Senior Cloud Engineer (Azure/Identity)

Who We Are. Platinum Technologies is a Northern Virginia based integrated solutions firm that specializes in PaaS, Cybersecurity & AI Platform development for the Defense and Federal Sectors. Our team solves hard problems and helps our Mission Partners achieve their goals. If you are self-motivated, possess demonstrated learning agility, and are passionate about delivering high-quality work products - we want to hear from you. We lead with technical expertise, but that is just the tip of the iceberg - the ‘Why’ matters. At Platinum, we don’t hire people to just do a job. We provide professional and leadership development to complement our self-motivated domain experts. Our teammates are dot-connecting leaders that operate in a mutually accountable environment to deliver thought leadership, expert technical analysis, and quality execution for our clients. You. Platinum Technologies is seeking a highly skilled Hybrid Multi-Cloud Engineer SME to support mission-critical Department of Defense (DoD) cloud modernization initiatives in Fort Belvoir, VA or Albuquerque, New Mexico. This position will serve as a senior technical contributor responsible for designing, engineering, implementing, and sustaining secure Microsoft Azure cloud solutions within classified enterprise environments. The successful candidate will possess deep expertise in Microsoft Azure architecture, hybrid cloud engineering, and enterprise identity management. This role requires an experienced engineer capable of translating complex mission requirements into secure, scalable cloud solutions while maintaining a hands-on engineering role throughout the solution lifecycle. The ideal candidate will have experience supporting DoD cloud initiatives, implementing hybrid identity solutions, and engineering cloud environments that align with Zero Trust principles and Department of Defense cybersecurity requirements. This role is located onsite either Albuquerque, NM or Fort Belvoir, VA Candidates must hold an active TS/SCI clearance.* Primary Responsibilities: Architect, design, engineer, and implement secure Microsoft Azure cloud solutions supporting DoD mission requirementsDesign and deploy green-field Azure environments and hybrid cloud architectures integrating on-premises infrastructure with Azure servicesDesign, implement, and maintain enterprise hybrid identity solutions utilizing Microsoft Entra ID,Microsoft Entra Connect, Active Directory, and related identity technologiesEngineer secure authentication, authorization, identity governance, and privileged access management (PAM) solutions supporting just-in-time (JIT) access, attribute- and role- based access controls (ABAC/RBAC) and similar Zero Trust principles and objectivesDesign Azure Landing Zones, governance frameworks, subscription architectures, and management group strategies following Microsoft Cloud Adoption Framework (CAF) and Azure Well-ArchitectedFramework guidanceEngineer Infrastructure as Code (IaC) solutions using Bicep, ARM Templates, Terraform, or comparable automation technologiesDesign secure Azure networking solutions utilizing Virtual Networks, ExpressRoute, VPN Gateway,Azure Firewall, Virtual WAN, and private connectivity services. Implement Azure-native monitoring, backup, disaster recovery, governance, and security capabilitiesConfigure and administer Microsoft Entra ID Governance capabilities, including Access Reviews,Entitlement Management, Lifecycle Workflows, Conditional Access, and Privileged Identity Management (PIM)Collaborate with cybersecurity, systems engineering, networking, and application development teams to deliver integrated cloud solutionsSupport Authority to Operate (ATO) activities and ensure compliance with DoD cybersecurity policies, Risk Management Framework (RMF), and applicable Security Technical Implementation Guides (STIGs)Produce architecture documentation, engineering diagrams, implementation guides, standard operating procedures, and technical documentationTroubleshoot and resolve complex cloud infrastructure, networking, identity, and security issuesEvaluate emerging Microsoft cloud technologies and recommend technical solutions supporting customer mission objectives. Required Qualifications. Bachelor's degree in computer science, information systems, engineering, or a related technical discipline and 12-15 years of prior relevant experience or a master's with 10-13 years of prior relevant experience. May possess a doctorate in a technical domain. Specific experience, education, and training may be considered in lieu of a degreeActive Top Secret/SCI Security ClearanceCurrent DoD 8570/8140 IAT Level II certificationMicrosoft Certified: Azure Solutions Architect Expert certificationMinimum of five years of experience designing and implementing Microsoft Azure enterprise cloud solutionsDemonstrated experience architecting hybrid Azure environments integrating enterprise on-premises infrastructure with Azure cloud servicesAdvanced experience with Microsoft Entra ID, Microsoft Entra Connect, Active Directory, AWS IAM, hybrid identity synchronization, federation, and enterprise identity management with enterprise Identity, Credential, and Access Management (E-ICAM) solutionsExperience implementing Microsoft Entra ID Governance capabilities, including:* Entra Conditional Access* Policy Information Points and Policy Engines* Access Reviews *Entitlement Management* Lifecycle Workflows* Identity lifecycle automationExperience implementing Azure Landing Zones and enterprise governance modelsStrong understanding of Azure networking, storage, compute, governance, and security servicesExperience with Infrastructure as Code utilizing Terraform, Azure Bicep, ARM Templates, or similar technologiesExperience with Azure CLI, PowerShell, and scripting using Python or comparable automation languagesStrong understanding of Zero Trust architecture, identity-centric security, and cloud security best practicesExcellent written and verbal communication skills. Desired Qualifications. AWS Certified Solutions Architect - Professional certificationExperience integrating Azure and AWS within hybrid multi-cloud enterprise environmentsFamiliarity with the Department of Defense Joint Warfighting Cloud Capability (JWCC) and DoD Joint Tenant cloud environmentsUnderstanding of the DoD Enterprise Cloud Strategy and cloud modernization initiativesFamiliarity with the Department of Defense Enterprise Identity, Credential, and Access Management (E-ICAM) architecture and its role in enterprise identity federation, identity governance, Zero Trust implementation, and secure access to DoD cloud environmentsExperience with Azure Arc, Azure Stack HCI, Azure Local, and hybrid cloud management technologiesExperience with Azure Kubernetes Service (AKS) and cloud-native container platformsExperience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Intune, and Microsoft PurviewExperience implementing DevSecOps pipelines using Azure DevOps and/or GitHub Enterprise. The Company is an Equal Opportunity/Affirmative Action employer. All qualified candidates will receive consideration for employment without regard to disability, protected veteran status, race, color, religious creed, national origin, citizenship, marital status, sex, sexual orientation/gender identity, age, or genetic information. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.