Cloud Computing Engineer Principal

Syms Strategic Group, LLC (SSG); Ashburn (VA); Remote; USD 110,000 - 127,000; Full time

Job summary

Syms Strategic Group (SSG) is seeking a Cloud Computing Engineer Principal to lead Azure infrastructure design and cloud modernization for VA enterprise environments. The role emphasizes secure, scalable, and compliant cloud solutions with DevOps practices, CI/CD, and ongoing governance.

The candidate will design architecture diagrams, manage access controls, implement monitoring, and provide expert guidance across cross-functional teams. Remote, US-based, with a strong HIPAA/FedRAMP aware focus.

Qualifications

• Proven track record designing, deploying, and managing Azure infrastructure and services.
• Experience with large-scale, high-availability cloud architecture.
• Expertise in core Azure services (VMs, Blob, SQL DB, VNet, Functions, Entra ID, ARM, Monitor, DNS).
• Experience with Azure security practices (Entra ID, RBAC, DDoS, WAF).
• Knowledge of Azure networking components (VNet peering, ExpressRoute, VPN, Private Endpoints, Load Balancer).
• Experience with IaC (ARM templates, Ansible, GitOps).
• CI/CD tooling (Azure DevOps, GitHub Actions, Jenkins, GitLab CI).
• Containerization and orchestration (Docker, AKS, Kubernetes).

Responsibilities

• Create data flow diagrams, cloud diagrams, and architecture diagrams for Cloud Infrastructure.
• Design, develop, deploy, and operate automation for CI/CD.
• Manage permissions in the cloud service provider for each app, storage, and service.
• Implement monitoring for cloud architecture and hosted systems for performance and compliance.
• Provide cloud support for VA Enterprise Cloud environments (VAEC).
• Support VAEC Azure GovCloud environments and VIP documentation requirements.
• Adopt a DevOps mindset with CI/CD practices and tooling.
• Provide Cloud Security Provider Documentation.
• Design VAEC/cloud-hosted solutions and address cloud-readiness gaps.

Skills

Azure design

Cloud architecture

Azure security

Scripting (Python)

IaC tools

CI/CD tooling

Docker\u0026Kubernetes

Education

Bachelor's degree in CS or related

Tools

Azure DevOps

GitHub Actions

Jenkins

GitLab CI

Job description

Syms Strategic Group (SSG) is seeking a talented Cloud Computing Engineer Principal (MCCF-Healthcare Systems)

Location

Remote

Department

Veterans Affairs (VA)

Type

Full Time

Min. Experience

Experienced

Security Clearance Level

Public Trust (MBI)

Salary Range

$109,623 - $126,790

If you have previously applied to Syms Strategic Group (SSG), there is no need to reapply. Applications are still under review.

Military Veterans are highly encouraged to apply!

Essential Duties And Responsibilities

• Create data flow diagrams, cloud diagrams, transition diagrams, and high-level architecture diagrams on Cloud Infrastructure, applications, and systems
• Design, develop, deploy, and operate automation technologies for continuous integration and continuous delivery (CI/CD)
• Manage and control permissions in the cloud service provider for each cloud application, storage, and service being hosted
• Implement, manage, and design monitoring capabilities for cloud architecture and cloud-hosted systems and applications to ensure optimal performance and compliance with VA/Federal policies
• Provide customer-focused support for Product lines and Services, including setup, configuration, and provisioning of VA Enterprise Cloud (VAEC) environments
• Provide Cloud support services for systems and applications in the VAEC Azure (GovCloud) environments, ensuring compliance with Veterans Independence Program (VIP) development, release, and documentation requirements
• Adopt a DevOps mindset with an understanding of CI/CD practices and tooling
• Provide Cloud Security Provider Documentation
• Design VAEC/cloud-hosted solutions and address cloud-readiness gaps

Required Skills and Experience

• A proven track record of designing, deploying, and managing Azure infrastructure and services
• Experience with large-scale, high-availability, and scalable cloud architecture
• Expertise in core Azure services such as Azure Virtual Machines, Azure Blob Storage, Azure Structured Query Language (SQL) Database, Azure Virtual Network (VNet), Azure Functions, Microsoft Entra ID, Azure Resource Manager (ARM), Azure Monitor, and Azure Domain Name System (DNS)
• Experience with Azure security practices and services including Microsoft Entra ID, Azure Role-Based Access Control (RBAC), Azure Distributed Denial-of-Service (DDoS) Protection, and Azure Web Application Firewall (WAF)
• Proficiency with Azure networking components such as VNet Peering, Azure ExpressRoute, Virtual Private Network (VPN) Gateway, Private Endpoints, and Azure Load Balancer
• An ability to design, deploy, and manage scalable, secure, and highly available Azure cloud infrastructures
• Experience establishing and governing multi-subscription Azure environments using Management Groups, Azure Policy, and Azure Landing Zones
• Knowledge of cloud cost management, FinOps practices, budgeting, tagging strategies, and resource optimization using Azure Cost Management
• Proficiency in scripting languages such as Python, PowerShell, Bash, or JavaScript/NodeJS for automation and cloud operations
• Experience with Infrastructure as Code (IaC) tools such as Azure Resource Manager (ARM) Templates, Ansible, and GitOps methodologies
• Proficiency with monitoring, logging, and observability tools including Azure Monitor, Log Analytics, Application Insights, Azure Activity Log, and third-party tools such as Prometheus, Grafana, and New Relic
• Experience optimizing performance, availability, and resiliency of Azure resources and services
• A strong understanding of Azure security best practices and compliance frameworks including Health Insurance Portability and Accountability Act (HIPAA), Federal Risk and Authorization Management Program (FedRAMP), National Institute of Standards and Technology (NIST), General Data Protection Regulation (GDPR), and Payment Card Industry Data Security Standard (PCI DSS)
• Experience implementing encryption, key management, secrets management, and identity solutions using Azure Key Vault, customer-managed keys, and Microsoft Entra ID
• Knowledge of Azure database services including Azure SQL Database, Azure SQL Managed Instance, Azure Cosmos Database (DB), Azure Database for PostgreSQL, and Azure Database for MySQL
• Experience with database performance tuning, backup and recovery, high availability, and disaster recovery strategies
• Familiarity with CI/CD tools and practices including Azure DevOps Pipelines, GitHub Actions, Jenkins, and GitLab CI
• Experience with containerization and orchestration technologies such as Docker, Azure Kubernetes Service (AKS), Azure Container Apps, and Kubernetes
• Strong analytical and problem-solving skills, including the ability to explain technical concepts to non-technical stakeholder
• Skilled in prioritizing tasks, managing competing priorities, and meeting project deadlines
• Strong attention to detail to ensure system stability, security, operational excellence, and data integrity
• A proven ability to mentor engineers, provide technical leadership, and contribute to cloud architecture governance
• Experience leading complex cloud modernization, migration, and transformation initiatives while collaborating across cross-functional teams
• A willingness to provide on-call support and participate in operational response activities when required
• Strong documentation skills for architecture, operational procedures, security controls, and system configurations
• An ability to manage and contribute to multiple projects simultaneously while ensuring high-quality deliverables
• A commitment to staying current with emerging Azure technologies, cloud-native architectures, and industry best practices
• Strong analytical and problem-solving abilities to troubleshoot complex cloud-related issues
• Excellent verbal and written communication skills, with the ability to explain technical concepts to non-technical stakeholders
• Skilled in prioritizing tasks, managing time effectively, and meeting deadlines
• Strong attention to detail to ensure system stability, security, and data integrity
• A capability to mentor and provide technical guidance to junior engineers and team members
• An ability to lead technical projects and collaborate with cross-functional teams
• A willingness to be on call for emergency support and maintenance when required
• Strong documentation skills for creating and maintaining system configurations, processes, and procedures
• An ability to manage and contribute to multiple projects simultaneously, ensuring timely completion and quality results
• A commitment to staying current with emerging Azure technologies, tools, and industry trends

Professional Certifications

n/a

Years of Professional Experience

20+ years of professional experience

Desired experience

Deep hands-on EDIFECS experience in Electronic Data Interchange X.12 (EDI) Transactions Standards involving key X12 workflows involving the following transactions:

• X.12 medical claims (837, 834, 835, 277, etc)
• 270/271 and 278 transactions
• 999 transactions

Experience with Edifecs

Advanced Azure certifications, including:

• Microsoft Certified: DevOps Engineer Expert
• Azure Administrator Associate
• Azure Security Engineer Associate

Formal Education

Bachelor’s degree in Computer Science, Systems Engineering, Cloud Engineering or a related technical discipline

Citizenship Requirement

U.S. Citizenship required for this specific opportunity

Security Clearance Requirements

Must possess or qualify for a Public Trust (MBI)

CRITICAL NOTES

• SSG will not make assumptions regarding your qualifications. Your answers to the mandatory screening questions must be supported by the information on your resume. Applications with inconsistencies will not be considered
• Recruiters or Third parties will not be considered
• This is a 100% U.S. based remote position. However, candidates from CA, CO, IL, MN, NJ, NY, OR, or WA will not be considered
• This is a W-2 position
• All interviews will be conducted on Microsoft Teams with your camera on; there will be no exceptions
• As part of our screening process, you will be requested to provide a link to your LinkedIn profile

U.S Citizenship is required for this specific opportunity

Syms Strategic Group, LLC is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, marital status, disability, veteran status, sexual orientation, or genetic information.