Cloud Engineer

Stellar Professionals; Mechanicsville (VA); Remote; USD 90,000 - 130,000; Full time

Job summary

Virginia Department of Transportation (VDOT) in Mechanicsville, VA seeks an Azure Cloud Engineer for fully remote contract work. Responsibilities include maintaining Azure cloud infrastructure for tolling workloads, managing backup and DR with Rubrik, and administering Secret Server vaults and Entra ID SSO.

The role requires security-focused governance consistent with PCI-DSS and Office 365/Power Apps support.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or equivalent work history.
• 5+ years Windows Server Administration (Windows Server 2019+).
• 3+ years Azure administration and engineering.
• 3+ years supporting VDOT or E-ZPass tolling workloads.
• 2+ years Rubrik backup and DR for Azure workloads.
• 2+ years infrastructure & networking experience.
• 2+ years Secret Server administration and credential automation.
• 2+ years using PowerShell or Python scripting.
• 1+ year Entra ID (Azure AD) and SSO integrations.
• 1+ year Office 365 and Power Apps administration.
• 1+ year PCI-DSS or similar compliance experience.
• 1+ year enterprise cloud governance and tagging standards.

Responsibilities

• Maintain and implement Azure cloud infrastructure for tolling workloads with security controls.
• Support E-ZPass Virginia tolling applications, including diagnostics of transaction flows.
• Manage Rubrik backup/recovery policies for Azure IaaS/PaaS and DR validation.
• Administer Secret Server vaults, manage Azure Key Vault, and configure Entra ID SSO.
• Monitor workloads with Azure Monitor; triage incidents and perform maintenance.
• Create topology docs for network and system architectures; support Office 365/Power Apps.
• Ensure PCI-DSS compliance and maintain audit trails around transaction data.

Skills

Azure Administration

PowerShell

Python

IAM / Entra ID

PCI-DSS compliance

Cloud governance

Backup & DR

Education

Bachelor's degree in CS / IS / equivalent

Tools

Terraform

Bicep

ARM

Azure DevOps

Jenkins

Git

Docker

Kubernetes

Job description

We are seeking an Azure Cloud Engineer to join the Tolling Engineering and Operations team at the Virginia Department of Transportation (VDOT) in Mechanicsville, VA. This fully remote role provides cloud infrastructure engineering, application support, and rotational help-desk support for VDOT E-ZPass Virginia tolling systems. The engineer will maintain Azure cloud resources, manage Rubrik backup/recovery policies, administer Secret Server privileged vaults, configure Entra ID SSO/Office 365 services, and ensure compliance with PCI-DSS regulatory standards.

Client: Virginia Department of Transportation (VDOT)

Location: 9120 Lockwood Blvd, Mechanicsville, VA 23116

Work Arrangement: Fully Remote

Role Type: Contract (10/19/2026 06/30/2027)

Submission Deadline: N/A (Urgent Requirement)

Interview Process: Web Cam Interview Only

Shift: EST Business Hours

Work Authorization & Compliance Note: Candidates must physically reside within the United States (Commonwealth of Virginia security policy prohibiting offshore contractors). Position requires a fingerprint-based background check.

Key Responsibilities

• Cloud Operations & Administration: Maintain and implement Azure cloud infrastructure (IaaS/PaaS/SaaS) for tolling workloads; enforce Virginia government security, network controls, naming conventions, and least-privilege IAM policies.
• VDOT Tolling Workload Support: Support E-ZPass Virginia tolling applications, performing diagnostics on transaction flows, roadway sensor data ingestion, and cloud application performance tuning.
• Backup & Disaster Recovery: Implement and manage Rubrik backup and recovery for Azure IaaS/PaaS, including snapshot lifecycle tuning, policy sets, and DR validation.
• Secrets & Identity Governance: Administer SecretServer privileged access vaults (credential rotation, workflow troubleshooting), manage Azure Key Vault, certificates, and configure Entra ID (Azure AD) Single Sign-On (SSO).
• Monitoring & Incident Response: Monitor application workloads using Azure Monitor and Log Analytics; perform root-cause analysis, triage production incidents, and execute planned off-hours maintenance routines.
• Productivity & Virtualization Tools: Support Office 365 services, Power Apps, and Azure Virtual Desktops (AVD); create network and system topology documentation.
• Compliance & Integration: Ensure systems comply with PCI-DSS frameworks and maintain clear audit trails across financial transaction data movement.

Required Qualifications & Experience

• Education: Bachelor's degree in Computer Science, Information Systems, or equivalent work history.
• Windows Server Administration: 5+ years of experience in Microsoft Windows environments (Windows Server 2019+).
• Azure Administration & Engineering: 3+ years core Microsoft Azure administration and engineering experience.
• VDOT / E-ZPass Tolling Workloads: 3+ years directly supporting VDOT or E-ZPass Virginia tolling applications, transaction flows, and roadway sensor data ingestion.
• Rubrik Cloud Backup & DR: 2+ years implementing Rubrik backup & recovery for Azure IaaS/PaaS workloads.
• Infrastructure & Networking: 2+ years supporting server infrastructure, firewalls, certificates, load balancers, and hybrid networking.
• Secret Server Administration: 2+ years administering Secret Server privileged access vaults and credential automation.
• PowerShell / Python Scripting: 2+ years writing automated scripts using PowerShell or Python.
• Identity & Access Management: 1+ year managing Entra ID (Azure AD) and Single Sign-On (SSO) integrations.
• Office 365 & Power Apps: 1+ year administering Office 365 platforms and Power Apps environments.
• PCI Regulatory Compliance: 1+ year operating within PCI-DSS or comparable compliance frameworks.
• Enterprise Governance: 1+ year applying cloud governance and tagging standards.

Preferred Qualifications

• Experience with Infrastructure as Code (Terraform, Bicep, or ARM) and CI/CD tools (Azure DevOps, Jenkins, Git).
• Experience with containerization and orchestration (Docker, Kubernetes).
• Hands-on administration of Azure Virtual Desktops (AVD).
• Cloud cost analysis and optimization experience.
• Active Azure certifications (e.g., AZ-104, AZ-305, or similar)