Azure Cloud Engineer

Cyber Shell, LLC; Washington; On-site; USD 130,000 - 185,000; Full time

Benefits offered by this job

Medical coverage (HSA)

Life & AD&D insurance

Disability insurance

401(k) with company contributions

Paid federal holidays

Vacation and sick days

Tuition reimbursement

Job summary

Cyber Shell, LLC is seeking an Azure Cloud Engineer to serve as the cloud SME for a federal agency’s Azure subscriptions. You will own cloud architecture, governance, security, and cost optimization; designing secure landing zones and embedding Zero Trust principles while keeping spend within budget.

Responsibilities include optimizing costs, selecting Azure services, enforcing RBAC and tagging, and ensuring compliance with FedRAMP and SP 800-53.

Qualifications

• 7+ years of IT experience with 4+ years focused on Microsoft Azure engineering/architecture.
• Active Secret security clearance (or ability to obtain one) to support classified systems.
• U.S. citizenship required.

Responsibilities

• Own cloud architecture, governance, security, and cost optimization for Azure subscriptions.
• Analyze cloud spending, identify trends, and optimize costs using Azure Cost Management and Azure Advisor.
• Design secure landing zones and embed Zero Trust principles; implement RBAC and tagging strategies.
• Collaborate with security operations to enforce identity governance and threat protection in cloud designs.
• Ensure compliance with FedRAMP, SP 800-53, EO 14028, CNSSI 1253 and internal policies; design hybrid cloud integrations.
• Provide architectural oversight for cloud migration and modernization projects; align with DevOps and infrastructure teams.

Job description

We are seeking an Azure Cloud Engineer to serve as the cloud subject matter expert for a federal agency’s Azure subscriptions. This is a designated key position on our program. You will own cloud architecture, governance, security, and cost optimization; designing secure landing zones, embedding Zero Trust principles, and keeping cloud spend aligned to budget.

On a typical day you will:

• Analyze cloud spending, identify trends, and develop strategies to optimize and reduce costs using Azure Cost Management and Azure Advisor

• Create and maintain budgets for cloud services and forecast future costs based on trends and organizational growth

• Evaluate and select Azure services (e.g., Azure Kubernetes Service, Azure Functions, Azure Policy) to support enterprise workloads

• Design secure landing zones using Azure services and Azure Policy

• Implement Azure governance models including management groups, role-based access control (RBAC), and tagging strategies

• Collaborate with security operations to embed Zero Trust principles, identity governance, and threat protection into cloud designs

• Ensure compliance with federal mandates (FedRAMP, SP 800-53, EO 14028, CNSSI 1253) and internal security policies

• Architect hybrid solutions that integrate cloud-native services with on-prem systems

• Provide architectural oversight for cloud migration and modernization projects

• Work closely with DevOps, security, and infrastructure teams to ensure architectural consistency

• 7+ years of IT experience with 4+ years focused on Microsoft Azure engineering/architecture

• Active Secret security clearance (or ability to obtain one) — required to support classified systems

• Deep expertise in Azure governance: management groups, RBAC, Azure Policy, tagging, and landing zone design

• Experience with Azure cost management, budgeting, and forecasting

• Working knowledge of federal security frameworks: FedRAMP, SP 800-53, EO 14028, CNSSI 1253

• Experience designing hybrid cloud architectures integrating on-premises systems

• Experience with cloud deployment automation and infrastructure as code

• Strong collaboration skills across security, DevOps, and infrastructure teams

• U.S. citizenship required

• Available for on-site work in Washington, DC during standard hours

• Preferred: Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or Azure Administrator (AZ-104); experience with Azure Government

We offer a comprehensive benefits package designed to support you and your family:

• Medical (HSA-qualified UnitedHealthcare plan), dental, and vision coverage; company pays 75% of employee premiums

• $100,000 company-paid life & AD&D insurance, with optional voluntary buy-up coverage for you and your family

• Short-term and long-term disability insurance, 100% company paid

• 401(k) with an automatic 3% company contribution; immediately vested, yours whether or not you contribute

• 11 paid federal holidays, 10 vacation days (growing to 20 with tenure), and 10 sick days per year

• Company-paid certification exams and renewals

• Tuition reimbursement up to $5,000 per year