Azure Cloud Engineer

Oorwin AI; Mechanicsville (PA); On-site; USD 110,000 - 150,000; Full time

Job summary

Oorwin AI is seeking an experienced Azure operations engineer to maintain and optimize cloud resources in the Azure environment. The role focuses on security, IAM, cost governance, and high availability for tolling applications and data flows.

You will collaborate with architects and cross-functional teams to implement scalable Azure solutions, manage backups and vaults, and support ongoing PCI-compliant operations. A background supporting tolling systems is preferred.

Qualifications

• Bachelor's degree in computer science, information systems, or equivalent experience.
• Minimum 3 years of experience with Microsoft Azure services.
• Experience supporting VDOT / E‑ZPass Virginia tolling applications, infrastructure, and cloud workloads.
• Demonstrated ability to communicate requirements and design concepts clearly.
• Experience with Windows environments.
• Experience with Azure backup & recovery (Rubrik).
• Experience with Office 365 services and SSO (Entra ID).
• Experience administering SecretServer vaults including credential rotation and vault integration.
• Scripting experience with PowerShell and/or Python.
• Azure Virtual Desktops experience.

Responsibilities

• Maintain and implement cloud resources in the Azure environment.
• Ensure compliance with Virginia tolling policies regarding security, IAM, network controls, and cost governance.
• Maintain and improve infrastructure documentation, naming conventions, tagging standards, and governance artifacts.
• Assist with access reviews, role assignments, and least-privilege IAM evaluations.
• Manage vendor updates and compatibility.
• Implement fault-tolerant and highly available Azure solutions.
• Monitor Azure services and troubleshoot connectivity, security, and performance issues.
• Perform diagnostic dives using logs, metrics, and Azure Monitor/Log Analytics.
• Participate in daily/weekly operational cycles and incident reviews.
• Define change requests, implementation plans, and rollback procedures.
• Understand end-to-end data flows across tolling systems and data movement.
• Apply PCI or other regulatory compliance requirements in logging patterns.
• Collaborate with architects and engineers to use Azure services effectively.

Skills

Azure administration

Windows Server 2019+

Network & security

PowerShell/Python scripting

Rubrik backup & recovery

Office 365/Power Apps

Entra ID/SSO

Terraform/IaC

Docker/Kubernetes

PCI compliance

Education

Bachelor's degree in CS/IS

Tools

Rubrik

SecretServer

Entra ID

Job description

Engagement Type

Contract

Primary Responsibilities

Cloud Operations and Engineering

• Maintain and implement cloud resources in theTolling Azure environment.
• Ensure compliance with Virginia governmentpolicies regarding security, IAM, network controls, and cost governance.
• Maintain and improve infrastructuredocumentation, naming conventions, tagging standards, and cloud governanceartifacts.
• Assist with access reviews, role assignments,and least‑privilege IAM evaluations.
• Manage vendor‑required updates and ensurecompatibility.
• Implement fault‑tolerant and highly available Azure solutions.

Monitoring, Troubleshooting, and Diagnostics

• Monitor Azure services and application workloadsto ensure uptime and availability.
• Troubleshoot issues related to connectivity,access, security, application performance, and service degradation.
• Perform diagnostic deep‑dives using logs,metrics, traces, Azure Monitor, and Log Analytics.
• Analyze and tune system/application performance.

Operational Support

• Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.
• Triage production issues, ensure timelyresolution, and document root‑cause findings.
• Execute and support off‑hours work as needed.
• Define change requests, detailed implementationplans, and roll‑back procedures.

Technical Development and Compliance

• Understand end‑to‑end data flows across tollingsystems, roadways data, financial transactions, and reporting tools.
• Support optimization of integrations and datamovement.
• Apply PCI or other regulatory compliancerequirements when evaluating system behavior and logging patterns.
• Manage key vaults, passwords, certificates, andsecure credential storage.

Collaboration and Communication

• Work directly with architects, engineers,managers, and cross‑functional teams to use Azure services effectively.
• Provide best‑practice guidance related to SaaS,PaaS, and IaaS.
• Communicate clearly in written and verbal formwith internal and external stakeholders.
• Support multiple concurrent projects of complextechnical scope.

Qualifications

• Minimum 3 years of experience with MicrosoftAzure services.
• Minimum 3 years experience supporting VDOT /E‑ZPass Virginia tolling applications, infrastructure, and cloud workloads, including hands‑on diagnostic work with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.
• Bachelor’s degree in computer science,information systems, or equivalent experience.
• Demonstrated ability to communicate requirementsand design concepts clearly.
• Experience working in Windows environments.
• Implementing Rubrik backup & recovery forAzure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DRvalidation.
• Experience with Office 365 services andadministering Single Sign‑On (SSO) including Entra ID.
• Experience administering SecretServer privileged access vaults including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.
• Solid scripting experience (PowerShell and/orPython).
• Ability to create network and system topologydocumentation.
• Experience with Azure Virtual Desktops.
• Office 365 services and Power Apps.
• Azure certification (preferred).

Special Instructions

• Position requires a fingerprint‑based backgroundcheck.
• Continued education is expected at the contractor’s own expense to stay current with VDOT technologies.

Required/Desired Skills

• Microsoft Azure administration/engineering Required 3.0 Years
• Microsoft Windows environments (2019+) Required 5.0 Years
• Server infrastructure, protocols, firewalls, certificates, load balancers Required 2.0 Years
• Support of VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads Required 3.0 Years
• Networking, server administration (Windows/Linux), databases, cloud environments Required 2.0 Years
• Implementing Rubrik backup & recovery for Azure IaaS/PaaS Required 2.0 Years
• Scripting with PowerShell/Python Required 2.0 Years
• Continuous integration tools (Azure DevOps, Jenkins, Git, TFS) Desired 1.0 Years
• Administration of SecretServer privileged access vaults. Required 2.0 Years
• Office 365 and Power Apps platforms Required 1.0 Years
• Infrastructure as Code (Terraform or equivalent) Desired 1.0 Years
• Containerization (Docker, Kubernetes) Desired 1.0 Years
• Experience with PCI or similar compliance frameworks Required 1.0 Years
• Key Vault, secrets and certificate management Desired 1.0 Years
• Single Sign On and identity administration (Entra ID) Required 1.0 Years
• Azure certification (AZ 104, AZ 305, or similar) Desired 1.0 Years
• Experience analyzing cloud cost trends and delivering cost optimization recommendations Desired 1.0 Years
• Azure Virtual Desktops Desired 1.0 Years

Skills :

Microsoft Azure administration/engineering,Microsoft Windows environments (2019+),Server infrastructure,protocols, firewalls, certificates, load balancers,Support of VDOT / E-ZPass Virginia tolling applications,infrastructure,and cloud workloads,Networking,server administration (Windows/Linux),databases,cloud environments,Implementing Rubrik backup & recovery for Azure IaaS/PaaS,Scripting with PowerShell/Python,Administration of SecretServer privileged access vaults.,Office 365 and Power Apps platforms,Experience with PCI or similar compliance frameworks,Single Sign On and identity administration (Entra ID),Experience with enterprise governance models