Senior Azure Cloud/DevOps Engineer - Interim Secret or Higher Required

Itc-Federa; Washington (District of Columbia); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health, Dental & Vision

401(k)

Education reimbursement

Job summary

ITC Federal is seeking a Senior Azure Cloud/DevOps Engineer to support a mission-critical federal program in downtown Washington, DC. This hybrid role requires three days onsite weekly and hands-on IaC ownership using Terraform, Azure, and GitLab.

You will build and secure Azure environments, deploy AVD, automate pipelines, and partner with security and program staff to meet RMF/NIST controls while delivering reliable cloud services for government customers.

Qualifications

• 5+ years of cloud/DevOps or systems engineering with substantial hands-on Microsoft Azure experience.
• Strong Terraform experience with writing and maintaining modules.
• PowerShell scripting for automation and configuration.
• Experience building and Troubleshooting CI/CD pipelines in GitLab.
• Hands-on Azure Virtual Desktop production experience.
• Onsite in downtown Washington, DC three days per week.

Responsibilities

• Design, deploy, and maintain Azure infrastructure (VMs, VNets, Storage, Azure AD).
• Manage Azure networking (NSGs, load balancers, VPN/ExpressRoute).
• Develop and maintain Terraform modules and templates.
• Automate tasks with PowerShell, Bash, YAML/JSON, and GitLab pipelines.
• Deploy, configure, and manage AVD environments (host pools, session hosts, FSLogix).
• Build and troubleshoot CI/CD pipelines in GitLab.
• Implement secure cloud practices per FedRAMP, NIST, RMF; monitor with Azure Monitor.
• Collaborate with engineering, security, and program staff to advance modernization.

Skills

Cloud engineering

DevOps

Azure experience

Terraform expertise

PowerShell scripting

GitLab CI/CD

Azure Virtual Desktop

Networking (VNets)

Tools

Terraform

PowerShell

GitLab

FSLogix

Azure Monitor

Azure Virtual Desktop

Job description

Overview

JOB TITLE: Senior Azure Cloud/DevOps Engineer

GOVERNMENT AGENCY: Department of State

POSITION INFORMATION: Full-Time Position; Government contractor supporting federal agency clients

LOCATION: Downtown Washington, DC (Hybrid); 3 days onsite per week

BENEFITS: Health, Dental and Vision, 401(k), Flexible Spending Account (FSA), 11 Paid Federal Holidays, PTO, education reimbursement

CLEARANCE: Must have, at minimum, an active Interim Secret security clearance, with the ability to obtain and maintain a final Top-Secret clearance.

ITC Federal, LLC (ITC) connects technology advancements in automation and AI, customer experience, and financial services to solve government mission challenges, enabling smoother operational efficiency and bolstering national security. We leverage the latest technology innovations and proven approaches to better serve the mission and support the DHS, DOJ, and DoW workforce, customers, and programs, regardless of scale or complexity. ITC is located in Fairfax, VA and offers outstanding compensation and benefits plan and a challenging and rewarding professional work environment.

ITC is seeking a Senior Azure Cloud/DevOps Engineer to help run and modernize the Azure environment behind a mission-critical federal program in downtown Washington, DC. This is a Terraform-first role, not a ticket queue: the engineer will own infrastructure as code end to end—writing the Terraform, building the GitLab pipelines that ship it, and standing up the Azure Virtual Desktop (AVD) environment a live user base depends on every day. The engineer will join a small, senior, hands-on team with direct access to the customer, where proposed improvements go straight to the person who can approve them. ITC values demonstrated work over years of experience; candidates who can do the work described below are encouraged to apply even if their background does not align perfectly.

WHY THIS ROLE

• Real IaC ownership. Terraform is the primary tool here, not an aspiration in a roadmap deck. You’ll write it, review it, and own the modules.
• A stack you can point to later. Azure core services, Terraform, GitLab CI/CD, PowerShell, and AVD at production scale—a combination that is hard to get hands-on time with and that travels well.
• Visible impact. The environment you build is the environment the mission runs on, and you’ll hear about your work from the people who use it.
• Room to build, not just maintain. This is an active modernization effort, with greenfield work alongside the operational load.
• A team that’s actually in the room. Working onsite with the customer and each other four days a week means fast decisions, real whiteboarding, and none of the multi-day message loops that stall cloud work.

Responsibilities

RESPONSIBILITIES:

• Azure Cloud Engineering
  • Design, deploy, and maintain Azure infrastructure, including virtual machines, VNets, Storage, Azure Active Directory (Azure AD), and PaaS services.
  • Manage and optimize Azure networking, including VNets, network security groups (NSGs), load balancers, and VPN/ExpressRoute connectivity.
• Infrastructure as Code
  • Develop and maintain the Terraform modules and templates that define the environment.
  • Automate everything worth automating using PowerShell, Bash, YAML/JSON, and GitLab pipelines.
• Azure Virtual Desktop
  • Deploy, configure, and manage AVD environments, including host pools, session hosts, FSLogix profile containers, and Azure AD/Microsoft 365 integrations.
  • Troubleshoot and tune AVD performance for a live user community.
• CI/CD & Automation
  • Build, maintain, and troubleshoot CI/CD pipelines in GitLab.
  • Automate cloud operations, system configuration, and monitoring.
• Security & Compliance
  • Implement secure cloud practices for federal environments, including role-based access control (RBAC), Azure Key Vault, identity and access management (IAM), and encryption standards.
  • Maintain alignment with NIST, RMF, FedRAMP, and agency-specific security controls.
• Monitoring & Reliability
  • Use Azure Monitor, Log Analytics, and related tooling to track system health, diagnose issues, and meet service level agreements (SLAs).
• Collaboration
  • Work directly with engineering, security, and program staff to advance the cloud modernization effort.

Qualifications

REQUIRED:

• 5+ years of experience in cloud engineering, DevOps, or systems engineering, with substantial hands‑on Microsoft Azure experience.
• Demonstrated depth with Azure core services and architecture, including designing and operating production environments.
• Strong hands‑on Terraform experience, including writing and maintaining modules other engineers depend on. This is the most heavily weighted requirement.
• Solid PowerShell scripting ability for automation and system configuration.
• Working experience building and troubleshooting CI/CD pipelines in GitLab.
• Hands‑on experience with Azure Virtual Desktop in a production environment, including host pools, session hosts, and FSLogix.
• Experience supporting Azure networking, including VNets, routing, NSGs, and VPN/ExpressRoute.
• Familiarity with federal cloud security frameworks such as FedRAMP, NIST, and RMF.
• Strong troubleshooting skills and the ability to communicate technical reasoning to both technical and non‑technical audiences.
• Ability to work onsite in downtown Washington, DC three days per week.

PREFERRED:

• Experience supporting DoD or federal agency cloud environments.
• Experience with Docker and Azure Kubernetes Service (AKS).
• Experience with Azure serverless tooling, including Azure Functions, Logic Apps, and Event Grid.
• Cost optimization experience using Azure Cost Management or FinOps practices.
• Relevant Azure certifications (AZ-104, AZ-400, or AZ-500).

SECURITY CLEARANCE REQUIREMENTS

• Must have, at minimum, an active Interim Secret security clearance, with the ability to obtain and maintain a final Top-Secret clearance.
• U.S. Citizenship is required due to the nature of this government contract.

WORK ENVIRONMENT AND PHYSICAL DEMANDS

This is a hybrid position based in downtown Washington, DC, with three days per week onsite alongside the customer and the engineering team. Onsite collaboration is central to how this team works and is a standing condition of the position.

ITC Federal is an equal opportunity employer and will not discriminate against any application for employment on the basis of age, race, color, gender, national origin, religion, creed, disability, veteran status, marital status, sexual orientation, genetic information, military status, disability, or sex including pregnancy and childbirth or related medical condition or on any other basis prohibited by law.