Senior Azure Administrator / Engineer - HYBRID - Se - HYBRID with Security Clearance

ASD; Washington (District of Columbia); Hybrid; USD 120,000 - 160,000; Full time

Job summary

ASD is seeking a skilled Azure Network Engineer to design and manage Azure networking components. The role requires an active Secret clearance and involves ensuring secure connectivity between cloud and on-prem environments. The position is hybrid in Washington, D.C., requiring on-site work at customer locations at least three days a week.

The ideal candidate will have a Bachelor’s degree and over 10 years of experience in related fields, particularly in Azure networking and infrastructure management with a strong proficiency in DevOps tools.

Qualifications

• 10+ years of related experience required.
• 5+ years of preferred experience in database and data management.
• Experience working in Agile/Scrum environments.

Responsibilities

• Design, implement, and manage Azure networking components.
• Act as the POC for all Azure networking issues.
• Ensure secure and reliable connectivity between cloud and on-prem environments.

Skills

Azure Network Design and Implementation

Infrastructure as Code (IaC)

DevOps tooling

Ansible

PowerShell scripting

Azure Active Directory

Azure Monitor

Education

Bachelor’s degree in Systems Engineering, Computer Science, or related field

Tools

Terraform

Bicep

Azure DevOps

GitHub Actions

Job description

MAJOR RESPONSIBILITIES

• Design, implement, and manage Azure networking components including virtual networks, subnets, NSGs, Azure Firewall, VPN/ExpressRoute, load balancers, and routing.
• Managing ‘Replication Traffic’ over ExpressRoute/VPN and configuration isolation VNET’s for testing.
• Act as the POC for all Azure networking issues, guiding architecture decisions, and advising leadership.
• Ensure secure and reliable connectivity between cloud and on‑prem environments while optimizing performance and availability.
• Responsible for securing infrastructure across cloud and on‑prem environments while supporting system and workload migrations.
• Experience with building and managing Azure infrastructure using DevOps practices and infrastructure‑as‑code tools such as Terraform, Bicep, ARM templates, Azure DevOps, and GitHub Actions.
• Support secure and reliable connectivity across Azure Commercial and Azure IL5 / IL6 environments, including hybrid integrations.
• Utilize automation tools like Ansible or PowerShell scripts to streamline repetitive admin tasks (provisioning new servers, configuring roles/features, or backing up system configurations).

QUALIFICATIONS

• Education: Bachelor’s degree or higher in Systems Engineering, Computer Science, Information Technology, or a closely related technical field.
• Experience: 10+ years of related experience required, with at least 5+ years of preferred experience in database and data management.
• Required Skills:
  • Extensive knowledge of Azure Network Design and Implementation.
  • Experience design and development of network solutions in an Azure Il5 and Il6 environment.
  • Strong Azure networking skills: VNets, NSGs, routing, Azure Firewall, load balancing, ExpressRoute/VPN.
  • Proficiency with IaC and DevOps tooling (Terraform, Bicep, Azure DevOps, GitHub Actions).
  • Understanding of CI/CD concepts and secure pipeline development in controlled cloud environments.
  • Advanced knowledge using Ansible or PowerShell scripts.
  • Experience using Azure Active Directory and Azure Monitor.

DESIRED QUALIFICATIONS

• Experience with two or more of the areas outlined below is preferred but not required:
• Familiarity with Cloud based Database systems.
• Experience using MS Visio for updating diagrams.
• Experience working in Agile/Scrum environments.
• Experience working in Federal or State government environments.
• Ability to work independently and remotely.

CLEARANCE REQUIREMENTS

Must possess active Secret or higher clearance and maintain as a condition of employment.

LOCATION

Hybrid in Washington, D.C.; on-site work at least three days a week at customer location will be required.