Senior Azure Infrastructure Cloud Engineer – Cleared (Polygraph)
TrueTandem · Bethesda, MD · 1 mo ago
On-siteEngineeringFull-time
Role and Responsibilities
- Design, develop, and maintain Infrastructure as Code (IaC) solutions using Terraform to deliver secure, scalable, and repeatable Azure infrastructure deployments
- Build, enhance, and support automated CI/CD pipelines within Azure DevOps to streamline infrastructure provisioning, application delivery, and operational deployments
- Architect, deploy, and sustain Azure infrastructure services in alignment with the Microsoft Cloud Adoption Framework (CAF), Well-Architected Framework, and organizational standards
- Implement and administer Azure governance capabilities, including Management Groups, Subscriptions, Resource Groups, Policies, and Role-Based Access Control (RBAC), to enforce security, compliance, and operational consistency
- Configure and manage Azure Key Vault to safeguard secrets, certificates, encryption keys, and application credentials
- Design, deploy, and support Azure storage solutions while implementing data protection, backup, recovery, retention, and lifecycle management strategies
- Architect and maintain enterprise networking solutions, including Virtual WAN, Virtual Networks (VNets), Network Security Groups (NSGs), private connectivity, DNS, and hybrid cloud integrations
- Implement enterprise monitoring and observability solutions using Azure Monitor, Log Analytics, Application Insights, alerts, dashboards, and automated response capabilities
- Support the migration, modernization, and optimization of applications and workloads into Azure cloud environments
- Integrate security controls and compliance requirements throughout the infrastructure lifecycle in accordance with Zero Trust principles, TIC 3.0 guidance, NIST frameworks, and federal security baselines
- Diagnose and resolve complex infrastructure, networking, identity, performance, and security issues across cloud environments to ensure platform reliability and operational excellence
- Collaborate with architects, developers, cybersecurity teams, and stakeholders to design, implement, and continuously improve secure, resilient, and mission-focused cloud solutions
- Contribute to the development and maintenance of reusable infrastructure modules, engineering standards, reference architectures, and operational procedures
- Participate in platform sustainment activities, capacity planning, incident response, problem management, and continuous service improvement initiatives
- Produce and maintain technical documentation, implementation guides, architecture diagrams, and audit artifacts to support operational, security, and compliance requirements
Required Skills
- Active TS/SCI clearance with Polygraph
- 5+ years of experience supporting Tier II Azure environments or 3+ years supporting Tier III enterprise Azure cloud infrastructure
- Deep expertise in Azure governance and platform services, including Management Groups, Subscriptions, Resource Groups, Azure Policy, RBAC, Key Vault, Storage, and networking services
- Strong understanding of Azure security, monitoring, and operational practices, including Azure Monitor, Log Analytics, Application Insights, alerts, diagnostics, and security controls
- Proficiency in PowerShell scripting and automation to streamline cloud operations, configuration management, and administrative tasks
- Knowledge of federal cybersecurity and compliance frameworks, including Zero Trust Architecture, NIST standards, TIC 3.0, and government cloud security requirements
- Proven ability to diagnose and resolve complex infrastructure, networking, identity, performance, and security issues across enterprise Azure environments
- Strong verbal and written communication skills with the ability to create technical documentation, operational procedures, and architecture artifacts for both technical and non-technical stakeholders
- Demonstrated ability to work effectively within cross-functional teams consisting of cloud engineers, architects, cybersecurity personnel, developers, and mission stakeholders
Preferred Skills
- Microsoft Azure certifications such as Azure Administrator Associate (AZ-104), Azure Security Engineer Associate (AZ-500), Azure Network Engineer Associate (AZ-700), or Azure Solutions Architect Expert (AZ-305)
- Experience supporting IC, DoD, or other classified federal cloud environments
- Knowledge of Bicep, ARM templates, or additional IaC frameworks
- Experience supporting cloud migration, modernization, and application transformation initiatives
- Familiarity with AOAI embedded features and Copilot capabilities
- Understanding of workload/application migrations and hybrid cloud strategies
- Knowledge of Microsoft licensing models and subscription management