Azure Enclave Engineer

Zachary Piper Solutions; Springfield (VA); On-site; USD 170,000 - 210,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Paid Holidays

PTO

Sick Leave

Job summary

Zachary Piper Solutions is seeking an Azure Enclave Engineer to design, secure, and maintain enclave environments for a government/defense client. The role is 100% on-site in Springfield, VA with active TS/SCI eligibility.

The ideal candidate has 8+ years in enclave architecture and security, hands-on Azure experience, and strong documentation skills to produce runbooks, SOPs, and security guides for Tier 2/3 teams.

Qualifications

• Active Top Secret clearance with SCI eligibility.
• 8+ years in enclave architecture or security engineering.
• Hands-on Azure services experience (compute/network/storage/identity).
• Experience with Azure subscriptions, resource groups, and Entra ID.
• Strong networking fundamentals (TCP/IP, DNS, VPNs, firewalls).
• VMs, containers, and Azure storage accounts experience.
• PowerShell scripting and Azure CLI familiarity.
• 5+ years of technical writing for cloud/security systems.
• Knowledge of ARM, Bicep, Terraform templates.
• Experience with hybrid/government cloud environments incl. Azure Gov.
• Understanding cloud security: IAM, network security, encryption, Zero Trust.
• Clear communication to leadership and auditors.
• Certs: CompTIA Security+ and AZ-104 or higher; upgrade within 6 months.

Responsibilities

• Design and architect enclave infrastructure to meet security and operational requirements.
• Develop and maintain runbooks, SOPs, and security guides for Tier 3/2 teams.
• Implement and enforce security controls within enclave environments.
• Collaborate with networking, security, and compliance teams to enhance security.
• Conduct infrastructure and security risk assessments and recommend improvements.
• Provide strategic IT support for secure enclave operations.
• Develop Azure architecture diagrams and IaC artifacts.

Skills

Azure Enclave Architecture

Security Engineering

PowerShell

Azure CLI

Terraform IaC

Documentation

Zero Trust

Education

Bachelor’s or Master’s in Cybersecurity/IT

Tools

Azure

Azure Portal

Azure Resource Manager

Bicep

Terraform

Job description

Zachary Piper Solutions is seeking an Azure Enclave Engineer to support a client in the government and defense technology sector by designing, securing, and maintaining highly controlled enclave environments. The Cloud/Systems Architect role is ideal for a senior infrastructure and security professional with deep experience in Azure, enclave architecture, and secure government or hybrid cloud environments. This position is located in Springfield, VA and is 100% on site. Active Ts/Sci Required Responsibilities of the Azure Enclave Engineer :

• Design and architect enclave infrastructure to meet strict security and operational requirements.
• Develop and maintain technical documentation, runbooks, SOPs, and security implementation guides for Tier 3 and Tier 2 teams.
• Implement and enforce security controls and best practices within enclave environments.
• Collaborate closely with networking, security, and compliance teams to enhance infrastructure security and resilience.
• Conduct infrastructure and security risk assessments and recommend architectural, configuration, and operational improvements.
• Provide strategic IT support and guidance for secure enclave operations.
• Develop Azure architecture diagrams and maintain infrastructure-as-code artifacts.

Qualifications of the Azure Enclave Engineer :

• Active Top Secret clearance with SCI eligibility required.
• Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or a related field (preferred).
• 8+ years of experience in enclave architecture, security engineering, or IT infrastructure management.
• At least six months of hands‑on experience managing production Azure services, including compute, networking, storage, and identity.
• Strong experience with Azure subscriptions, resource groups, and Azure Active Directory (Entra ID).
• Understanding of networking fundamentals including TCP/IP, DNS, VPNs, and firewall configurations.
• Experience creating and managing virtual machines, containers, and Azure storage accounts.
• Proficiency in PowerShell scripting and familiarity with Azure CLI for resource management.
• 5+ years of technical writing experience supporting cloud-based or security-focused systems.
• Working knowledge of Azure Resource Manager, Bicep, and/or Terraform templates.
• Experience supporting hybrid or government cloud environments, including Azure Government and on-premises integrations.
• Strong understanding of cloud security principles such as IAM, network security, encryption, and Zero Trust architectures.
• Ability to clearly communicate complex security concepts to both technical teams and non-technical stakeholders, including leadership and auditors.
• Required certifications: CompTIA Security+ and AZ-104 (Microsoft Azure Administrator), or a higher-level Microsoft certification in lieu of AZ-104. Candidates not currently certified must obtain required certifications within six months of hire.

Compensation for the Azure Enclave Engineer includes:

• Salary range: $170,000 – $210,000 (depending on experience)
• Full benefits including medical, dental, vision, 401(k), PTO, paid holidays, and sick leave as required by law

This job opens for applications on 8/28/2026. Applications for this job will be accepted for at least 30 days from the posting date.