Azure Platform Engineer

ICF International; Reston (VA); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Hybrid work arrangement

On-site collaboration

Job summary

ICF International is seeking a full-time Azure Platform Engineer to design, automate, secure, and operate a large-scale Azure environment. This hands-on role owns infrastructure from architecture through production support, across multiple subscriptions in a hybrid Reston, VA area.

You will build IaC modules with Terraform, Bicep, and ARM templates, implement CI/CD pipelines, enforce security controls, and drive governance and compliance across the platform.

Qualifications

• U.S. citizenship typically required for federal contracts or client security.
• Bachelor's degree in a related field or equivalent professional experience.
• 5+ years of hands-on Azure infrastructure or platform administration.

Responsibilities

• Administer enterprise Azure environments across subscriptions and management groups.
• Design and maintain IaC modules and templates to enforce standards.
• Develop automation and CI/CD pipelines with GitHub Actions and Azure DevOps.
• Implement security controls and governance using Defender for Cloud, Entra ID, and policy.
• Support on-call rotation and after-hours maintenance windows as needed.
• Provide incident response, root cause analysis, and remediation across platforms.

Skills

Azure Administration

Infrastructure as Code

Automation

DevOps CI/CD

Security & Governance

Networking

Incident Response

Compliance & Audit

Education

Bachelor's degree or equivalent

Tools

Terraform

Bicep

ARM Templates

GitHub Actions

Azure DevOps

PowerShell

Azure CLI

Azure Policy

Job description

We are seeking a full-time Azure Platform Engineer to help design, automate, secure, and operate a large-scale enterprise Azure environment. This role is responsible for the day-to-day administration, governance, and evolution of a multi-subscription Azure platform supporting mission-critical workloads.

You will own real infrastructure and operations, building Infrastructure as Code, automation solutions, CI/CD pipelines, security controls, and governance frameworks that keep the platform secure, compliant, cost-efficient, and resilient. This is a hands-on engineering role with deep operational ownership where you will take solutions from architecture through production support.

This position is based in the Reston, VA / Rockville, MD area, a hybrid work arrangement with occasional on-site collaboration.

Work Schedule & Availability

This role supports production systems, participates in a shared on-call rotation, and is expected to support after-hours and weekend maintenance windows when required. The engineer must be able to plan, execute, and support production changes and respond to production incidents during assigned on-call periods.

What You’ll Do

Azure Platform Administration & Operations

Administer enterprise Azure environments across multiple subscriptions and management groups. Manage Azure Landing Zones, Management Groups, Azure Policy, role-based access control (RBAC), and subscription lifecycle processes. Govern Azure resources to support security, compliance, and operational consistency.

Infrastructure as Code (IaC)

Design, deploy, and maintain cloud infrastructure using Terraform, Bicep, ARM templates, or similar IaC tools. Manage infrastructure deployments through governed CI/CD pipelines rather than manual portal-based changes. Develop reusable modules and templates that enforce enterprise standards.

Automation & Platform Engineering

Build automation that reduces operational overhead and enables controlled self-service capabilities. Develop Azure Automation runbooks, Azure Functions, Logic Apps, and PowerShell-based automation. Automate governance, compliance validation, resource provisioning, drift detection, and remediation.

DevOps & CI/CD

Design and maintain GitHub Actions and Azure DevOps deployment pipelines. Implement environment promotion strategies across development, test, staging, and production. Build secure deployment workflows with validation, approvals, automated testing, and notifications.

Azure Security & Governance

Implement and maintain controls using Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Key Vault, and Microsoft Entra ID. Design and enforce identity, access management, privileged access, and least-privilege processes. Support security assessments, vulnerability remediation, and compliance initiatives.

Networking & Connectivity

Design, deploy, and troubleshoot Virtual Networks, Private Endpoints, ExpressRoute, VPN Gateway, Azure Firewall, NSGs, Application Gateway, and Web Application Firewall. Support hybrid connectivity, routing, DNS, segmentation, and secure application access patterns.

Operational Ownership & Incident Response

Serve as an escalation point for complex production issues. Perform incident response, root cause analysis, and post-incident corrective actions. Own problems end to end across infrastructure, networking, identity, and platform services.

Compliance & Audit Readiness

Support NIST 800-53, FedRAMP, SOX, and other applicable compliance initiatives. Maintain evidence collection, control documentation, and audit readiness. Participate in code reviews, design reviews, change management (CAB), and operational documentation.

Azure Technologies You’ll Work With

• Azure Platform: Azure Landing Zones, Management Groups, Azure Policy, Azure Resource Manager, Azure Monitor, and Log Analytics
• Identity & Security: Microsoft Entra ID, Privileged Identity Management (PIM), Microsoft Defender for Cloud, Microsoft Sentinel, Key Vault, and Conditional Access
• Networking: Virtual Networks, Private Endpoints, Azure Firewall, ExpressRoute, VPN Gateway, Application Gateway, and Web Application Firewall
• DevOps & Automation: GitHub Actions, Azure DevOps, Terraform, Bicep, ARM templates, Azure Automation, PowerShell, and Azure CLI
• Data & Platform Services: Azure Storage, Azure SQL, App Service, Function Apps, Azure Kubernetes Service, Azure Databricks, and Microsoft Fabric

Essential Qualifications

• U.S. citizenship required by federal contracts
• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
• Five or more years of hands-on Azure infrastructure or platform administration experience.

Additional Qualifications

• Experience managing enterprise Azure environments across multiple subscriptions and environments.
• Strong understanding of networking, systems administration, cloud architecture, and identity management.
• Practical experience with Infrastructure as Code