Senior Systems Engineer (Azure & On-Premises Infrastructure)
About The Position
Capstone IT is helping its client hire a Senior Systems Engineer to design, deploy, integrate, and support secure Microsoft Azure and on-premises infrastructure for mission-critical systems. This hands-on engineering role builds secure, scalable, and highly available environments and maintains enterprise identity, networking, and security infrastructure across development, testing, staging, and production environments. The engineer will troubleshoot complex issues and support systems subject to government and defense security requirements. The position centers on secure infrastructure deployment, hybrid identity and connectivity, security engineering, and operational continuity. The engineer will work across Azure cloud and traditional on-premises environments, provide Tier III support, and contribute to system implementation, testing, documentation, and disaster recovery. The role is hybrid in McLean, Virginia, and is offered as contract or direct hire. International travel is required. The employer cannot sponsor this role or work with third parties.
Requirements
- At least 8 years of professional experience in systems, infrastructure, or cloud engineering.
- At least 5 years of hands-on Microsoft Azure engineering experience.
- Strong experience supporting hybrid cloud and on-premises infrastructure.
- Expertise with Azure, Windows Server, Active Directory, Microsoft Entra ID, and PowerShell.
- Strong understanding of networking, infrastructure security, and secure system design.
- Experience supporting government, defense, or similarly regulated environments.
- Active Secret security clearance.
- Willingness and ability to travel internationally.
Nice To Haves
- Active Top Secret clearance.
- Experience with Identity and Access Management (IAM) platforms.
- Experience with PKI, certificate lifecycle management, and HSMs.
- Experience with Azure Landing Zones and Microsoft Defender.
- Experience with Splunk and DevSecOps practices.
- Experience supporting classified or mission-critical systems.
Responsibilities
- Design, deploy, and maintain secure Microsoft Azure and on-premises environments.
- Configure and support Azure Virtual Machines, Storage, Key Vault, Monitor, Firewall, Front Door, and Application Gateway.
- Implement secure Azure Landing Zones and support cloud migrations.
- Administer Windows Server, Active Directory, DNS, DHCP, PKI, and virtualization platforms.
- Support infrastructure across development, test, staging, and production environments.
- Implement Zero Trust security principles and defense-in-depth controls.
- Configure Microsoft Entra ID, privileged access controls, and role-based access control (RBAC).
- Support PKI, certificates, smart cards, HSMs, and secure authentication.
- Perform security assessments, vulnerability remediation, system hardening, and compliance validation.
- Support incident response and security investigations.
- Integrate Active Directory, LDAP, PKI, SCCM, Splunk, SQL Server, and third-party systems.
- Troubleshoot infrastructure, authentication, connectivity, and security issues.
- Support system testing, performance optimization, and disaster recovery.
- Provide Tier III engineering support.
- Create architecture diagrams, runbooks, deployment guides, and technical documentation.
- Support system implementations and ongoing operations.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
