Senior Cloud Engineer - Microsoft Azure

About the role

TechSur is seeking a Senior Cloud Engineer with deep Microsoft Azure expertise to design, build, and operate a federal customer's Azure cloud foundation. You will implement Azure landing zones, management group and subscription hierarchies, hub-and-spoke networking, and Entra ID federation that follow the customer's enterprise, cloud-agnostic architecture.

After build-out, you will own day-to-day health of the Azure environment: monitoring, patching, cost hygiene, and incident response. You will automate through Infrastructure-as-Code, work alongside customer and SAIC engineers across all four cloud providers, and help customer IT teams adopt Azure safely.

Key Responsibilities

• Design and deploy Azure landing zones using the Cloud Adoption Framework, including management groups, subscriptions, and hub-and-spoke or Virtual WAN networking integrated with the customer's WAN and DNS.
• Build and maintain Infrastructure-as-Code (Terraform, Bicep) and GitOps workflows that provision consistent production, integration, development, and sandbox environments.
• Configure Microsoft Entra ID, RBAC, and federation with the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles.
• Enforce security and compliance guardrails with Azure Policy, Microsoft Defender for Cloud, and Microsoft Sentinel against NIST SP 800-53 Rev 5 and customer security standards.
• Apply the enterprise tagging strategy for asset management, cost tracking, and chargeback/showback using Azure Cost Management and Advisor.
• Monitor environments with Azure Monitor and enterprise tools such as Datadog, Splunk, and Dynatrace; integrate events, incidents, and changes with ServiceNow.
• Perform patching (Azure Update Manager), routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support.
• Design and test high availability, Azure Backup, and Azure Site Recovery for cloud workloads.
• Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 9 years of experience deploying and configuring cloud environments, including significant hands-on Azure work.
• Production experience with Infrastructure-as-Code using Terraform and/or Bicep (ARM).
• Hands-on experience with Azure landing zones, VNet design, Azure Firewall, and ExpressRoute or site-to-site VPN.
• Experience administering Microsoft Entra ID, RBAC, and single sign-on federation (SAML 2.0/OIDC).
• Experience monitoring, patching, and troubleshooting Windows and Linux workloads in Azure.
• Working knowledge of NIST SP 800-53 security controls in a federal environment.
• Ability to obtain and maintain the background investigation required by the federal customer.

Preferred Qualifications

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or DevOps Engineer Expert (AZ-400).
• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or HashiCorp Certified Terraform Associate.
• Experience in Azure Government or FedRAMP Moderate/High environments, including support for ATO packages.
• Working knowledge of AWS, Google Cloud, or Oracle Cloud Infrastructure.
• Experience with Azure DevOps or GitHub Actions pipelines, Ansible, and policy-as-code.
• Experience integrating Azure tooling with ServiceNow ITSM and CMDB.
• Prior support of a civilian federal agency.

Additional Information

All your information will be kept confidential according to EEO guidelines.