Azure Cloud Engineer

Astyra Corporation; Mechanicsville (VA); Remote; USD 110,000 - 155,000; Full time

Job summary

Astyra Corporation is seeking an Azure Cloud Engineer to join the Eng and Ops team. The role includes engineering application support and rotational help desk support within the Tolling group, managing Azure resources such as API Gateways, AVD, App Insights, and Office 365.

The position requires minimum 3 years of Azure experience, Windows environment familiarity, and strong scripting with PowerShell or Python; Office 365 and Entra ID experience is essential.

Qualifications

• Azure experience: minimum 3 years with Microsoft Azure services.
• 3+ years supporting tolling apps, infrastructure and cloud workloads with diagnostics.
• Bachelor's degree in CS, information systems, or equivalent.
• Clear communication of requirements and design concepts.
• Experience in Windows environments.
• Rubrik backup/recovery for Azure IaaS/PaaS including policy/SNAPSHOT/DR.
• Experience with Office 365 services and administering Entra ID (SSO).
• Administer Secret Server privileged access vaults and integrations with Azure.
• Scripting skills in PowerShell and Python.
• Ability to create network/system topology documentation.
• Experience with Azure Virtual Desktops.
• Office 365 and Power Apps experience.
• Azure certification preferred.

Responsibilities

• Maintain and implement cloud resources in Azure.
• Ensure compliance with government security, IAM, and cost controls.
• Improve infrastructure docs, naming, tagging, and governance artifacts.
• Assist with access reviews and least-privilege IAM.
• Manage vendor updates and compatibility.
• Implement fault-tolerant and highly available Azure solutions.
• Monitor services and workloads to ensure uptime.
• Troubleshoot connectivity, security, and performance issues.
• Perform diagnostics with Azure Monitor and Log Analytics.
• Participate in daily/weekly operations, incident reviews, and maintenance readiness.
• Document root cause findings and support off-hours work.
• Define change requests and rollback procedures.
• Understand data flows across tolling systems and optimize data movement.
• Ensure PCI or regulatory compliance in logging patterns.

Skills

Azure administration

Windows environments

Networking

PowerShell

Python

Office 365

Power Apps

Azure DevOps

Terraform

Docker

Kubernetes

PCI compliance

Secret Server

Entra ID

Azure Virtual Desktops

Education

Bachelor's degree in computer science, information systems, or equivalent

Tools

Rubrik backup

Office 365

Entra ID

Secret Server

Azure Monitor

Log Analytics

Azure Virtual Desktops

Job description

Azure Cloud Engineer

*Remote – Local to Richmond, VA only, please

Description

Tolling is seeking an Azure Cloud Engineer to join the Eng and Ops team. The role includes engineering application support and rotational help desk support within the Tolling group. Includes API Gateways, AVD, App Insights, and Office 365.

Responsibilities

Cloud Operations and Engineering

• Maintain and implement cloud resources in the Azure environment.
• Ensure compliance with applicable government policies regarding security, IAM, network controls, and cost governance.
• Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.
• Assist with access reviews, role assignments, and least privilege IAM evaluations.
• Manage vendor-required updates and ensure compatibility.
• Implement fault-tolerant and highly available Azure solutions.

Monitoring, Troubleshooting and Diagnostics

• Monitor Azure services and application workloads to ensure uptime and availability.
• Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.
• Perform diagnostic deep dives using logs, metrics, traces, Azure Monitor, and Log Analytics.
• Analyze and tune system/application performance.

Operational Support

• Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.
• Triage production issues, ensure timely resolution, and document root cause findings.
• Execute and support off-hours work as needed.
• Define change requests, detailed implementation plans, and rollback procedures.

Technical Development and Compliance

• Understand end-to-end data flows across tolling systems, roadways, data, financial transactions, and reporting tools.
• Support optimization of integrations and data movement.
• Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns.
• Manage key vaults, passwords, certificates, and secure credential storage.

Collaboration and Communication

• Work directly with architects, engineers, managers, and cross-functional teams to use Azure services effectively.
• Provide best-practice guidance related to SaaS, PaaS, and IaaS.
• Communicate clearly in written and verbal form with internal and external stakeholders.
• Support multiple concurrent projects of complex technical scope.

Qualification

• Minimum 3 years of experience with Microsoft Azure services.
• Minimum 3 years’ experience supporting tolling applications, infrastructure, and cloud workloads, including hands‑on diagnostic work with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.
• Bachelor’s degree in computer science, information systems, or equivalent experience.
• Demonstrated ability to communicate requirements and design concepts clearly.
• Experience working in Windows environments.
• Implementing Rubrik backup recovery for Azure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DR validation.
• Experience with Office 365 services and administering Single Sign‑On (SSO), including Entra ID.
• Experience administering Secret Server privileged access vaults, including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.
• Solid scripting experience with PowerShell and/or Python.
• Ability to create network and system topology documentation.
• Experience with Azure Virtual Desktops.
• Office 365 services and Power Apps.
• Azure certification preferred.

Special Instructions

• Position requires a fingerprint‑based background check.
• Continued education is expected at the contractor’s own expense to stay current with relevant technologies.

Required Skills/Knowledge/Experience:

• Microsoft Azure administration/engineering, Required 3 Years
• Microsoft Windows environments (2019+), Required 5 Years
• Server infrastructure, protocols, firewalls, certificates, load balancers, Required 2 Years
• Support of tolling applications, infrastructure, and cloud workloads, Required 3 Years
• Networking, server administration (Windows/Linux), databases, cloud environments, Required 2 Years
• Implementing Rubrik backup & recovery for Azure IaaS/PaaS, Required 2 Years
• Scripting with PowerShell/Python, Required 2 Years
• Continuous integration tools (Azure DevOps, Jenkins, Git, TFS), Desired 1 Year
• Administration of Secret Server privileged access vaults, Required 2 Years
• Office 365 and Power Apps platforms, Required 1 Year
• Infrastructure as Code (Terraform or equivalent), Desired 1 Year
• Containerization (Docker, Kubernetes), Desired 1 Year
• Experience with PCI or similar compliance frameworks, Required 1 Year
• Key Vault, secrets and certificate management, Desired 1 Year
• Single Sign-On and identity administration (Entra ID), Required 1 Year
• Azure certification (AZ-104, AZ-305, or similar), Desired 1 Year
• Experience with enterprise governance models, Required 1 Year
• Experience analyzing cloud cost trends and delivering cost optimization recommendations, Desired 1 Year
• Azure Virtual Desktops, Desired 1 Year

Proper email communication will only be done to and from @astyra.com email addresses. Please ensure you are communicating with approved Astyra recruiters by checking this point when receiving offers and messages from us.Please ensure you are communicating within these guidelines and proper channels for the quickest possible interview consideration!

#AC