Multi-Cloud Engineer SME (Azure/Identity)

Jobtailor; Albuquerque (NM); On-site; USD 70,000 - 105,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Life insurance

Disability insurance (short and long)

PTO

401k with employer match

Professional Development Reimbursement

Job summary

JCS Solutions is seeking a highly skilled Multi-Cloud Engineer SME to support DoD cloud modernization initiatives in Albuquerque, NM. You will design, engineer, implement, and sustain secure Microsoft Azure cloud solutions within classified environments, translating complex mission requirements into scalable architectures.

The role requires active Top Secret clearance with SCI eligibility, DoD 8570/8140 IAT Level II certification, and a Microsoft Azure Solutions Architect Expert credential.

Qualifications

• Active Top Secret clearance with SCI eligibility.
• DoD 8570/8140 IAT Level II certification.
• Microsoft Certified: Azure Solutions Architect Expert certification.
• Minimum of five years designing and implementing Microsoft Azure enterprise cloud solutions.
• Experience architecting hybrid Azure environments with on-premises integration.
• Strong knowledge of Entra ID, governance, and zero-trust security.

Responsibilities

• Architect, design, engineer, and implement secure Microsoft Azure cloud solutions supporting DoD mission requirements.
• Design and deploy green-field Azure environments and hybrid cloud architectures integrating on-premises infrastructure with Azure services.
• Design, implement, and maintain enterprise hybrid identity solutions—Entra ID, Entra Connect, AD, and related identity technologies.
• Engineer secure authentication, authorization, identity governance, and PAM solutions supporting JIT access and ABAC/RBAC within Zero Trust.
• Design Azure Landing Zones, governance frameworks, subscription architectures, and management group strategies following CAF and Well-Architected Framework.
• Engineer IaC solutions using Terraform, Azure Bicep, ARM Templates, or similar.
• Design secure Azure networking with VNets, ExpressRoute, VPN Gateway, Azure Firewall, Private connectivity.
• Implement Azure-native monitoring, backup, DR, governance, and security capabilities.
• Configure Entra ID Governance features: Access Reviews, Entitlement Management, Lifecycle Workflows, Conditional Access, PIM.
• Collaborate with cybersecurity, systems engineering, networking, and application teams to deliver integrated cloud solutions.
• Support ATO activities and RMF/STIG compliance.
• Produce architecture docs, diagrams, and SOPs.
• Troubleshoot and resolve complex cloud infra and security issues.
• Evaluate emerging Microsoft cloud technologies for mission objectives.

Skills

Microsoft Azure

Hybrid cloud

Identity management

Zero Trust

Terraform

IaC

Azure Bicep

ARM Templates

Azure CLI

PowerShell

Python

Entra ID

PIM

Education

Bachelor's degree in Computer Science/Engineering/IT

Master's degree (optional)

DoD 8570/8140 IAT Level II

Microsoft Certified: Azure Solutions Architect Expert

Tools

Terraform

Azure Bicep

ARM Templates

Azure CLI

PowerShell

Python

GitHub Enterprise

Azure DevOps

AKS

Job description

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!

Job Summary

JCS Solutions is seeking a highly skilled Multi-Cloud Engineer SME to support mission-critical Department of Defense (DoD) cloud modernization initiatives in Albuquerque, New Mexico. This position will serve as a senior technical contributor responsible for designing, engineering, implementing, and sustaining secure Microsoft Azure cloud solutions within classified enterprise environments. The successful candidate will possess deep expertise in Microsoft Azure architecture, hybrid cloud engineering, and enterprise identity management. This role requires an experienced engineer capable of translating complex mission requirements into secure, scalable cloud solutions while maintaining a hands‑on engineering role throughout the solution lifecycle. The ideal candidate will have experience supporting DoD cloud initiatives, implementing hybrid identity solutions, and engineering cloud environments that align with Zero Trust principles and Department of Defense cybersecurity requirements.

Clearance: Must have Active Top Secret security clearance with eligibility for access to Sensitive Compartmented Information (SCI).

What’s in it for you:

• Join a premier technology firm specializing in innovative solutions.
• Be part of a collaborative, inclusive, and innovative work culture.
• Enjoy tremendous growth potential in a high-performing team environment.
• A robust benefits package:
  • Health, dental, and vision insurance
  • Life insurance
  • Short-and-long term disability
  • Paid time off (PTO)
  • 401k retirement plan with employer match
  • Annual Professional Development Reimbursement Program
  • And more!

What you will do:

• Architect, design, engineer, and implement secure Microsoft Azure cloud solutions supporting DoD mission requirements.
• Design and deploy green-field Azure environments and hybrid cloud architectures integrating on-premises infrastructure with Azure services.
• Design, implement, and maintain enterprise hybrid identity solutions utilizing Microsoft Entra ID, Microsoft Entra Connect, Active Directory, and related identity technologies.
• Engineer secure authentication, authorization, identity governance, and privileged access management (PAM) solutions supporting just-in-time (JIT) access, attribute- and role- based access controls (ABAC/RBAC) and similar Zero Trust principles and objectives.
• Design Azure Landing Zones, governance frameworks, subscription architectures, and management group strategies following Microsoft Cloud Adoption Framework (CAF) and Azure Well-Architected Framework guidance.
• Engineer Infrastructure as Code (IaC) solutions using Bicep, ARM Templates, Terraform, or comparable automation technologies.
• Design secure Azure networking solutions utilizing Virtual Networks, ExpressRoute, VPN Gateway, Azure Firewall, Virtual WAN, and private connectivity services.
• Implement Azure-native monitoring, backup, disaster recovery, governance, and security capabilities.
• Configure and administer Microsoft Entra ID Governance capabilities, including Access Reviews, Entitlement Management, Lifecycle Workflows, Conditional Access, and Privileged Identity Management (PIM).
• Collaborate with cybersecurity, systems engineering, networking, and application development teams to deliver integrated cloud solutions.
• Support Authority to Operate (ATO) activities and ensure compliance with DoD cybersecurity policies, Risk Management Framework (RMF), and applicable Security Technical Implementation Guides (STIGs).
• Produce architecture documentation, engineering diagrams, implementation guides, standard operating procedures, and technical documentation.
• Troubleshoot and resolve complex cloud infrastructure, networking, identity, and security issues.
• Evaluate emerging Microsoft cloud technologies and recommend technical solutions supporting customer mission objectives.

What you will bring:

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical discipline and 12 – 15 years of prior relevant experience or Masters with 10 – 13 years of prior relevant experience. May possess a Doctorate in technical domain. Specific experience, education and training may be considered in lieu of degree.
• Active Top Secret security clearance with eligibility for access to Sensitive Compartmented Information (SCI).
• Current DoD 8570/8140 IAT Level II certification.
• Microsoft Certified: Azure Solutions Architect Expert certification.
• Minimum of five years of experience designing and implementing Microsoft Azure enterprise cloud solutions.
• Demonstrated experience architecting hybrid Azure environments integrating enterprise on-premises infrastructure with Azure cloud services.
• Advanced experience with Microsoft Entra ID, Microsoft Entra Connect, Active Directory, AWS IAM, hybrid identity synchronization, federation, and enterprise identity management with enterprise Identity, Credential, and Access Management (E-ICAM) solutions.
• Experience implementing Microsoft Entra ID Governance capabilities, including:
  • Entra Conditional Access
  • Policy Information Points and Policy Engines
  • Access Reviews
  • Entitlement Management
  • Lifecycle Workflows
  • Identity lifecycle automation
• Experience implementing Azure Landing Zones and enterprise governance models.
• Strong understanding of Azure networking, storage, compute, governance, and security services.
• Experience with Infrastructure as Code utilizing Terraform, Azure Bicep, ARM Templates, or similar technologies.
• Experience with Azure CLI, PowerShell, and scripting using Python or comparable automation languages.
• Strong understanding of Zero Trust architecture, identity-centric security, and cloud security best practices.
• Excellent written and verbal communication skills.

How will you wow us:

• AWS Certified Solutions Architect – Professional certification.
• Experience integrating Azure and AWS within hybrid multi-cloud enterprise environments.
• Familiarity with the Department of Defense Joint Warfighting Cloud Capability (JWCC) and DoD Joint Tenant cloud environments.
• Understanding of the DoD Enterprise Cloud Strategy and cloud modernization initiatives.
• Familiarity with the Department of Defense Enterprise Identity, Credential, and Access Management (E-ICAM) architecture and its role in enterprise identity federation, identity governance, Zero Trust implementation, and secure access to DoD cloud environments.
• Experience with Azure Arc, Azure Stack HCI, Azure Local, and hybrid cloud management technologies.
• Experience with Azure Kubernetes Service (AKS) and cloud-native container platforms.
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Intune, and Microsoft Purview.
• Experience implementing DevSecOps pipelines using Azure DevOps and/or GitHub Enterprise. Experience with Kubernetes, Azure Kubernetes Service (AKS), Amazon Elastic Kubernetes Service (EKS), or Red Hat OpenShift.
• Experience with Azure Arc or other hybrid cloud management platforms.
• Familiarity with DevSecOps methodologies and CI/CD automation pipelines.
• Previous experience serving as a technical lead or mentoring cloud engineering teams.

JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.

JCS is both a Great Place to Work and a Top Places to Work certified company.

Our employees embody our core values, and we are looking for others who do too!

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to our care.

At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $70,000 - $105,000.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.