Azure Cloud Engineer

Mbi Llc; Mechanicsville, Northern (VA, KY); Hybride; USD 110 000 - 150 000; Plein temps

Résumé du poste

Mbi Llc seeks an experienced Azure-focused engineer to maintain tolling Azure resources, enforce Virginia security policies, and optimize cloud governance. You will analyze data flows across tolling systems, support PCI compliance, and implement scalable, fault-tolerant solutions within Windows/Azure environments.

Responsibilities include monitoring workloads, diagnosing performance issues, participating in operational cycles, and coordinating with architects and cross-functional teams to

Qualifications

• Bachelor’s degree in computer science, information systems, or equivalent experience.
• Minimum 3 years of experience with Microsoft Azure services.
• Experience supporting VDOT/E‑ZPass Virginia tolling infrastructure and cloud workloads.
• Experience with Windows environments.
• Experience implementing PCI or similar compliance frameworks.

Responsabilités

• Maintain and implement cloud resources in the Tolling Azure environment.
• Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.
• Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.
• Assist with access reviews, role assignments, and least privilege IAM evaluations.
• Manage vendor updates and ensure compatibility.
• Implement fault-tolerant and highly available Azure solutions.
• Monitor Azure services and application workloads to ensure uptime and availability.
• Troubleshoot connectivity, access, security, performance, and service degradation.
• Perform diagnostic deep-dives using logs, metrics, traces, and Azure Monitor.
• Analyze and tune system/application performance.
• Participate in daily/weekly operational cycles including incident reviews and maintenance readiness checks.
• Triage production issues, document root-cause findings, and support off-hours work.
• Define change requests, implementation plans, and rollback procedures.
• Understand end-to-end data flows across tolling systems and reporting tools.
• Support data integrations and movement; ensure logging compliance.

Connaissances

Server infra

Tolling systems support

Rubrik backup

Scripting (PowerShell/Python)

CI tools

Secret Server vaults

Office 365/Power Apps

Terraform

PCI/compliance

Key Vault & cert mgmt

Entra ID / SSO

Governance & cost optimization

Enterprise governance

Cloud cost trends

Formation

Bachelor’s degree in CS/IS or equivalent

Outils

Rubrik

Terraform

Azure DevOps/Jenkins/Git/TFS

Secret Server

Entra ID

Description du poste

- Maintain and implement cloud resources in the Tolling Azure environment.

- Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.

- Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.

- Assist with access reviews, role assignments, and least?privilege IAM evaluations.

- Manage vendor?required updates and ensure compatibility.

- Implement fault?tolerant and highly available Azure solutions.

Monitoring, Troubleshooting, and Diagnostics

- Monitor Azure services and application workloads to ensure uptime and availability.

- Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.

- Perform diagnostic deep?dives using logs, metrics, traces, Azure Monitor, and Log Analytics.

- Analyze and tune system/application performance.

Operational Support

- Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.

- Triage production issues, ensure timely resolution, and document root?cause findings.

- Execute and support off?hours work as needed.

- Define change requests, detailed implementation plans, and roll?back procedures.

Technical Development and Compliance

- Understand end?to?end data flows across tolling systems, roadways data, and financial transactions, and reporting tools.

- Support optimization of integrations and data movement.

- Apply PCI or other regulatory compliance requirements when evaluating system behaviour and logging patterns.

- Manage key vaults, passwords, certificates, and secure credential storage.

Collaboration and Communication

- Work directly with architects, engineers, managers, and cross?functional teams to use Azure services effectively.

- Provide best?practice guidance related to SaaS, PaaS, and IaaS.

- Communicate clearly in written and verbal form with internal and external stakeholders.

- Support multiple concurrent projects of complex technical scope.

Qualifications

- Minimum 3 years of experience with Microsoft Azure services.

- Minimum 3 years experience supporting VDOT /E?ZPass Virginia tolling applications, infrastructure, and cloud workloads, including hands-on diagnostic work with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.

- Bachelor’s degree in computer science, information systems, or equivalent experience.

- Demonstrated ability to communicate requirements and design concepts clearly.

- Experience working in Windows environments.

- Implementing Rubrik backup & recovery for Azure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DR validation.

- Experience with Office 365 services and administering Single Sign?On (SSO) including Entra ID.

- Experience administering Secret Server privileged access vaults including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.

- Solid scripting experience (PowerShell and/or Python).

- Ability to create network and system topology documentation.

- Experience with Azure Virtual Desktops.

- Office 365 services and Power Apps.

Special Instructions

- Position requires a fingerprint?based background check.

- Continued education is expected at the contractor’s own expense to stay current with VDOT technologies.

Fill the skill matrix below:

Skill

Amount

Candidate's No. of years of experience

Required

3

Required

5

Server infrastructure, protocols, firewalls, certificates, load balancers

Required

2

Support of VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads

Required

3

Required

2

Implementing Rubrik backup & recovery for Azure IaaS/PaaS

Required

2

Scripting with PowerShell/Python

Required

2

Continuous integration tools (Azure DevOps, Jenkins, Git, TFS)

1

Administration of Secret Server privileged access vaults.

Required

2

Office 365 and Power Apps platforms

Required

1

Infrastructure as Code (Terraform or equivalent)

1

1

Experience with PCI or similar compliance frameworks

Required

1

Key Vault, secrets and certificate management

1

Single Sign On and identity administration (Entra ID)

Required

1

1

Experience with enterprise governance models

Required

1

Experience analyzing cloud cost trends and delivering cost optimization recommendations

1

1