Azure Cloud Engineer

Cyber Shell, LLC; Washington (District of Columbia); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical benefits

Life & AD&D insurance

Disability insurance

401(k) with company match

Paid holidays and vacation

Certification exams & renewals

Tuition reimbursement

Job summary

Cyber Shell, LLC is seeking an Azure Cloud Engineer to serve as the cloud SME for a federal agency. You will own cloud architecture, governance, security, and cost optimization, designing landing zones and embedding Zero Trust principles.

You will collaborate with security, DevOps, and infrastructure teams to ensure policy compliance and effective cloud solutions on-site in Washington, DC. A Secret clearance is required or obtainable.

Qualifications

• 7+ years of IT experience
• 4+ years focused on Microsoft Azure engineering/architecture
• Active Secret security clearance (or ability to obtain one)
• U.S. citizenship required
• On-site work in Washington, DC
• Preferred: AZ-305 or AZ-104; experience with Azure Government

Responsibilities

• Own cloud architecture, governance, security, and cost optimization
• Design secure landing zones and embed Zero Trust principles
• Analyze cloud spending and forecast future costs
• Evaluate Azure services to support enterprise workloads
• Ensure compliance with FedRAMP, SP 800-53, EO 14028, CNSSI 1253
• Architect hybrid cloud solutions and oversee migrations
• Collaborate with DevOps, security, and infrastructure teams

Skills

Azure governance

Cost optimization

Security architecture

RBAC

Zero Trust

Hybrid cloud

DevOps collaboration

Education

Azure Solutions Architect Expert AZ-305

Azure Administrator AZ-104

Bachelor's degree in IT or related field

Tools

Azure Policy

Azure Cost Management

Azure Advisor

Terraform

Job description

We are seeking an Azure Cloud Engineer to serve as the cloud subject matter expert for a federal agency's Azure subscriptions. This is a designated key position on our program. You will own cloud architecture, governance, security, and cost optimization; designing secure landing zones, embedding Zero Trust principles, and keeping cloud spend aligned to budget.

On a typical day you will:

• Analyze cloud spending, identify trends, and develop strategies to optimize and reduce costs using Azure Cost Management and Azure Advisor
• Create and maintain budgets for cloud services and forecast future costs based on trends and organizational growth
• Evaluate and select Azure services (e.g., Azure Kubernetes Service, Azure Functions, Azure Policy) to support enterprise workloads
• Design secure landing zones using Azure services and Azure Policy
• Implement Azure governance models including management groups, role-based access control (RBAC), and tagging strategies
• Collaborate with security operations to embed Zero Trust principles, identity governance, and threat protection into cloud designs
• Ensure compliance with federal mandates (FedRAMP, SP 800-53, EO 14028, CNSSI 1253) and internal security policies
• Architect hybrid solutions that integrate cloud-native services with on-prem systems
• Provide architectural oversight for cloud migration and modernization projects
• Work closely with DevOps, security, and infrastructure teams to ensure architectural consistency

• 7+ years of IT experience with 4+ years focused on Microsoft Azure engineering/architecture
• Active Secret security clearance (or ability to obtain one) — required to support classified systems
• Deep expertise in Azure governance: management groups, RBAC, Azure Policy, tagging, and landing zone design
• Experience with Azure cost management, budgeting, and forecasting
• Working knowledge of federal security frameworks: FedRAMP, SP 800-53, EO 14028, CNSSI 1253
• Experience designing hybrid cloud architectures integrating on-premises systems
• Experience with cloud deployment automation and infrastructure as code
• Strong collaboration skills across security, DevOps, and infrastructure teams
• U.S. citizenship required
• Available for on-site work in Washington, DC during standard hours
• Preferred: Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or Azure Administrator (AZ-104); experience with Azure Government

We offer a comprehensive benefits package designed to support you and your family:

• Medical (HSA-qualified UnitedHealthcare plan), dental, and vision coverage; company pays 75% of employee premiums
• $100,000 company-paid life & AD&D insurance, with optional voluntary buy-up coverage for you and your family
• Short-term and long-term disability insurance, 100% company paid
• 401(k) with an automatic 3% company contribution; immediately vested, yours whether or not you contribute
• 11 paid federal holidays, 10 vacation days (growing to 20 with tenure), and 10 sick days per year
• Company-paid certification exams and renewals
• Tuition reimbursement up to $5,000 per year