Senior Cloud Engineer
ECS · Fort Meade, MD · 2 days ago
Engineering$180k–$200k/yrFull-time
Responsibilities
- Design and maintain secure cloud infrastructure within an Azure environment, supporting application deployment and platform services
- Develop and maintain Infrastructure as Code (IaC) using Terraform, Azure ARM templates or Bicep
- Configure and manage Azure Firewall, ExpressRoute, VNET, VPN Gateway, VLAN segmentation, and DNSE
- Engineer and maintain enterprise identity solutions using Microsoft Entra ID, AD, SSO/Federation and ICAM solutions such as PingFederate
- Implement and maintain secure boundary controls, PKI infrastructure, and encryption solutions
- Support deployment and operation of enterprise platforms such as Elasticsearch and O365 in Azure cloud
- Create network diagrams, Standard Operating Procedures (SOP), and maintain implementation/audit-ready artifacts
- Support RMF documentation, security assessments, and compliance activities
- Provide technical guidance and mentorship to mid-level cloud engineers
- Design disaster recovery and business continuity solutions in Azure cloud
- Support cloud cost optimization initiatives
- Collaborate with stakeholders to define and implement cloud adoption strategies
Requirements
- U.S. Citizen
- Active Secret security clearance, with the ability to obtain a Top Secret security clearance with Sensitive Compartmented Information indoctrination (TS/SCI)
- Bachelor's degree in Computer Science or related field
- 12+ years of cloud experience, including at least 6 years hands-on cloud experience with Microsoft Azure cloud
- Current DoD 8140 IAT Level II (Security+ or higher)
- Hands on experience: Supporting Federal / DoW environments with compliance requirements
- Applying Zero Trust principles in cloud environment
- Expertise with cloud computing technologies across Windows and Linux, with demonstrated hands-on experience on Compute, Storage and Networking domains in Azure cloud
- Knowledge of Azure monitoring, Microsoft Sentinel including Log Analytics (KQL)
- Proficiency in scripting languages (e.g., PowerShell, Python) and Azure CLI
- Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution
- Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management)
Qualifications
- Active Top Secret security clearance
- Azure certifications (AZ-104 and/or AZ-305 and/or AZ-500 preferred)
- Experience administering ICAM solution such as PingFederate
- Experience integrating Virtru or similar encryption/data protection platforms
- Prior experience supporting ATO packages and control implementation statements
Benefits
General Description of Benefits
Required Skills
Desired Skills