Senior Azure Cloud Engineer: Federal Landing Zones

Devopsroles

Reston (VA)

On-site

USD 120,000 - 160,000

Full time

7 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

TechSurSolutions in the DC metro area seeks a Senior Cloud Engineer with deep Microsoft Azure expertise to design, build, and operate a federal customer's Azure cloud foundation. You will implement Azure landing zones, governance, and Entra ID federation that follow enterprise architecture.

After build-out, you will own day-to-day health of the Azure environment: monitoring, patching, cost hygiene, and incident response.

Qualifications

Bachelor-level degree required in CS/IT/Engineering or related field.
9+ years deploying and configuring cloud environments with Azure hands-on.
Proven IaC experience with Terraform and/or Bicep (ARM).
Hands-on experience with Azure landing zones, VNet design, Azure Firewall, and ExpressRoute or site-to-site VPN.
Experience administering Entra ID, RBAC, and SSO federation (SAML 2.0/OIDC).
Familiarity with NIST SP 800-53 controls and federal security requirements.

Responsibilities

Design and deploy Azure landing zones using CAF concepts and hub‑and‑spoke networking.
Develop and maintain IaC pipelines (Terraform, Bicep) and GitOps workflows for multi-environment provisioning.
Configure Entra ID, RBAC, and federation aligned with Zero Trust principles.
Enforce security using Azure Policy, Defender, and Sentinel per federal standards.
Monitor and optimize cost, performance, and compliance across Azure environments.
Respond to incidents and perform patching in 24/7 operations.