Azure Solution Architect - Cleared (Top Secret)

TrueTandem, LLC; Tysons (VA); Presencial; USD 150.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Dental and vision plans

Life and disability insurance

Holidays and PTO

401(k) retirement plan

Descripción de la vacante

TrueTandem, LLC is seeking a Senior Azure Infrastructure Cloud Engineer to design, implement, and operate enterprise-scale Azure infrastructure for mission-critical workloads in a highly secure federal environment. You will lead IaC, identity, networking, and governance efforts across teams to deliver secure, scalable cloud platforms.

The role emphasizes automation, continuous compliance, and operational excellence, with opportunities to work with CAF, TIC 3.0, and NIST standards within a

Formación

• Active Top Secret clearance with SCI eligibility required.
• 5+ years of experience supporting Tier II Azure environments or 3+ years supporting Tier III enterprise Azure cloud infrastructure.
• Experience designing, implementing, and sustaining Azure enterprise landing zones per CAF and cloud engineering best practices.
• Deep expertise in Azure governance and platform services including Policy, RBAC, Key Vault, Storage, and networking.
• Hands-on experience with Azure networking (Virtual WAN, VNets, NSGs, private connectivity) and hybrid-cloud architectures.
• Proficiency in PowerShell scripting and automation to streamline cloud operations.
• Experience with IaC using Terraform to deploy and manage Azure resources.
• Knowledge of Zero Trust, NIST, TIC 3.0, and federal cloud security requirements.

Responsabilidades

• Design, implement, and maintain IaC solutions using Terraform for Azure deployments.
• Build and support automated CI/CD pipelines within Azure DevOps.
• Architect and sustain Azure infrastructure aligned with CAF and Well‑Architected Framework.
• Implement and administer Azure governance (Management Groups, Subscriptions, Policies, RBAC).
• Configure and manage Azure Key Vault for secrets, certificates, and keys.
• Design and support Azure storage with data protection, backup, and lifecycle management.
• Architect and maintain enterprise networking (Virtual WAN, VNets, NSGs, private connectivity).
• Implement monitoring with Azure Monitor, Log Analytics, Application Insights and alerts.
• Support migration/modernization of applications to Azure.

Conocimientos

Top Secret Clearance

Azure Cloud

IaC Terraform

PowerShell

Azure DevOps

Networking

Security & Compliance

Herramientas

Terraform

Bicep

ARM Templates

Azure Monitor

Power Platform

Descripción del empleo

TrueTandem is seeking a highly skilled and motivated Senior Azure Infrastructure Cloud Engineer to support the delivery of enterprise-scale cloud infrastructure and platform services for a member of the Intelligence Community (IC). This role is ideal for a seasoned cloud professional with expertise in Azure infrastructure, automation, security, governance, and Infrastructure as Code (IaC) who thrives in mission-driven environments. The successful candidate will join a team responsible for designing, deploying, securing, and sustaining cloud platforms that support critical mission and business applications. Solutions are engineered in accordance with approved reference architectures, federal security requirements, organizational policies, and cloud engineering best practices. The environment leverages Azure-native services, Microsoft 365, Power Platform, Terraform, Bicep, and Azure DevOps to deliver secure, scalable, and repeatable cloud capabilities. The team emphasizes automation, policy-driven governance, continuous compliance validation, operational excellence, and efficient platform management to accelerate cloud adoption while maintaining security and regulatory requirements. As a Senior Azure Infrastructure Cloud Engineer, you will help build and maintain the core Azure infrastructure foundation that enables mission and business workloads across the enterprise. Working within a cross-functional team of architects, engineers, developers, and cybersecurity professionals, you will design, implement, and support Azure governance frameworks, subscriptions, management groups, virtual networking, storage services, Key Vault, monitoring solutions, security controls, identity integration, workload migrations, and operational sustainment activities. The ideal candidate possesses hands‑on experience supporting complex federal cloud environments and demonstrates the ability to troubleshoot and resolve challenging infrastructure issues while balancing security, performance, reliability, and scalability requirements. Success in this role requires a strong commitment to automation, continuous improvement, and delivering secure, resilient cloud solutions that support evolving mission needs. This position offers the opportunity to contribute to some of the most critical cloud modernization initiatives within the federal government while working with leading technologies and a highly collaborative engineering team.

Role and Responsibilities

• Design, develop, and maintain Infrastructure as Code (IaC) solutions using Terraform to deliver secure, scalable, and repeatable Azure infrastructure deployments
• Build, enhance, and support automated CI/CD pipelines within Azure DevOps to streamline infrastructure provisioning, application delivery, and operational deployments
• Architect, deploy, and sustain Azure infrastructure services in alignment with the Microsoft Cloud Adoption Framework (CAF), Well‑Architected Framework, and organizational standards
• Implement and administer Azure governance capabilities, including Management Groups, Subscriptions, Resource Groups, Policies, and Role‑Based Access Control (RBAC), to enforce security, compliance, and operational consistency
• Configure and manage Azure Key Vault to safeguard secrets, certificates, encryption keys, and application credentials
• Design, deploy, and support Azure storage solutions while implementing data protection, backup, recovery, retention, and lifecycle management strategies
• Architect and maintain enterprise networking solutions, including Virtual WAN, Virtual Networks (VNets), Network Security Groups (NSGs), private connectivity, DNS, and hybrid cloud integrations
• Implement enterprise monitoring and observability solutions using Azure Monitor, Log Analytics, Application Insights, alerts, dashboards, and automated response capabilities
• Support the migration, modernization, and optimization of applications and workloads into Azure cloud environments
• Integrate security controls and compliance requirements throughout the infrastructure lifecycle in accordance with Zero Trust principles, TIC 3.0 guidance, NIST frameworks, and federal security baselines
• Troubleshoot complex infrastructure, networking, identity, performance, and security issues across cloud environments to ensure platform reliability and operational excellence
• Collaborate with architects, developers, cybersecurity teams, and stakeholders to design, implement, and continuously improve secure, resilient, and mission‑focused cloud solutions
• Contribute to the development and maintenance of reusable infrastructure modules, engineering standards, reference architectures, and operational procedures
• Participate in platform sustainment activities, capacity planning, incident response, problem management, and continuous service improvement initiatives
• Produce and maintain technical documentation, implementation guides, architecture diagrams, and audit artifacts to support operational, security, and compliance requirements

Required Skills

• Active Top Secret Clearance with SCI Eligibility. Higher level clearance is an asset
• 5+ years of experience supporting Tier II Azure environments or 3+ years supporting Tier III enterprise Azure cloud infrastructure
• Demonstrated experience designing, implementing, and sustaining Azure enterprise landing zones and core infrastructure services aligned with the Microsoft Cloud Adoption Framework (CAF) and cloud engineering best practices
• Deep expertise in Azure governance and platform services, including Management Groups, Subscriptions, Resource Groups, Azure Policy, RBAC, Key Vault, Storage, and networking services
• Hands‑on experience designing and supporting Azure networking solutions, including Virtual WAN, Virtual Networks (VNets), Network Security Groups (NSGs), private connectivity, routing, and hybrid‑cloud architectures
• Experience administering and supporting Azure Virtual Desktop (AVD) environments, including host pools, image management, FSLogix profiles, session hosts, and enterprise user support
• Strong understanding of Azure security, monitoring, and operational practices, including Azure Monitor, Log Analytics, Application Insights, alerts, diagnostics, and security controls
• Proficiency in PowerShell scripting and automation to streamline cloud operations, configuration management, and administrative tasks
• Experience with Infrastructure as Code (IaC) methodologies and tools such as Terraform to deploy and manage Azure resources in a repeatable and auditable manner
• Knowledge of federal cybersecurity and compliance frameworks, including Zero Trust Architecture, NIST standards, TIC 3.0, and government cloud security requirements
• Proven ability to diagnose and resolve complex infrastructure, networking, identity, performance, and security issues across enterprise Azure environments
• Strong verbal and written communication skills with the ability to create technical documentation, operational procedures, and architecture artifacts for both technical and non‑technical stakeholders
• Demonstrated ability to work effectively within cross‑functional teams consisting of cloud engineers, architects, cybersecurity personnel, developers, and mission stakeholders

Preferred Skills

• Microsoft Azure certifications such as Azure Administrator Associate (AZ‑104), Azure Security Engineer Associate (AZ‑500), Azure Network Engineer Associate (AZ‑700), or Azure Solutions Architect Expert (AZ‑305)
• Experience supporting IC, DoD, or other classified federal cloud environments
• Knowledge of Bicep, ARM templates, or additional IaC frameworks
• Experience supporting cloud migration, modernization, and application transformation initiatives
• Experience with Power Platform integration in Azure environments
• Familiarity with AOAI embedded features and Copilot capabilities
• Knowledge of workload/application migrations and hybrid cloud strategies
• Understanding of Microsoft licensing models and subscription management

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

The above salary range represents a general guideline; however, TrueTandem considers several factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.

In addition, TrueTandem provides a variety of benefits including health insurance coverage, dental and vision plans, life and disability insurance, company paid holidays and paid time off (PTO). Our retirement plan offers a variety of investment options to build toward your retirement.

TrueTandem is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.

U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.