Cloud Engineer

Agil3 Technology Solutions (A3T); Quantico Base (VA); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

401k with company match

Paid Holidays

Paid Time Off

Tuition Assistance

Parking/Travel Reimbursement

Job summary

Agil3 Technology Solutions LLC (A3T) seeks an experienced Cloud Engineer to support Microsoft Azure and hybrid cloud environments for DoD missions at Quantico. You will administer Entra ID, manage VNets, storage, security controls, and disaster recovery while ensuring compliance with STIGs and DoD requirements.

Candidates bring 7–10+ years of Azure-focused infrastructure experience, an active DoD Secret clearance, and a Bachelor’s in a technical field.

Qualifications

• 7–10+ years of IT infrastructure, systems engineering, or cloud engineering with significant Azure hands-on experience.
• Active DoD Secret clearance required.
• Bachelor’s degree in Computer Science, IT, Cloud Computing, Engineering, Cybersecurity, or related field.
• Microsoft Certified: Azure Administrator Associate.
• Must meet DoD 8140/DCWF for Advanced proficiency (Security+ or higher).
• Experience designing, administering, and supporting Azure enterprise environments.
• Experience with Entra ID and cloud identity/access management.
• Experience administering Azure VMs, storage, networking, security, monitoring, backup, and recovery.
• Experience with VNets, NSGs, VPNs, and hybrid cloud connectivity.
• Experience with Azure Monitor/Log Analytics.
• Experience implementing Azure Policy for governance.
• Experience with Azure Backup and disaster recovery.
• Experience supporting hybrid on‑premises/Azure environments.
• Experience integrating Azure with Microsoft 365 and enterprise identity services.
• Strong knowledge of Windows Server, AD, DNS and enterprise infrastructure concepts.
• Knowledge of cloud security architecture and least privilege.

Responsibilities

• Engineer, design, and manage Azure cloud environments and services.
• Administer Entra ID and cloud identity/access management.
• Configure VNets, NSGs, VPNs, and hybrid connectivity.
• Monitor Azure infrastructure with Monitor and Log Analytics; create alerts and dashboards.
• Implement Azure Policy and security configurations; apply STIGs and DoD requirements.
• Support backup, recovery, and disaster‑recovery capabilities.
• Collaborate with Cybersecurity on vulnerabilities and configurations.
• Provide guidance and mentorship on Azure and hybrid‑cloud technologies.

Skills

Analytical skills

Problem-solving

Written communication

Verbal communication

Independent work

Education

Bachelor's degree in a technical field

Azure Administrator Associate

Active DoD Secret clearance

DoD 8140/DCWF requirements

Tools

Microsoft Azure

Entra ID

Microsoft 365

Azure Monitor/Log Analytics

Azure Policy

Azure Backup/Site Recovery

PowerShell/Azure CLI/Terraform

ARM/Bicep

Job description

Key Responsibilities

• Engineer, configure, administer, maintain, monitor, and troubleshoot a Microsoft Azure cloud environment.
• Design and maintain secure, reliable, scalable, and highly available cloud services.
• Administer and support Microsoft Entra ID and associated cloud identity and access-management capabilities.
• Support integration between Entra ID, Microsoft 365, Azure resources, and on-premises infrastructure.
• Configure, administer, monitor, and troubleshoot Azure Virtual Networks (VNets) and associated cloud networking services.
• Configure and manage Network Security Groups (NSGs) and other cloud security controls.
• Support ExpressRoute, VPN, and hybrid network connectivity between Azure and on-premises resources.
• Deploy, configure, administer, monitor, and troubleshoot Azure virtual machines and associated computing resources.
• Configure and manage Azure storage resources.
• Monitor cloud infrastructure using Azure Monitor, Log Analytics, and related Azure monitoring capabilities.
• Develop alerts, dashboards, queries, and monitoring solutions to identify availability, capacity, security, and performance issues.
• Implement and maintain Azure Policy and other governance controls to help ensure cloud resources comply with approved technical and security configurations.
• Apply applicable DISA Security Technical Implementation Guides (STIGs) and DoD security requirements to supported cloud resources.
• Coordinate with Cybersecurity personnel to identify, track, and remediate vulnerabilities and configuration deficiencies.
• Implement and maintain cloud backup and recovery capabilities.
• Support Azure Backup and Azure Site Recovery or equivalent approved technologies for continuity and disaster recovery.
• Develop, test, document, and maintain cloud disaster-recovery and service-restoration procedures.
• Use Azure Advisor and other approved tools to identify opportunities to improve reliability, security, performance, operational efficiency, and resource utilization.
• Monitor cloud capacity and performance and recommend changes required to maintain mission availability.
• Support cloud resource provisioning, configuration, migration, upgrade, and decommissioning.
• Assist with migration of appropriate workloads and services between on-premises and cloud environments.
• Support Microsoft 365 integration and cloud-dependent enterprise services.
• Troubleshoot complex issues involving cloud resources, identity, networking, storage, virtual machines, applications, and hybrid connectivity.
• Participate in root-cause analysis for cloud service outages and degraded performance.
• Maintain cloud configuration baselines and support formal change- and configuration-management processes.
• Develop and maintain architecture diagrams, Standard Operating Procedures (SOPs), technical procedures, configuration documentation, and troubleshooting guides.
• Prepare After Action Reports (AARs) for significant outages, upgrades, migrations, security events, and other major cloud activities.
• Identify End-of-Life/End-of-Support technologies and recommend modernization or replacement strategies.
• Provide Tier III cloud escalation support to Systems Engineers, Systems Administrators, Network Engineers, Cybersecurity personnel, and Technical Support staff.
• Provide technical guidance and mentorship regarding Azure and hybrid-cloud technologies.
  

Minimum Experience

• Must have 7–10+ years of progressively responsible IT infrastructure, systems engineering, or cloud engineering experience, including significant hands‑on Microsoft Azure experience.
• Must have an active DoD Secret security clearance.
• Bachelor’s degree in Computer Science, Information Technology, Cloud Computing, Engineering, Cybersecurity, or a related technical discipline.
• Microsoft Certified: Azure Administrator Associate.
• Must meet applicable DoD 8140/DCWF requirements for Work Role 628 at the Advanced proficiency level (Security+ or higher).
• Demonstrated experience designing, administering, and supporting Microsoft Azure enterprise environments.
• Experience with Microsoft Entra ID and cloud identity/access‑management technologies.
• Experience administering Azure Virtual Machines, storage, networking, security, monitoring, backup, and recovery services.
• Experience configuring and troubleshooting VNets, NSGs, VPNs, routing, and hybrid cloud connectivity.
• Experience with Azure Monitor and Log Analytics.
• Experience implementing Azure Policy or comparable cloud governance capabilities.
• Experience with Azure Backup and disaster‑recovery technologies.
• Experience supporting hybrid on‑premises/Azure environments.
• Experience integrating Microsoft Azure with Microsoft 365 and enterprise identity services.
• Strong knowledge of Windows Server, Active Directory, DNS, authentication, and enterprise infrastructure concepts.
• Knowledge of cloud security architecture, identity and access management, least privilege, and security hardening.
• Experience troubleshooting complex issues spanning cloud, network, identity, server, application, and cybersecurity domains.
• Experience developing technical documentation, architecture diagrams, SOPs, engineering procedures, and cloud configuration records.
• Experience working within formal configuration‑and change‑management processes.
• Strong analytical, problem‑solving, written, and verbal communication skills.
• Ability to work independently while supporting a geographically dispersed enterprise environment.

Preferred Qualifications

• Microsoft Certified: Azure Solutions Architect Expert or comparable advanced Azure certification.
• Microsoft certification applicable to identity, Microsoft 365, or cybersecurity.
• CompTIA CySA+, SecurityX/CASP+, CISSP, or comparable cybersecurity certification.
• Experience with PowerShell, Azure CLI, ARM templates, Bicep, Terraform, or other Infrastructure‑as‑Code/automation technologies.
• Experience implementing automated Azure provisioning and configuration‑management processes.
• Experience with Azure Key Vault, managed identities, RBAC, and privileged‑access management.
• Experience with Microsoft Defender for Cloud or related Microsoft security technologies.
• Experience with cloud cost‑management and resource‑optimization practices.
• Experience with VMware and migration of virtualized workloads to cloud environments.
• Familiarity with DISA STIGs, DoD vulnerability management, Zero Trust, RMF, and DoD cloud‑security requirements.
• ITIL Foundation certification or experience operating in an ITIL‑based service environment.
• Experience with ServiceNow or comparable enterprise ITSM platforms.
• Previous USMC, Navy, DISA, or other DoD enterprise networking experience.

Compensation

A3T is committed to offering competitive compensation based on individual qualifications and business needs. The salary range posted for this position represents a reasonable estimate of the expected pay range; however, actual compensation may vary depending on factors such as geographic location, education, certifications, technical skills, relevant experience, knowledge, and overall qualifications. The posted range is intended to reflect the typical salary range for this role within A3T.

Target Salary for this Role: $130,000 - $160,000

A3T is committed to offering competitive compensation based on individual qualifications and business needs. The salary range posted for this position represents a reasonable estimate of the expected pay range; however, actual compensation may vary depending on factors such as geographic location, education, certifications, technical skills, relevant experience, knowledge, and overall qualifications. The posted range is intended to reflect the typical salary range for this role within A3T.

Company Overview

Agil3 Technology Solutions LLC (“A3T”) is a Northern Virginia based, ISO 9001, ISO 20000-1 & ISO 27001 Certified, Women‑Owned (WOSB) and Service‑disabled Veteran‑Owned (SDVOSB) small business. A recent recipient of the prestigious Washington Technology TOP 50 (ranking #9, and on the list for last 4 years!), A3T is experiencing industry leading recognition and growth. In addition to the CEO’s recognition as an “All‑Star Entrepreneur”, A3T is recognized by Inc Magazine as one of the fastest growing companies in the country, by Vet 50 as Fastest Growing Veteran‑Owned Businesses, and is featured in CyberSecurity Ventures / Cybercrime Magazine! “As a go‑to Women‑Owned Cybersecurity company in US and internationally”. As part of our growth, we are looking for YOU to join our growing team.

A3T offers excellent benefits to enhance the work‑life balance, including:

• Medical Insurance
• Dental Insurance
• Vision Insurance
• Life Insurance
• Short Term & Long‑Term Disability
• 401k Retirement Savings Plan with Company Match
• Paid Holidays
• Paid Time Off (PTO)
• Tuition and Professional Development Assistance
• Parking/Travel Reimbursement (metropolitan areas)