Senior Cloud Engineer - Azure/Identity

Cb•Ft Belvoir, VA

13h

About The Position

SarelaTech is seeking a senior technical contributor to support mission-critical Department of Defense cloud modernization initiatives in Fort Belvoir, Virginia, or Albuquerque, New Mexico. The position focuses on designing, engineering, implementing, and sustaining secure Microsoft Azure cloud solutions in classified enterprise environments. The engineer will translate mission requirements into secure, scalable solutions and remain hands-on throughout the solution lifecycle, with emphasis on Azure architecture, hybrid cloud engineering, enterprise identity management, Zero Trust, and DoD cybersecurity requirements. The role includes developing green-field Azure environments and hybrid architectures, engineering identity and access solutions, establishing cloud governance, automating infrastructure, and delivering secure networking, monitoring, backup, disaster recovery, and security capabilities. The engineer will collaborate across technical teams, support ATO and compliance activities, produce technical documentation, resolve complex issues, and evaluate Microsoft cloud technologies. An active Top Secret clearance with eligibility for SCI access is required.

Requirements

Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical discipline with 12–15 years of relevant experience; alternatively, a master's degree with 10–13 years of relevant experience. A doctorate in a technical domain may be held. Specific experience, education, and training may be considered in lieu of a degree.
Active Top Secret security clearance with eligibility for access to Sensitive Compartmented Information (SCI).
Current DoD 8570/8140 IAT Level II certification.
Microsoft Certified: Azure Solutions Architect Expert certification.
At least five years of experience designing and implementing Microsoft Azure enterprise cloud solutions.
Demonstrated experience architecting hybrid Azure environments integrating enterprise on-premises infrastructure with Azure cloud services.
Advanced experience with Microsoft Entra ID, Microsoft Entra Connect, Active Directory, AWS IAM, hybrid identity synchronization, federation, and enterprise identity management with E-ICAM solutions.
Experience implementing Microsoft Entra ID Governance capabilities, including Conditional Access, Policy Information Points and Policy Engines, Access Reviews, Entitlement Management, Lifecycle Workflows, and identity lifecycle automation.
Experience implementing Azure Landing Zones and enterprise governance models.
Strong understanding of Azure networking, storage, compute, governance, and security services.
Experience with Infrastructure as Code using Terraform, Azure Bicep, ARM Templates, or similar technologies.
Experience with Azure CLI, PowerShell, and scripting in Python or comparable automation languages.
Strong understanding of Zero Trust architecture, identity-centric security, and cloud security best practices.
Excellent written and verbal communication skills.

Nice To Haves

AWS Certified Solutions Architect – Professional certification.
Experience integrating Azure and AWS in hybrid multi-cloud enterprise environments.
Familiarity with the DoD Joint Warfighting Cloud Capability (JWCC) and DoD Joint Tenant cloud environments.
Understanding of the DoD Enterprise Cloud Strategy and cloud modernization initiatives.
Familiarity with DoD E-ICAM architecture and its role in identity federation, identity governance, Zero Trust implementation, and secure access to DoD cloud environments.
Experience with Azure Arc, Azure Stack HCI, Azure Local, and hybrid cloud management technologies.
Experience with Azure Kubernetes Service (AKS) and cloud-native container platforms.
Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Intune, and Microsoft Purview.
Experience implementing DevSecOps pipelines using Azure DevOps and/or GitHub Enterprise.

Responsibilities

Architect, design, engineer, and implement secure Microsoft Azure cloud solutions supporting DoD mission requirements.
Design and deploy green-field Azure environments and hybrid cloud architectures that integrate on-premises infrastructure with Azure services.
Design, implement, and maintain enterprise hybrid identity solutions using Microsoft Entra ID, Microsoft Entra Connect, Active Directory, and related technologies.
Engineer authentication, authorization, identity governance, and privileged access management solutions, including JIT access and ABAC/RBAC aligned with Zero Trust principles.
Design Azure Landing Zones, governance frameworks, subscription architectures, and management group strategies using Microsoft CAF and Azure Well-Architected Framework guidance.
Develop Infrastructure as Code solutions using Bicep, ARM Templates, Terraform, or comparable automation technologies.
Design secure Azure networking using Virtual Networks, ExpressRoute, VPN Gateway, Azure Firewall, Virtual WAN, and private connectivity services.
Implement Azure-native monitoring, backup, disaster recovery, governance, and security capabilities.
Configure and administer Microsoft Entra ID Governance capabilities, including Access Reviews, Entitlement Management, Lifecycle Workflows, Conditional Access, and PIM.
Collaborate with cybersecurity, systems engineering, networking, and application development teams to deliver integrated cloud solutions.
Support ATO activities and ensure compliance with DoD cybersecurity policies, RMF, and applicable STIGs.
Produce architecture documentation, engineering diagrams, implementation guides, standard operating procedures, and technical documentation.
Troubleshoot and resolve complex cloud infrastructure, networking, identity, and security issues.
Evaluate emerging Microsoft cloud technologies and recommend solutions supporting customer mission objectives.