Azure Cloud Engineer

Socket.dev; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical coverage

Life insurance

Disability

401k plan

Holidays & vacation

Certifications

Tuition reimbursement

Job summary

Socket.dev seeks an Azure Cloud Engineer to serve as the cloud SME for a federal agency's Azure subscriptions, owning cloud architecture, governance, security, and cost optimization; designing secure landing zones, embedding Zero Trust principles, and keeping cloud spend aligned to budget. On-site in Washington, DC is required.

On a typical day you will collaborate with security operations, DevOps, and infrastructure teams to ensure architectural consistency and compliance with federal mandates

Qualifications

• 7+ years IT experience with 4+ years focused on Microsoft Azure engineering/architecture.
• Active Secret security clearance (or ability to obtain one) — required to support classified systems.
• US citizenship required.

Responsibilities

• Analyze cloud spending, identify trends, and optimize costs using Azure Cost Management and Azure Advisor.
• Create and maintain budgets for cloud services and forecast future costs based on trends and growth.
• Evaluate and select Azure services to support enterprise workloads (e.g., AKS, Functions, Policy).
• Design secure landing zones using Azure services and Policy.
• Implement Azure governance models including management groups, RBAC, tagging.
• Collaborate with security operations to embed Zero Trust principles and threat protection.
• Ensure compliance with FedRAMP, SP 800-53, EO 14028, CNSSI 1253.
• Architect hybrid solutions integrating cloud and on‑prem systems.
• Provide architectural oversight for cloud migration and modernization projects.
• Work with DevOps, security, and infrastructure teams to ensure consistency.

Skills

Azure governance

RBAC

Cost management

Hybrid cloud design

Zero Trust

Cloud security

Collaboration with security/DevOps

Tools

Azure Kubernetes Service

Azure Functions

Azure Policy

Job description

We are seeking an Azure Cloud Engineer to serve as the cloud subject matter expert for a federal agency's Azure subscriptions. This is a designated key position on our program. You will own cloud architecture, governance, security, and cost optimization; designing secure landing zones, embedding Zero Trust principles, and keeping cloud spend aligned to budget.

On a typical day you will:

• Analyze cloud spending, identify trends, and develop strategies to optimize and reduce costs using Azure Cost Management and Azure Advisor
• Create and maintain budgets for cloud services and forecast future costs based on trends and organizational growth
• Evaluate and select Azure services (e.g., Azure Kubernetes Service, Azure Functions, Azure Policy) to support enterprise workloads
• Design secure landing zones using Azure services and Azure Policy
• Implement Azure governance models including management groups, role-based access control (RBAC), and tagging strategies
• Collaborate with security operations to embed Zero Trust principles, identity governance, and threat protection into cloud designs
• Ensure compliance with federal mandates (FedRAMP, SP 800-53, EO 14028, CNSSI 1253) and internal security policies
• Architect hybrid solutions that integrate cloud-native services with on-prem systems
• Provide architectural oversight for cloud migration and modernization projects
• Work closely with DevOps, security, and infrastructure teams to ensure architectural consistency

• 7+ years of IT experience with 4+ years focused on Microsoft Azure engineering/architecture
• Active Secret security clearance (or ability to obtain one) — required to support classified systems
• Deep expertise in Azure governance: management groups, RBAC, Azure Policy, tagging, and landing zone design
• Experience with Azure cost management, budgeting, and forecasting
• Working knowledge of federal security frameworks: FedRAMP, SP 800-53, EO 14028, CNSSI 1253
• Experience designing hybrid cloud architectures integrating on-premises systems
• Experience with cloud deployment automation and infrastructure as code
• Strong collaboration skills across security, DevOps, and infrastructure teams
• U.S. citizenship required
• Available for on-site work in Washington, DC during standard hours
• Preferred: Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or Azure Administrator (AZ-104); experience with Azure Government

We offer a comprehensive benefits package designed to support you and your family:

• Medical (HSA-qualified UnitedHealthcare plan), dental, and vision coverage; company pays 75% of employee premiums
• $100,000 company-paid life & AD&D insurance, with optional voluntary buy-up coverage for you and your family
• Short-term and long-term disability insurance, 100% company paid
• 401(k) with an automatic 3% company contribution; immediately vested, yours whether or not you contribute
• 11 paid federal holidays, 10 vacation days (growing to 20 with tenure), and 10 sick days per year
• Company-paid certification exams and renewals
• Tuition reimbursement up to $5,000 per year