Azure Cloud Engineer

Ampcus, Inc; Mechanicsville (VA); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Ampcus, Inc. is seeking an Azure Cloud Engineer in Mechanicsville, VA with remote options to support tolling applications and Azure services. You will help with cloud engineering, application support, and rotational help-desk tasks within the Tolling group.

Responsibilities include managing API Gateways, AVD, Application Insights, and Office 365, while ensuring security, IAM controls, cost governance, and adherence to government policies. Strong scripting and collaboration are essential.

Qualifications

• Bachelor's degree in computer science, information systems, or equivalent.
• 3+ years of experience with Microsoft Azure services.
• Experience supporting tolling applications, infrastructure, and cloud workloads.
• Strong communication and documentation skills.
• Experience in Windows environments and SSO/Entra ID.

Responsibilities

• Maintain and implement cloud resources in the Tolling Azure environment.
• Ensure compliance with security, IAM, network controls, and cost governance.
• Maintain infrastructure documentation, naming conventions, tagging standards, and governance artifacts.
• Assist with access reviews, role assignments, and least-privilege IAM evaluations.
• Monitor Azure services and application workloads for uptime and performance.
• Troubleshoot connectivity, security, and application performance issues.
• Define change requests, implementation plans, and rollback procedures.
• Understand end-to-end data flows across tolling systems and data movement.

Skills

Azure administration

Windows Server

PowerShell/Python

Office 365

Power Apps

Azure Virtual Desktops

Entra ID

SecretServer

Terraform

Azure DevOps

PCI compliance

Cost optimization

Networking basics

Education

Bachelor's degree in CS/IS

Tools

Rubrik

Log Analytics

Azure Monitor

Office 365 Admin

SecretServer

Job description

Job Title:

Azure Cloud Engineer

Location(s):

Mechanicsville, VA
(Remote)

Job Summary

The Tolling Engineering and Operations team is seeking an Azure Cloud Engineer. The role includes cloud engineering, application support, and rotational help-desk support within the Tolling group. Responsibilities include supporting API Gateways, Azure Virtual Desktop (AVD), Application Insights, and Office 365.

Primary Responsibilities

Cloud Operations and Engineering

• Maintain and implement cloud resources in the Tolling Azure environment.
• Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.
• Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.
• Assist with access reviews, role assignments, and least-privilege IAM evaluations.
• Manage vendor-required updates and ensure compatibility.
• Implement fault-tolerant and highly available Azure solutions.

Monitoring, Troubleshooting, and Diagnostics

• Monitor Azure services and application workloads to ensure uptime and availability.
• Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.
• Perform diagnostic deep-dives using logs, metrics, traces, Azure Monitor, and Log Analytics.
• Analyze and tune system/application performance.

Operational Support

• Participate in daily/weekly operational cycles, including pattern monitoring, incident reviews, and maintenance readiness checks.
• Triage production issues, ensure timely resolution, and document root-cause findings.
• Execute and support off-hours work as needed.
• Define change requests, detailed implementation plans, and rollback procedures.

Technical Development and Compliance

• Understand end-to-end data flows across tolling systems, roadway data, financial transactions, and reporting tools.
• Support optimization of integrations and data movement.
• Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns.
• Manage Key Vaults, passwords, certificates, and secure credential storage.

Collaboration and Communication

• Work directly with architects, engineers, managers, and cross-functional teams to use Azure services effectively.
• Provide best-practice guidance related to SaaS, PaaS, and IaaS.
• Communicate clearly in written and verbal form with internal and external stakeholders.
• Support multiple concurrent projects of complex technical scope.

Qualifications

• Minimum 3 years of experience with Microsoft Azure services.
• Minimum 3 years of experience supporting VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads, including hands-on diagnostic work with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.
• Bachelor's degree in computer science, information systems, or equivalent experience.
• Demonstrated ability to communicate requirements and design concepts clearly.
• Experience working in Windows environments.
• Experience implementing Rubrik backup and recovery for Azure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DR validation.
• Experience with Office 365 services and administering Single Sign-On (SSO), including Entra ID.
• Experience administering SecretServer privileged access vaults, including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.
• Solid scripting experience with PowerShell and/or Python.
• Ability to create network and system topology documentation.
• Experience with Azure Virtual Desktops.
• Experience with Office 365 services and Power Apps.
• Azure certification preferred.

Special Instructions

• Position requires a fingerprint-based background check.
• Continued education is expected at the contractor's own expense to stay current with required technologies.

Skills

• Microsoft Azure administration/engineering
  Required
  3
  Years
• Microsoft Windows environments (2019+)
  Required
  5
  Years
• Server infrastructure, protocols, firewalls, certificates, load balancers
  Required
  2
  Years
• Support of VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads
  Required
  3
  Years
• Networking, server administration (Windows/Linux), databases, cloud environments
  Required
  2
  Years
• Implementing Rubrik backup & recovery for Azure IaaS/PaaS
  Required
  2
  Years
• Scripting with PowerShell/Python
  Required
  2
  Years
• Continuous integration tools (Azure DevOps, Jenkins, Git, TFS)
  Desired
  1
  Years
• Administration of SecretServer privileged access vaults.
  Required
  2
  Years
• Office 365 and Power Apps platforms
  Required
  1
  Year
• Infrastructure as Code (Terraform or equivalent)
  Desired
  1
  Year
• Containerization (Docker, Kubernetes)
  Desired
  1
  Year
• Experience with PCI or similar compliance frameworks
  Required
  1
  Year
• Key Vault, secrets and certificate management
  Desired
  1
  Year
• Single Sign On and identity administration (Entra ID)
  Required
  1
  Year
• Azure certification (AZ 104, AZ 305, or similar)
  Desired
  1
  Year
• Experience with enterprise governance models
  Required
  1
  Year
• Experience analyzing cloud cost trends and delivering cost optimization recommendations
  Desired
  1
  Year
• Azure Virtual Desktops
  Desired
  1
  Year

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.