About the role
Job Description
TechSur is seeking a Senior Cloud Engineer with deep Microsoft Azure expertise to design, build, and operate a federal customer's Azure cloud foundation. You will implement Azure landing zones, management group and subscription hierarchies, hub-and-spoke networking, and Entra ID federation that follow the customer's enterprise, cloud-agnostic architecture.
After build-out, you will own day-to-day health of the Azure environment: monitoring, patching, cost hygiene, and incident response. You will automate through Infrastructure-as-Code, work alongside customer and SAIC engineers across all four cloud providers, and help customer IT teams adopt Azure safely.
Key Responsibilities
* Design and deploy Azure landing zones using the Cloud Adoption Framework, including management groups, subscriptions, and hub-and-spoke or Virtual WAN networking integrated with the customer's WAN and DNS. * Build and maintain Infrastructure-as-Code (Terraform, Bicep) and GitOps workflows that provision consistent production, integration, development, and sandbox environments. * Configure Microsoft Entra ID, RBAC, and federation with the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles. * Enforce security and compliance guardrails with Azure Policy, Microsoft Defender for Cloud, and Microsoft Sentinel against NIST SP 800-53 Rev 5 and customer security standards. * Apply the enterprise tagging strategy for asset management, cost tracking, and chargeback/showback using Azure Cost Management and Advisor. * Monitor environments with Azure Monitor and enterprise tools such as Datadog, Splunk, and Dynatrace; integrate events, incidents, and changes with ServiceNow. * Perform patching (Azure Update Manager), routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support. * Design and test high availability, Azure Backup, and Azure Site Recovery for cloud workloads. * Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.
Qualifications
Required Qualifications
* Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field. * At least 9 years of experience deploying and configuring cloud environments, including significant hands-on Azure work. * Production experience with Infrastructure-as-Code using Terraform and/or Bicep (ARM). * Hands-on experience with Azure landing zones, VNet design, Azure Firewall, and ExpressRoute or site-to-site VPN. * Experience administering Microsoft Entra ID, RBAC, and single sign-on federation (SAML 2.0/OIDC). * Experience monitoring, patching, and troubleshooting Windows and Linux workloads in Azure. * Working knowledge of NIST SP 800-53 security controls in a federal environment. * Ability to obtain and maintain the background investigation required by the federal customer.
Preferred Qualifications
* Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or DevOps Engineer Expert (AZ-400). * Microsoft Certified: Azure Security Engineer Associate (AZ-500) or HashiCorp Certified Terraform Associate. * Experience in Azure Government or FedRAMP Moderate/High environments, including support for ATO packages. * Working knowledge of AWS, Google Cloud, or Oracle Cloud Infrastructure. * Experience with Azure DevOps or GitHub Actions pipelines, Ansible, and policy-as-code. * Experience integrating Azure tooling with ServiceNow ITSM and CMDB. * Prior support of a civilian federal agency.
Additional Information
All your information will be kept confidential according to EEO guidelines.