Senior Azure Cloud & DevSecOps Engineer (TS/SCI)

HyerTek, Inc.; Washington (District of Columbia); On-site; USD 145,000 - 187,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with employer contribution

Paid time off (PTO) and companyolidays

Professional development and certific…

Life and disability insurance

Job summary

HyerTek, Inc. in the Washington DC metro area seeks a Senior Azure Cloud & DevSecOps Engineer to design, build, secure, and operate Azure Government environments and delivery pipelines.

You will own the full lifecycle from landing zones to hardened container builds and automated security gates, while collaborating with cybersecurity teams and government stakeholders. The role emphasizes end-to-end automation, evidence for ATO, and AI-assisted development tools used under careful validation.

Qualifications

• 5+ years of hands-on cloud, infrastructure, or DevSecOps engineering experience.
• Strong experience designing, deploying, and operating solutions in Microsoft Azure.
• Hands-on experience with Azure Government or another regulated government-cloud environment.
• Strong knowledge of Azure networking, identity and access management, compute, storage, security, monitoring, and governance.
• Experience implementing secure landing zones, subscription structures, network segmentation, access controls, and centralized logging.
• Experience with Microsoft Entra ID, Azure RBAC, managed identities, Key Vault, Azure Policy, Azure Monitor, and Log Analytics.
• Proficiency with Infrastructure as Code using Terraform, Bicep/ARM, or a comparable technology.
• Experience designing and maintaining CI/CD pipelines in GitHub Enterprise (GitHub Actions, reusable workflows, branch protection, self-hosted runners) and/or Azure DevOps.
• Production experience with Kubernetes platforms such as AKS or OpenShift, including building secure container images with hardened base images, multi-stage builds, vulnerability scanning, and non-root runtimes.
• Experience integrating automated security scanning into CI/CD pipelines.
• Working knowledge of secure software supply-chain practices, including SBOM generation, artifact signing, and provenance attestation.
• Demonstrated experience applying DISA STIGs or comparable federal security configuration baselines in cloud or infrastructure environments.
• Familiarity with the DoW Cloud Computing SRG, RMF, and NIST SP 800-53.
• Working knowledge of Windows and Linux administration, including command-line troubleshooting and system hardening.
• Strong scripting and automation skills using PowerShell, Azure CLI, Python, or comparable language.
• Understanding of least-privilege access, encryption, secrets management, vulnerability management, backup, and disaster recovery.
• Demonstrated proficiency using AI-assisted development platforms (e.g., OpenAI, Claude, Gemini, Microsoft Copilot), with the judgment to review and validate AI-generated code and documentation.
• Strong troubleshooting, documentation, and stakeholder communication skills.
• Ability to work independently and collaboratively across multiple concurrent engagements.
• DoW 8140-aligned IAT Level II certification, with Security+ CE or an approved equivalent.
• Active Top Secret security clearance. Must be eligible to obtain and maintain SCI and any additional customer-specific access requirements.

Responsibilities

• Build, configure, and maintain secure Microsoft Azure and Azure Government environments supporting IL5, IL6, and IL7 or equivalent workloads.
• Implement cloud landing zones, subscriptions, resource organization, network boundaries, identity controls, centralized logging, and governance policies.
• Configure Azure networking, including VNets, subnets, routing, private endpoints, DNS, Azure Firewall, load balancers, NSGs, and hybrid connectivity.
• Implement identity and access controls using Microsoft Entra ID, Azure RBAC, managed identities, privileged-access controls, and Azure Key Vault.
• Deploy and operate Azure compute, storage, database, and container services, including AKS, in line with approved architectures and security requirements.
• Deploy and operate in disconnected, air-gapped, or classified environments where public-cloud services and external dependencies are limited.
• Design, maintain, and improve secure CI/CD pipelines using GitHub Actions and Azure DevOps across multiple repositories and environments, including air-gapped deployments.
• Build and maintain hardened containerized applications for Kubernetes platforms such as AKS and OpenShift.
• Integrate automated security checks into pipelines, covering source code, dependencies, secrets, containers, and infrastructure-as-code. Ensure critical findings are identified, evaluated, and remediated before release.
• Implement secure artifact management, including SBOMs, artifact signing, provenance attestation, and controlled promotion between environments.
• Manage secrets and environment-specific configuration using approved vault and configuration-management solutions.
• Establish reusable pipeline patterns, templates, and automation that keep security and deployment practices consistent across projects.

Skills

Azure Cloud

DevSecOps

CI/CD pipelines

Terraform

Security & compliance

Kubernetes

GitHub Actions

Azure Government

IaC

Tools

Azure DevOps

OpenShift

PowerShell

Azure CLI

Python

Job description

HyerTek, Inc. in the Washington DC metro area seeks a Senior Azure Cloud & DevSecOps Engineer to design, build, secure, and operate Azure Government environments and delivery pipelines.

You will own the full lifecycle from landing zones to hardened container builds and automated security gates, while collaborating with cybersecurity teams and government stakeholders. The role emphasizes end-to-end automation, evidence for ATO, and AI-assisted development tools used under careful validation.