DELIVERY Senior Cloud Engineer – Microsoft Azure Reston, VA

TechSur Solutions, LLC; Reston (VA); On-site; USD 150,000 - 165,000; Full time

Job summary

TechSur Solutions, LLC seeks a Senior Cloud Engineer with deep Microsoft Azure expertise to design, build, and operate a federal customer’s Azure cloud foundation. You will implement landing zones, governance, and hub-and-spoke networking aligned with enterprise architecture.

After build-out, you will own day-to-day health of the Azure environment: monitoring, patching, cost hygiene, and incident response. You will automate through IaC, collaborate with SAIC across four cloud providers, and help

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 9 years of experience deploying and configuring cloud environments, including significant hands-on Azure work.
• Production experience with Infrastructure-as-Code using Terraform and/or Bicep (ARM).
• Hands-on experience with Azure landing zones, VNet design, Azure Firewall, and ExpressRoute or site-to-site VPN.
• Experience administering Microsoft Entra ID, RBAC, and single sign-on federation (SAML 2.0/OIDC).
• Experience monitoring, patching, and troubleshooting Windows and Linux workloads in Azure.
• Working knowledge of NIST SP 800‑53 security controls in a federal environment.
• Ability to obtain and maintain the background investigation required by the federal customer.

Responsibilities

• Design and deploy Azure landing zones using the Cloud Adoption Framework, including management groups, subscriptions, and hub-and-spoke or Virtual WAN networking with DNS.
• Build and maintain Infrastructure-as-Code (Terraform, Bicep) and GitOps workflows for production, integration, development, and sandbox environments.
• Configure Microsoft Entra ID, RBAC, and federation with the customer’s identity provider using SAML 2.0 and OIDC.
• Enforce security and compliance guardrails with Azure Policy, Defender for Cloud, and Sentinel per NIST 800-53 Rev 5.
• Apply the enterprise tagging strategy for asset management, cost tracking, and chargeback/showback using Azure Cost Management and Advisor.
• Monitor environments with Azure Monitor and tools like Datadog, Splunk, and Dynatrace; integrate with ServiceNow.
• Perform patching (Azure Update Manager), routine maintenance, capacity planning, and incident response in 24/7 operations.
• Design and test high availability, Azure Backup, and Site Recovery for cloud workloads.
• Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.

Skills

Azure

Terraform

Bicep

Azure RBAC

SAML 2.0

OIDC

GitOps

Monitoring

Patching

Cost management

Education

Bachelor's degree in CS/IT/Engineering

Tools

Terraform

Bicep

Azure Policy

Azure Monitor

Datadog

Splunk

Dynatrace

ServiceNow

GitHub Actions

Job description

• Active Government Security Clearance: No
• Compensation: USD 150,000 - USD 165,000 - yearly

Company Description

TechSurSolutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency.Based in the DC metropolitan area,TechSurspecializes in advanced cloud services, modernization for both ITstructuresand applications, leveraging Agile development, and Data Analytics.Since we were formed inAugust of2016,we have supported multiple impactful and excitinggovernment programs.

Job Description

TechSur is seeking a Senior Cloud Engineer with deep Microsoft Azure expertise to design, build, and operate a federal customer's Azure cloud foundation. You will implement Azure landing zones, management group and subscription hierarchies, hub-and-spoke networking, and Entra ID federation that follow the customer's enterprise, cloud-agnostic architecture.

After build-out, you will own day-to-day health of the Azure environment: monitoring, patching, cost hygiene, and incident response. You will automate through Infrastructure-as-Code, work alongside customer and SAIC engineers across all four cloud providers, and help customer IT teams adopt Azure safely.

Key Responsibilities

• Design and deploy Azure landing zones using the Cloud Adoption Framework, including management groups, subscriptions, and hub-and-spoke or Virtual WAN networking integrated with the customer's WAN and DNS.
• Build and maintain Infrastructure-as-Code (Terraform, Bicep) and GitOps workflows that provision consistent production, integration, development, and sandbox environments.
• Configure Microsoft Entra ID, RBAC, and federation with the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles.
• Enforce security and compliance guardrails with Azure Policy, Microsoft Defender for Cloud, and Microsoft Sentinel against NIST SP 800-53 Rev 5 and customer security standards.
• Apply the enterprise tagging strategy for asset management, cost tracking, and chargeback/showback using Azure Cost Management and Advisor.
• Monitor environments with Azure Monitor and enterprise tools such as Datadog, Splunk, and Dynatrace; integrate events, incidents, and changes with ServiceNow.
• Perform patching (Azure Update Manager), routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support.
• Design and test high availability, Azure Backup, and Azure Site Recovery for cloud workloads.
• Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.

Qualifications

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 9 years of experience deploying and configuring cloud environments, including significant hands‑on Azure work.
• Production experience with Infrastructure-as-Code using Terraform and/or Bicep (ARM).
• Hands‑on experience with Azure landing zones, VNet design, Azure Firewall, and ExpressRoute or site‑to‑site VPN.
• Experience administering Microsoft Entra ID, RBAC, and single sign-on federation (SAML 2.0/OIDC).
• Experience monitoring, patching, and troubleshooting Windows and Linux workloads in Azure.
• Working knowledge of NIST SP 800‑53 security controls in a federal environment.
• Ability to obtain and maintain the background investigation required by the federal customer.

Preferred Qualifications

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or DevOps Engineer Expert (AZ-400).
• Microsoft Certified: Azure Security Engineer Associate (AZ-500) or HashiCorp Certified Terraform Associate.
• Experience in Azure Government or FedRAMP Moderate/High environments, including support for ATO packages.
• Working knowledge of AWS, Google Cloud, or Oracle Cloud Infrastructure.
• Experience with Azure DevOps or GitHub Actions pipelines, Ansible, and policy‑as‑code.
• Experience integrating Azure tooling with ServiceNow ITSM and CMDB.
• Prior support of a civilian federal agency.

Additional Information

All your information will be kept confidential according to EEO guidelines.