Azure Systems Engineer

Capstone IT, Inc.; McLean (VA); Hybrid; USD 110,000 - 190,000; Full time

Job summary

Capstone IT is seeking a Senior Systems Engineer to design, deploy, integrate, and support secure Microsoft Azure and on‑premises infrastructure for mission‑critical systems. The role focuses on building secure, scalable, and highly available environments while maintaining enterprise identity, networking, and security controls.

Responsibilities include deploying Azure VMs, storage, Key Vault, monitoring, firewalling, and application gateway, plus implementing secure Landing Zones and supporting

Qualifications

• 8+ years of professional experience in systems, infrastructure, or cloud engineering.
• 5+ years of hands-on Microsoft Azure engineering experience.
• Strong experience supporting hybrid cloud and on-premises infrastructure.
• Expertise with Azure, Windows Server, Active Directory, Microsoft Entra ID, and PowerShell.
• Strong understanding of networking, infrastructure security, and secure system design.
• Experience supporting government, defense, or similarly regulated environments.
• Active Secret security clearance.
• Willingness and ability to travel internationally.

Responsibilities

• Design, deploy, and maintain secure Microsoft Azure and on-premises environments.
• Configure and support Azure Virtual Machines, Storage, Key Vault, Monitor, Firewall, Front Door, and Application Gateway.
• Implement secure Azure Landing Zones and support cloud migrations.
• Administer Windows Server, Active Directory, DNS, DHCP, PKI, and virtualization platforms.
• Support infrastructure across development, test, staging, and production environments.

Skills

Security Clearance

Azure Cloud Engineering

Windows Server & Hybrid Infra

Active Directory & Entra ID

PowerShell Scripting

Tools

SCCM

Splunk

Microsoft Defender

Job description

We cannot sponsor this role or Work with Third Parties

Location: Hybrid- McLean VA.

Duration: Contract or Direct Hire

Compensation: Based on Experience

Summary

Capstone IT is helping our client find a Senior Systems Engineer who will design, deploy, integrate, and support secure Microsoft Azure and on-premises infrastructure for mission-critical systems. This is a hands-on engineering position focused on building secure, scalable, and highly available environments while maintaining enterprise identity, networking, and security infrastructure. The engineer will work across development, testing, and production environments, troubleshoot complex technical issues, and support systems operating under strict government and defense security requirements.

Top 4 Must-Have Skills

• Security Clearance
• Microsoft Azure Cloud Engineering: Designing, deploying, securing, and maintaining enterprise Azure infrastructure, including networking, virtual machines, security services, and Azure Landing Zones.
• Windows Server & Hybrid Infrastructure: Managing enterprise Windows Server environments, virtualization, on-premises systems, and hybrid cloud connectivity.
• Active Directory & Microsoft Entra ID: Enterprise identity management, directory services, authentication, RBAC, and integration between cloud and on-premises environments.
• PowerShell Scripting: Automating infrastructure administration, system configuration, deployment, and operational tasks.

Responsibilities

• Design, deploy, and maintain secure Microsoft Azure and on-premises environments.
• Configure and support Azure Virtual Machines, Storage, Key Vault, Monitor, Firewall, Front Door, and Application Gateway.
• Implement secure Azure Landing Zones and support cloud migrations.
• Administer Windows Server, Active Directory, DNS, DHCP, PKI, and virtualization platforms.
• Support infrastructure across development, test, staging, and production environments.

Security & Identity Management

• Implement Zero Trust security principles and defense-in-depth controls.
• Configure Microsoft Entra ID, privileged access controls, and RBAC.
• Support PKI, certificates, smart cards, HSMs, and secure authentication.
• Perform security assessments, vulnerability remediation, system hardening, and compliance validation.
• Support incident response and security investigations.

Systems Integration

• Integrate Active Directory, LDAP, PKI, SCCM, Splunk, SQL Server, and third-party systems.
• Troubleshoot issues involving infrastructure, authentication, connectivity, and security.
• Support system testing, performance optimization, and disaster recovery.

Technical Support & Documentation

• Create architecture diagrams, runbooks, deployment guides, and technical documentation.
• Support system implementations and ongoing operations.

Qualifications

Required

• 8+ years of professional experience in systems, infrastructure, or cloud engineering.
• 5+ years of hands-on Microsoft Azure engineering experience.
• Strong experience supporting hybrid cloud and on-premises infrastructure.
• Expertise with Azure, Windows Server, Active Directory, Microsoft Entra ID, and PowerShell.
• Strong understanding of networking, infrastructure security, and secure system design.
• Experience supporting government, defense, or similarly regulated environments.
• Active Secret security clearance.
• Willingness and ability to travel internationally.

Nice to Have

• Identity and Access Management (IAM) platforms.
• PKI, certificate lifecycle management, and HSMs.
• Azure Landing Zones and Microsoft Defender.
• Splunk and DevSecOps practices.
• Experience supporting classified or mission-critical systems.

2. Role Context - This Company

What this engineer will do for the Capstone IT client

This position supports an organization responsible for deploying and sustaining secure, mission-critical technology environments.

The engineer will be responsible for ensuring systems operate reliably across both Azure cloud infrastructure and traditional on-premises environments.

Based on the job description, the work centers on four areas:

• Secure infrastructure deployment: Building and integrating enterprise systems across multiple environments while meeting government or defense security requirements.
• Hybrid identity and connectivity: Ensuring Azure, Windows Server, Active Directory, Entra ID, and authentication services work together securely.
• Security engineering: Applying access controls, certificate-based authentication, vulnerability remediation, and infrastructure hardening.
• Operational continuity: Providing senior-level troubleshooting, Tier III support, documentation, testing, and disaster recovery support.

What makes this position different:

It requires more than routine Azure administration. The engineer must understand how cloud infrastructure, Windows systems, identity services, networking, and security controls function together in highly regulated environments.

This is primarily a hands-on infrastructure engineering role rather than an architecture-only position or a general cloud support job.

Capstone Consulting is an EEO employer.