Hybrid Multi-Cloud Engineer SME - Azure Endpoint Management with Security Clearance

Sarela Technology Solutions; Fort Belvoir (VA); On-site; USD 199,000 - 209,000; Full time

Job summary

SarelaTech is seeking a highly qualified Hybrid Multi-Cloud Engineer SME to support DoD programs at Fort Belvoir, VA or Albuquerque, NM. You will architect, engineer, and sustain secure hybrid cloud solutions across Azure and AWS, with hands-on implementation of IaC and endpoint security, while mentoring junior engineers.

Active DoD Top Secret/SCI clearance is required, along with IAT Level II certification and Azure Solutions Architect Expert.

Qualifications

• Active DoD Top Secret/SCI clearance required.
• DoD 8570/8140 IAT Level II certification required.
• Microsoft Azure Solutions Architect Expert certification required.
• Minimum five years of enterprise cloud design/implementation experience.
• Extensive Azure infrastructure and platform services experience.
• Hybrid cloud integration of on-premise with Azure and AWS.
• Hands-on IaC experience with Terraform, Bicep, ARM or CloudFormation.
• Proficient in automation via PowerShell, Python, Bash, Azure CLI and AWS CLI.
• Strong knowledge of RMF, NIST guidance, and DoD cybersecurity policies.
• Excellent written and verbal communication; able to mentor junior engineers.

Responsibilities

• Architect and implement secure hybrid cloud solutions on Azure and AWS.
• Design greenfield cloud environments aligning with DoD requirements.
• Develop secure, scalable cloud architectures with Zero Trust principles.
• Implement IaC using Terraform, Bicep, ARM Templates, CloudFormation.
• Manage Intune/Defender/ Purview/ AV D environments for endpoint security.
• Integrate on-prem infrastructure with cloud networks and security controls.
• Implement monitoring, backup, DR and security services.
• Automate deployments with PowerShell, Python, Azure CLI, AWS CLI.
• Collaborate with cybersecurity, systems engineering, and application teams.
• Support accreditation activities and RMF/NIST compliance.

Skills

Hybrid cloud

Azure

AWS

Terraform

IaC

PowerShell

Python

RMF & NIST

Zero Trust

Endpoint management

DoD TS/SCI

Cloud networking

Communication

Education

Bachelor's degree in CS/IS/Engineering

Tools

Azure Bicep

ARM Templates

CloudFormation

Azure CLI

AWS CLI

Kubernetes

AKS/EKS/OpenShift

Job description

SarelaTech is seeking a highly qualified Hybrid Multi-Cloud Engineer SME to support mission-critical Department of Defense (DoD) programs Fort Belvoir, VA or Albuquerque, New Mexico. The successful candidate will serve as a senior technical contributor responsible for architecting, engineering, implementing, and sustaining secure hybrid cloud solutions across Microsoft Azure and Amazon Web Services (AWS). This position requires both strategic cloud architecture expertise and hands-on engineering experience in designing and deploying modern cloud infrastructure, endpoint management, and security solutions within highly secure enterprise environments. The ideal candidate is an experienced cloud engineer who thrives in fast-paced environments, enjoys solving complex technical challenges, and is capable of developing greenfield cloud solutions while collaborating with cross-functional engineering and cybersecurity teams. This position may also provide technical leadership and mentoring to junior cloud engineers. Clearance: Must have Active DoD Top Secret security clearance with eligibility for Sensitive Compartmented Information (SCI) access.

Primary Responsibilities

• Architect, design, engineer, and implement secure hybrid cloud solutions utilizing Microsoft Azure and AWS.
• Design and deploy greenfield cloud environments supporting Department of Defense mission requirements.
• Develop secure, scalable, and resilient cloud architectures aligned with DoD cybersecurity guidance and Zero Trust principles.
• Design and implement Infrastructure as Code (IaC) solutions utilizing Terraform, Azure Bicep, ARM Templates, CloudFormation, or similar technologies.
• Design and administer Microsoft Intune, Microsoft Defender for Endpoint, Defender for Server, and Defender for Cloud, Microsoft Purview, and Azure Virtual Desktop (AVD) environments supporting enterprise endpoint management and security.
• Engineer secure networking solutions integrating on-premises infrastructure with Azure and AWS cloud environments.
• Implement cloud-native monitoring, logging, backup, disaster recovery, and security services.
• Automate cloud deployments and operational processes using PowerShell, Python, Azure CLI, AWS CLI, or similar scripting tools.
• Collaborate with cybersecurity, systems engineering, networking, and application development teams to deliver integrated cloud solutions.
• Support system accreditation activities and ensure compliance with DoD security policies, NIST guidance, and Risk Management Framework (RMF) requirements.
• Evaluate emerging cloud technologies and recommend innovative technical solutions supporting mission objectives.
• Provide technical mentorship and guidance to junior engineers and support technical leadership responsibilities as required.

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical discipline with 12+ years of relevant experience. Additional experience may be considered in lieu of a degree.
• Active DoD Top Secret/SCI Security Clearance.
• Current DoD 8570/8140 IAT Level II certification (Security+, CySA+, CCNA Security, or equivalent).
• Microsoft Certified: Azure Solutions Architect Expert certification.
• Minimum of five (5) years of experience architecting and implementing enterprise cloud solutions.
• Extensive experience designing and deploying Microsoft Azure infrastructure and platform services.
• Demonstrated experience architecting hybrid cloud environments integrating on-premises infrastructure with Microsoft Azure and AWS.
• Hands-on experience implementing and administering: *
• Microsoft Intune* Microsoft Defender for Endpoint* Microsoft Purview* Azure Virtual Desktop (AVD)
• Experience managing enterprise endpoint security, device compliance, application deployment, endpoint configuration, data governance, information protection, and Data Loss Prevention (DLP).
• Experience with Infrastructure as Code (Terraform, Azure Bicep, ARM Templates, CloudFormation, or equivalent).
• Experience automating cloud administration through PowerShell, Python, Bash, Azure CLI, and/or AWS CLI.
• Strong understanding of cloud networking, enterprise security, Zero Trust architecture, NIST cybersecurity guidance, and RMF.
• Excellent written and verbal communication skills.
• Ability to work effectively within dynamic, mission-focused engineering organizations.
• Familiarization with cloud connected endpoints, remote users, virtual devices, and non-persistent endpoints.

Desired Qualifications

• AWS Certified Solutions Architect - Professional certification.
• Additional AWS Professional or Specialty certifications.
• Experience supporting Department of Defense cloud modernization initiatives.
• Familiarity with the Department of Defense Joint Warfighting Cloud Capability (JWCC), DoD Joint Tenant environments, or other enterprise cloud initiatives.
• Understanding of the DoD Enterprise Cloud Strategy and cloud adoption across the Joint Force.
• Familiarization with Trellix and Tanium in on-prem environments.
• Experience supporting Zero Trust implementation initiatives within DoD environments.
• Experience with Windows 365 Cloud PC.
• Experience with Kubernetes, Azure Kubernetes Service (AKS), Amazon Elastic Kubernetes Service (EKS), or Red Hat OpenShift.
• Experience with Azure Arc or other hybrid cloud management platforms.
• Familiarity with DevSecOps methodologies and CI/CD automation pipelines.
• Previous experience serving as a technical lead or mentoring cloud engineering teams. Compensation: $199,000.00 - $209,000.00 per year Sarela Technology Solutions, LLC is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on any basis or status protected under federal, state, or local law