Azure Cloud Engineer

Omniscius Consulting; Lorton (VA); On-site; USD 120,000 - 155,000; Full time

Job summary

Omniscius Consulting seeks an experienced Azure Cloud Engineer to support secure, mission-critical Microsoft Azure environments in Lorton, VA. You will deploy resources, automate infrastructure, and manage secure enclave systems using IaC, PowerShell, and Azure DevOps.

The role emphasizes CI/CD, IAM with least-privilege access, and image rotation for AVD while collaborating with security and ops teams to maintain compliance and reliability.

Qualifications

• Active Top Secret/SCI clearance or higher.
• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent experience.
• Minimum 5 years of experience in cloud administration, engineering, or development with a focus on Microsoft Azure.
• Strong hands-on experience deploying and managing Azure resources.
• Experience supporting secure enclave environments and complying with security requirements.
• Strong knowledge of Azure services including Azure Virtual Desktop (AVD).
• Hands-on IaC experience with Terraform, Bicep, ARM Templates, and Azure DevOps.
• Experience automating Azure infrastructure deployment through code and CI/CD pipelines.
• Strong proficiency with PowerShell and infrastructure automation.
• Identity and Access Management (IAM) and least-privilege implementation knowledge.

Responsibilities

• Deploy Azure resources (VMs, Key Vaults, networking, storage) via Azure DevOps pipelines.
• Implement, manage, and troubleshoot Azure DevOps CI/CD pipelines.
• Develop and maintain cloud infrastructure using IaC (Terraform, Bicep, ARM templates).
• Review, refine, test, and troubleshoot IaC deployments.
• Automate deployment, configuration, and management of Azure infrastructure.
• Monitor Azure infrastructure and address performance, availability, and security issues.
• Design and maintain secure enclave environments within Azure.
• Manage IAM policies and enforce least-privilege access.
• Build, maintain, and automate AVD images and image rotation.
• Administer Windows services: AD DS, AD CS, Group Policy.
• Support secure account provisioning and certificate management.
• Develop automation using PowerShell, YAML, JSON, Bicep.
• Collaborate with engineering, cybersecurity, development, and operations teams.
• Troubleshoot complex Azure and Windows infra issues and provide escalation support.
• Create technical docs covering configurations, procedures, automation, and troubleshooting.

Skills

Azure DevOps

IaC

PowerShell

Active Directory

IAM

YAML

JSON

Education

Bachelor's degree in Computer Science, Information Technology

Tools

Terraform

Bicep

ARM Templates

DSC

Packer

Job description

Our client is seeking an experienced Azure Cloud Engineer to support secure, mission-critical Microsoft Azure environments in Lorton, Virginia.

The Azure Cloud Engineer will be responsible for deploying, automating, maintaining, and troubleshooting Azure infrastructure within secure enclave environments. This position requires strong hands-on experience with Azure DevOps, Infrastructure as Code (IaC), Azure Virtual Desktop (AVD), PowerShell, Active Directory, and cloud automation.

The ideal candidate is an automation-focused Azure engineer who can build and maintain secure cloud environments while supporting infrastructure modernization, CI/CD pipelines, identity and access management, and Windows enterprise services.

Key Responsibilities

• Deploy Azure resources, including Azure Virtual Machines, Key Vaults, networking, storage, and other core Azure services, using Azure DevOps pipelines.

• Implement, manage, and troubleshoot Azure DevOps CI/CD pipelines.

• Develop and maintain cloud infrastructure using Infrastructure as Code (IaC) technologies such as Terraform, Bicep, and ARM templates.

• Review, refine, test, and troubleshoot new and existing IaC deployments.

• Automate the deployment, configuration, and management of Azure infrastructure.

• Monitor Azure infrastructure and proactively address performance, availability, capacity, and security issues.

• Design, implement, and maintain secure enclave environments within Microsoft Azure.

• Ensure the stability, performance, availability, and security of Azure enclave systems.

• Manage Identity and Access Management (IAM) policies and enforce least-privilege access across cloud environments.

• Build, maintain, and automate Azure Virtual Desktop (AVD) images and image rotation.

• Administer and maintain Windows infrastructure services, including:

  • Active Directory Domain Services (AD DS)

  • Active Directory Certificate Services (AD CS)

  • Group Policy

• Support secure account provisioning, certificate management, policy enforcement, and troubleshooting of domain-related issues.

• Assist customers with installing and deploying software to baseline desktop environments using an automation-first approach, including technologies such as DSC and Packer.

• Develop automation using PowerShell, YAML, JSON, Bicep, and related scripting/configuration technologies.

• Collaborate with engineering, cybersecurity, development, and operations teams to design and enhance cloud solutions.

• Troubleshoot complex Azure and Windows infrastructure issues and provide escalation support when required.

• Develop and maintain technical documentation covering configurations, procedures, automation, and troubleshooting processes.

Required Qualifications

• Active Top Secret/SCI (TS/SCI) clearance or higher.

• Bachelor's degree in Computer Science, Information Technology, or a related technical discipline, or equivalent professional experience.

• Minimum 5 years of experience in cloud administration, engineering, or development, with a focus on Microsoft Azure.

• Strong hands-on experience deploying and managing Azure resources.

• Experience supporting secure enclave environments and working with applicable security and compliance requirements.

• Strong knowledge of Azure services, including Azure Virtual Desktop (AVD).

• Hands-on experience developing and maintaining Infrastructure as Code using technologies such as:

  • Terraform

  • Bicep

  • ARM Templates

  • Azure DevOps

• Strong experience automating Azure infrastructure deployment through code and CI/CD pipelines.

• Strong proficiency with PowerShell and infrastructure automation.

• Working knowledge of YAML, JSON, and Bicep.

• Experience administering Windows infrastructure services, including Active Directory, Certificate Services, and Group Policy.

• Experience with Identity and Access Management and implementation of least-privilege principles.

• Ability to troubleshoot complex Azure infrastructure and automation issues.

Preferred Qualifications

• Microsoft Azure certifications such as:

  • AZ-104 – Microsoft Azure Administrator

  • AZ-305 – Designing Microsoft Azure Infrastructure Solutions

  • Other relevant Microsoft Azure certifications

• Experience with Azure DevOps in enterprise or government environments.

• Experience with Azure Virtual Desktop image creation, management, and automated image rotation.

• Experience with DSC and/or Packer.

• Experience supporting cloud environments subject to federal or DoD security requirements.

• Experience developing reusable IaC modules, templates, and deployment pipelines.

Technical Skills

• Microsoft Azure

• Azure DevOps

• Azure Virtual Desktop (AVD)

• Terraform

• Bicep

• ARM Templates

• Infrastructure as Code (IaC)

• CI/CD Pipelines

• PowerShell

• YAML / JSON

• Active Directory Domain Services (AD DS)

• Active Directory Certificate Services (AD CS)

• Group Policy

• Identity & Access Management (IAM)

• Azure Key Vault

• Azure Virtual Machines

• DSC

• Packer

• Windows Server

• Cloud Automation

• Secure Cloud Environments

Additional Requirements

• Must reside within driving distance of Lorton, VA or be willing to relocate.

• Must be willing to work onsite.

• Must be willing and able to travel up to 10%.

• Must possess an active TS/SCI clearance or higher.

• Pursuant to the requirements of the government contract, this position requires U.S. citizenship.