Senior Azure Cloud Engineer

ShorePoint; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

Insurance premium covered 85%

401k

Continued education and certifications

Job summary

ShorePoint is seeking a Senior Azure Cloud Engineer to design, implement, and maintain secure Azure environments for federal cloud initiatives. You will lead IaC efforts and collaborate with security teams to enforce zero-trust and compliance across NIST/FedRAMP frameworks.

You will configure and optimize Azure resources, monitor and troubleshoot, and mentor junior engineers while staying current with Azure updates and government cloud mandates.

Qualifications

• Experience deploying and managing Azure IaaS, PaaS and security services.
• Familiarity with Azure AD, Conditional Access, RBAC, and Azure Policy.
• Networking in Azure including VPNs, ExpressRoute, private endpoints.
• Hands-on with IaC tools: ARM, Terraform, Bicep or Azure CLI.
• Experience with federal programs and compliance frameworks (FedRAMP, NIST 800-53, RMF).
• Proficient in PowerShell and/or Azure CLI for automation.

Responsibilities

• Design, build, and maintain secure Azure environments per federal policies.
• Configure Azure services, including VNets, VMs, storage, Key Vault, NSGs.
• Implement IaC with ARM, Terraform, Bicep, or Azure CLI.
• Collaborate with security teams to enforce zero trust and compliance.
• Configure monitoring and logging with Azure Monitor and Log Analytics.
• Lead incident response and troubleshooting using cloud diagnostics.
• Optimize performance and cost through resource provisioning and tagging.
• Support cloud migrations including rehosting and refactoring legacy systems.
• Develop architecture docs, playbooks, and SOPs; mentor junior engineers.
• Stay current with Azure updates and government cloud mandates.

Skills

Azure IaaS

Azure PaaS

Azure security

Azure AD RBAC/CA

Networking in Azure

PowerShell

Azure CLI

Education

Bachelor's degree in CS/IS/Engineering

Tools

ARM templates

Terraform

Bicep

Azure DevOps

GitHub Actions

Microsoft Sentinel

Microsoft Defender for Cloud

Job description

Who we are:

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public- and private-sector customers who demand experience and proven security models to protect their data. We embrace a 'work hard, play hard' mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 144 hours of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more.

Who we're looking for:

We are seeking a Senior Azure Cloud Engineer for a potential opportunity, with proven experience supporting dynamic environments within the public sector. The ideal candidate will contribute to federal cloud initiatives while growing alongside an expanding organization. The Sr. Azure Cloud Engineer role serves as the Subject Matter Expert leading the development, integration, deployment and ongoing maintenance of secure and scalable Azure cloud environments. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. Employment for this position is dependent on the successful award of the contract.

What you'll be doing:

• Design, build and maintain secure and scalable Azure environments in accordance with federal security policies and performance requirements.
• Configure and manage Azure services, including virtual networks, VMs, storage accounts, Azure AD, Key Vault, NSGs, Application Gateways and more.
• Implement and support infrastructure-as-code (IaC) using tools like ARM templates, Bicep, Terraform or Azure CLI.
• Collaborate with security teams to enforce zero trust principles, integrate security controls and meet compliance mandates (e.g., NIST 800-53, FedRAMP, FISMA).
• Configure monitoring, logging and alerting using Azure Monitor, Log Analytics and Microsoft Sentinel.
• Perform incident response and troubleshooting, leveraging cloud-native diagnostics and telemetry.
• Optimize performance and cost through effective resource provisioning, tagging and monitoring strategies.
• Support cloud migration initiatives, including rehosting, re-platforming and refactoring legacy systems.
• Develop and maintain technical documentation, including architecture diagrams, playbooks and SOPs.
• Provide Tier 3 support and mentorship to junior engineers.
• Stay current with Azure product updates, security trends and government cloud mandates.

What you need to know:

• Strong experience deploying and managing Azure IaaS, PaaS and security services.
• Familiarity with Azure Active Directory (Azure AD), Conditional Access, Role-Based Access Control (RBAC) and Azure Policy.
• Deep understanding of networking in Azure, including VPNs, ExpressRoute, private endpoints and service endpoints.
• Hands-on experience with ARM templates, Terraform, Bicep or equivalent infrastructure-as-code tools.
• Experience supporting federal government programs with working knowledge of compliance frameworks such as FedRAMP, NIST 800-53, DISA STIGs or RMF.
• Proficient in PowerShell and/or Azure CLI scripting for automation and administration.
• Strong problem-solving skills, ability to lead technical discussions and excellent written and verbal communication.

Must have's:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field.
• 10+ years of experience with 8 or more years specifically related to Azure Cloud architecture, design and implementation.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• One or more of the following certifications: Azure Administrator Associate, Azure Security Engineer Associate or equivalent Microsoft Azure certification.
• Experience managing and leading technical projects.
• Applicants must currently be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Beneficial to have:

• Experience with hybrid cloud environments (Azure + on-premises integration).
• Knowledge of DevSecOps pipelines, container services (AKS, Docker) and CI/CD tools (Azure DevOps, GitHub Actions).
• Familiarity with Microsoft Sentinel, Microsoft Defender for Cloud and compliance center tools.
• Experience implementing multi-tenant architectures, landing zones and enterprise-scale blueprints.

Where it's done:

• Onsite (Washington, D.C.).