Senior Cloud Engineer – Microsoft Azure

TechSur Solutions • Reston, VA

21h

About The Position

TechSur Solutions is seeking a Senior Cloud Engineer with deep Microsoft Azure expertise to design, build, and operate a federal customer’s Azure cloud foundation. The role includes implementing Azure landing zones, management group and subscription hierarchies, hub-and-spoke networking, and Entra ID federation aligned with the customer’s enterprise, cloud-agnostic architecture. After the environment is built, the engineer owns its day-to-day health, including monitoring, patching, cost hygiene, and incident response.

The engineer automates infrastructure through Infrastructure-as-Code, works with customer and SAIC engineers across four cloud providers, and helps customer IT teams adopt Azure safely. The role also supports security and compliance, high availability and recovery planning, operational documentation, ATO evidence, and knowledge transfer to customer operations staff.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 9 years of experience deploying and configuring cloud environments, including significant hands-on Azure work.
• Production experience with Infrastructure-as-Code using Terraform and/or Bicep (ARM).
• Hands-on experience with Azure landing zones, VNet design, Azure Firewall, and ExpressRoute or site-to-site VPN.
• Experience administering Microsoft Entra ID, RBAC, and single sign-on federation using SAML 2.0 or OIDC.
• Experience monitoring, patching, and troubleshooting Windows and Linux workloads in Azure.
• Working knowledge of NIST SP 800-53 security controls in a federal environment.
• Ability to obtain and maintain the background investigation required by the federal customer.

Nice To Haves

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or DevOps Engineer Expert (AZ-400).
• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or HashiCorp Certified Terraform Associate.
• Experience in Azure Government or FedRAMP Moderate/High environments, including support for ATO packages.
• Working knowledge of AWS, Google Cloud, or Oracle Cloud Infrastructure.
• Experience with Azure DevOps or GitHub Actions pipelines, Ansible, and policy-as-code.
• Experience integrating Azure tooling with ServiceNow ITSM and CMDB.
• Prior support of a civilian federal agency.

Responsibilities

• Design and deploy Azure landing zones using the Cloud Adoption Framework, including management groups, subscriptions, and hub-and-spoke or Virtual WAN networking integrated with the customer’s WAN and DNS.
• Build and maintain Infrastructure-as-Code using Terraform or Bicep and GitOps workflows for production, integration, development, and sandbox environments.
• Configure Microsoft Entra ID, RBAC, and federation with the customer’s enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles.
• Enforce security and compliance guardrails using Azure Policy, Microsoft Defender for Cloud, and Microsoft Sentinel against NIST SP 800-53 Rev 5 and customer security standards.
• Apply the enterprise tagging strategy for asset management, cost tracking, and chargeback or showback using Azure Cost Management and Advisor.
• Monitor environments with Azure Monitor and enterprise tools such as Datadog, Splunk, and Dynatrace; integrate events, incidents, and changes with ServiceNow.
• Perform patching with Azure Update Manager, routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support.
• Design and test high availability, Azure Backup, and Azure Site Recovery for cloud workloads.
• Write runbooks and SOPs, provide ATO evidence, and transfer knowledge to customer operations staff.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior