Azure Enclave Engineer

Zachary Piper Solutions; Springfield, Northern (VA, KY); On-site; USD 170,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

PTO

Sick leave

On-site work

Job summary

Zachary Piper Solutions seeks an Azure Enclave Engineer to design, secure, and maintain highly controlled enclave environments for a government/defense client. This senior role focuses on Azure enclave architecture, security engineering, and on-site operations in Springfield, VA.

Candidates should have 8+ years in enclave/security, TS/SCI with eligibility, and strong hands-on Azure experience including VMs, networking, IAM, and IaC tools. On-site with full benefits.

Qualifications

• 8+ years in enclave architecture, security engineering or IT infrastructure management.
• Hands-on Azure experience with compute, networking, storage and identity.
• Experience with Azure subscriptions, resource groups, and Azure AD/Entra ID.
• PowerShell scripting and familiarity with Azure CLI for resource management.
• IaC experience with Terraform/Bicep/ARM templates.
• Active TS/SCI clearance with eligibility.
• Certifications: CompTIA Security+ and AZ-104 (or higher).

Responsibilities

• Design enclave infrastructure to meet security and operational requirements.
• Develop and maintain runbooks, SOPs, and security guides for Tier 3/2 teams.
• Implement and enforce security controls within enclave environments.
• Collaborate with networking, security, and compliance teams to enhance infrastructure security.
• Conduct infrastructure and security risk assessments and recommend improvements.
• Provide strategic IT support for secure enclave operations.
• Develop Azure architecture diagrams and IaC artifacts.

Skills

Azure

Security engineering

PowerShell

Azure CLI

Zero Trust

IAM

Terraform

Bicep

Hybrid/government cloud

Documentation

Education

Bachelor’s or Master’s degree in Cybersecurity/Information Technology

Tools

Azure Resource Manager

Azure AD / Entra ID

Terraform

Bicep

Job description

Zachary Piper Solutions is seeking an Azure Enclave Engineer to support a client in the government and defense technology sector by designing, securing, and maintaining highly controlled enclave environments. The Cloud/Systems Architect role is ideal for a senior infrastructure and security professional with deep experience in Azure, enclave architecture, and secure government or hybrid cloud environments. This position is located in Springfield, VA and is 100% on site.

ACTIVE TS/SCI REQUIRED

Responsibilities of the Azure Enclave Engineer:

• Design and architect enclave infrastructure to meet strict security and operational requirements.
• Develop and maintain technical documentation, runbooks, SOPs, and security implementation guides for Tier 3 and Tier 2 teams.
• Implement and enforce security controls and best practices within enclave environments.
• Collaborate closely with networking, security, and compliance teams to enhance infrastructure security and resilience.
• Conduct infrastructure and security risk assessments and recommend architectural, configuration, and operational improvements.
• Provide strategic IT support and guidance for secure enclave operations.
• Develop Azure architecture diagrams and maintain infrastructure-as-code artifacts.

Qualifications of the Azure Enclave Engineer:

• Active Top Secret clearance with SCI eligibility required.
• Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or a related field (preferred).
• 8+ years of experience in enclave architecture, security engineering, or IT infrastructure management.
• At least six months of hands-on experience managing production Azure services, including compute, networking, storage, and identity.
• Strong experience with Azure subscriptions, resource groups, and Azure Active Directory (Entra ID).
• Understanding of networking fundamentals including TCP/IP, DNS, VPNs, and firewall configurations.
• Experience creating and managing virtual machines, containers, and Azure storage accounts.
• Proficiency in PowerShell scripting and familiarity with Azure CLI for resource management.
• 5+ years of technical writing experience supporting cloud-based or security-focused systems.
• Working knowledge of Azure Resource Manager, Bicep, and/or Terraform templates.
• Experience supporting hybrid or government cloud environments, including Azure Government and on-premises integrations.
• Strong understanding of cloud security principles such as IAM, network security, encryption, and Zero Trust architectures.
• Ability to clearly communicate complex security concepts to both technical teams and non-technical stakeholders, including leadership and auditors.
• Required certifications: CompTIA Security+ and AZ-104 (Microsoft Azure Administrator), or a higher-level Microsoft certification in lieu of AZ-104. Candidates not currently certified must obtain required certifications within six months of hire.

Compensation for the Azure Enclave Engineer includes:

• Salary range: $170,000 - $210,000 (depending on experience)
• Full benefits including medical, dental, vision, 401(k), PTO, paid holidays, and sick leave as required by law

This job opens for applications on 8/21/2026. Applications for this job will be accepted for at least 30 days from the posting date.