploy, and manage scalable, secure, highly available Azure cloud infrastructure.
Experience establishing and governing multi-subscription Azure environments using Management Groups, Azure Policy, and Azure Landing Zones.
Knowledge of cloud cost management, FinOps, budgeting, tagging strategies, and resource optimization using Azure Cost Management.
Proficiency in scripting with languages such as Python, PowerShell, Bash, or JavaScript/NodeJS for automation and cloud operations.
Experience with Infrastructure as Code tools and methods, including ARM Templates, Ansible, and GitOps.
Proficiency with monitoring, logging, and observability tools including Azure Monitor, Log Analytics, Application Insights, Azure Activity Log, and third-party tools such as Prometheus, Grafana, and New Relic.
Experience optimizing Azure resource and service performance, availability, and resiliency.
Understanding of Azure security best practices and compliance frameworks including HIPAA, FedRAMP, NIST, GDPR, and PCI DSS.
Experience implementing encryption, key management, secrets management, and identity solutions using Azure Key Vault, customer-managed keys, and Microsoft Entra ID.
Knowledge of Azure database services including Azure SQL Database, Azure SQL Managed Instance, Azure Cosmos DB, Azure Database for PostgreSQL, and Azure Database for MySQL.
Experience with database performance tuning, backup and recovery, high availability, and disaster recovery strategies.
Familiarity with CI/CD tools and practices including Azure DevOps Pipelines, GitHub Actions, Jenkins, and GitLab CI.
Experience with containerization and orchestration technologies such as Docker, Azure Kubernetes Service (AKS), Azure Container Apps, and Kubernetes.
Strong analytical and problem-solving skills, including troubleshooting complex cloud issues and explaining technical concepts to non-technical stakeholders.
Ability to prioritize tasks, manage competing priorities and time effectively, and meet project deadlines.
Strong attention to detail to support system stability, security, operational excellence, and data integrity.
Ability to mentor engineers and provide technical leadership and guidance to junior engineers and team members.
Ability to lead technical projects and collaborate across cross-functional teams.
Willingness to provide on-call and emergency support and participate in maintenance and operational response when required.
Strong documentation skills for architecture, operational procedures, security controls, system configurations, processes, and procedures.
Ability to manage and contribute to multiple projects simultaneously while ensuring timely completion and high-quality deliverables.
Commitment to staying current with emerging Azure technologies, cloud-native architectures, tools, industry trends, and best practices.

Nice To Haves

Deep hands-on EDIFECS experience with Electronic Data Interchange (EDI) X.12 transaction standards and workflows, including medical claims transactions 837, 834, 835, and 277; 270/271 and 278 transactions; and 999 transactions.
Experience with Edifecs.
Advanced Azure certifications, including Microsoft Certified: DevOps Engineer Expert, Azure Administrator Associate, and Azure Security Engineer Associate.

Responsibilities

Create data-flow, cloud, transition, and high-level architecture diagrams for cloud infrastructure, applications, and systems.
Design, develop, deploy, and operate automation technologies for continuous integration and continuous delivery (CI/CD).
Manage and control cloud-service-provider permissions for hosted cloud applications, storage, and services.
Design, implement, manage, and monitor cloud architecture and hosted systems and applications for performance and compliance with VA and federal policies.
Provide customer-focused support for product lines and services, including setup, configuration, and provisioning of VA Enterprise Cloud (VAEC) environments.
Provide cloud support for systems and applications in VAEC Azure GovCloud environments, meeting Veterans Independence Program (VIP) development, release, and documentation requirements.
Apply DevOps practices and tools, including CI/CD.
Provide Cloud Security Provider documentation.
Design VAEC and cloud-hosted solutions and address cloud-readiness gaps.
Provide on-call support and participate in operational response activities when required.
Mentor engineers and provide technical leadership, including contributing to cloud architecture governance.
Lead or contribute to complex cloud modernization, migration, and transformation initiatives in collaboration with cross-functional teams.
Document architecture, operational procedures, security controls, system configurations, processes, and procedures.
Manage and contribute to multiple projects while meeting deadlines and delivering quality results.
Troubleshoot complex cloud-related issues and explain technical concepts to non-technical stakeholders.