Azure Cloud Engineer

Cyber Shell, LLC; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Life & AD&D insurance

Short/long-term disability insurance

401(k) with company contribution

Paid federal holidays and vacation

Certification exams and renewals

Tuition reimbursement

Job summary

Cyber Shell, LLC seeks an Azure Cloud Engineer to lead cloud architecture, governance, security, and cost optimization for a federal agency. The role focuses on secure landing zones, Zero Trust, and alignment with budget.

You will analyze spend, forecast costs, and select Azure services to support enterprise workloads while ensuring compliance with federal mandates. On-site work in Washington, DC is required.

Qualifications

• 7+ years IT experience with 4+ years Azure engineering/architecture
• Active Secret security clearance or ability to obtain one to support classified systems
• Deep expertise in Azure governance: management groups, RBAC, Azure Policy, tagging, landing zone design
• Experience with Azure cost management, budgeting, and forecasting
• Experience designing hybrid cloud architectures integrating on-premises systems
• Experience with cloud deployment automation and infrastructure as code
• Strong collaboration across security, DevOps, and infrastructure teams
• U.S. citizenship required
• On-site work in Washington, DC during standard hours

Responsibilities

• Own cloud architecture, governance, security, and cost optimization for Azure subscriptions
• Analyze cloud spending and develop strategies to optimize costs using Azure Cost Management and Azure Advisor
• Create and maintain budgets for cloud services and forecast future costs
• Evaluate and select Azure services to support enterprise workloads
• Design secure landing zones using Azure services and Azure Policy
• Implement Azure governance models (management groups, RBAC, tagging)
• Embed Zero Trust principles with security operations and identity governance
• Ensure compliance with FedRAMP, SP 800-53, EO 14028, CNSSI 1253
• Architect hybrid solutions integrating cloud-native services with on-prem systems
• Provide architectural oversight for cloud migration and modernization projects
• Collaborate with DevOps, security, and infrastructure teams to ensure architectural consistency

Skills

Azure

Cloud architecture

Budgeting & cost

Zero Trust

RBAC

Security governance

On-site coordination

Tools

Azure Policy

Azure Cost Management

Azure AKS

Azure Functions

Job description

We are seeking an Azure Cloud Engineer to serve as the cloud subject matter expert for a federal agency's Azure subscriptions. This is a designated key position on our program. You will own cloud architecture, governance, security, and cost optimization; designing secure landing zones, embedding Zero Trust principles, and keeping cloud spend aligned to budget.

On a typical day you will:

• Analyze cloud spending, identify trends, and develop strategies to optimize and reduce costs using Azure Cost Management and Azure Advisor
• Create and maintain budgets for cloud services and forecast future costs based on trends and organizational growth
• Evaluate and select Azure services (e.g., Azure Kubernetes Service, Azure Functions, Azure Policy) to support enterprise workloads
• Design secure landing zones using Azure services and Azure Policy
• Implement Azure governance models including management groups, role-based access control (RBAC), and tagging strategies
• Collaborate with security operations to embed Zero Trust principles, identity governance, and threat protection into cloud designs
• Ensure compliance with federal mandates (FedRAMP, SP 800-53, EO 14028, CNSSI 1253) and internal security policies
• Architect hybrid solutions that integrate cloud-native services with on-prem systems
• Provide architectural oversight for cloud migration and modernization projects
• Work closely with DevOps, security, and infrastructure teams to ensure architectural consistency

Requirements

• 7+ years of IT experience with 4+ years focused on Microsoft Azure engineering/architecture
• Active Secret security clearance (or ability to obtain one) — required to support classified systems
• Deep expertise in Azure governance: management groups, RBAC, Azure Policy, tagging, and landing zone design
• Experience with Azure cost management, budgeting, and forecasting
• Working knowledge of federal security frameworks: FedRAMP, SP 800-53, EO 14028, CNSSI 1253
• Experience designing hybrid cloud architectures integrating on-premises systems
• Experience with cloud deployment automation and infrastructure as code
• Strong collaboration skills across security, DevOps, and infrastructure teams
• U.S. citizenship required
• Available for on-site work in Washington, DC during standard hours
• Preferred: Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or Azure Administrator (AZ-104); experience with Azure Government

Benefits

We offer a comprehensive benefits package designed to support you and your family:

• Medical (HSA-qualified UnitedHealthcare plan), dental, and vision coverage; company pays 75% of employee premiums
• $100,000 company-paid life & AD&D insurance, with optional voluntary buy-up coverage for you and your family
• Short-term and long-term disability insurance, 100% company paid
• 401(k) with an automatic 3% company contribution; immediately vested, yours whether or not you contribute
• 11 paid federal holidays, 10 vacation days (growing to 20 with tenure), and 10 sick days per year
• Company-paid certification exams and renewals
• Tuition reimbursement up to $5,000 per year