Senior Azure Cloud Engineer – Federal Landing Zones & IaC

TechSur Solutions, LLC; Reston (VA); On-site; USD 150,000 - 165,000; Full time

Job summary

TechSurSolutions in the United States seeks a Senior Cloud Engineer with deep Microsoft Azure expertise to design, build, and operate a federal customer's Azure cloud foundation. You will implement landing zones, management group hierarchies, and hub-and-spoke networking aligned with enterprise architecture.

After build-out, you will own day-to-day health of the Azure environment: monitoring, patching, cost hygiene, and incident response.

Qualifications

• Bachelor's degree in Computer Science, IT, Engineering, or related field.
• 9+ years of experience deploying and configuring cloud environments with Azure.
• Hands-on IaC experience using Terraform and/or Bicep (ARM).
• Experience with Azure landing zones, VNet design, Azure Firewall, and ExpressRoute or site-to-site VPN.
• Experience administering Entra ID, RBAC, and SSO federation (SAML 2.0/OIDC).
• Experience monitoring, patching, and troubleshooting Windows and Linux workloads in Azure.
• Working knowledge of NIST SP 800-53 controls in a federal environment.
• Ability to obtain and maintain the background investigation required by the federal customer.

Responsibilities

• Design and deploy Azure landing zones using the Cloud Adoption Framework, including management groups, subscriptions, and hub-and-spoke or Virtual WAN networking.
• Build and maintain Infrastructure-as-Code (Terraform, Bicep) and GitOps workflows that provision production, integration, development, and sandbox environments.
• Configure Microsoft Entra ID, RBAC, and federation with the enterprise IdP using SAML 2.0 and OIDC, aligned with Zero Trust.
• Enforce security and compliance guardrails with Azure Policy, Defender for Cloud, and Sentinel per NIST 800-53 Rev 5 and customer standards.
• Apply enterprise tagging for asset management, cost tracking, and chargeback/showback using Azure Cost Management.
• Monitor environments with Azure Monitor and tools like Datadog, Splunk, and Dynatrace; integrate events with ServiceNow.
• Perform patching, maintenance, capacity planning, and rightsizing; provide 24/7 incident response support.
• Design and test high availability, Azure Backup, and Site Recovery for cloud workloads.
• Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.

Skills

Azure expertise

Terraform

Bicep

Cloud architecture

SAML/OIDC federation

NIST controls

Security/compliance

GitOps

Education

Bachelor's degree

Tools

Azure

Terraform

Bicep

Azure Firewall

ExpressRoute / VPN

Entra ID

Azure DevOps

GitHub Actions

ServiceNow

Datadog

Splunk

Dynatrace

IAM / SSO federation

Job description

TechSurSolutions in the United States seeks a Senior Cloud Engineer with deep Microsoft Azure expertise to design, build, and operate a federal customer's Azure cloud foundation. You will implement landing zones, management group hierarchies, and hub-and-spoke networking aligned with enterprise architecture.

After build-out, you will own day-to-day health of the Azure environment: monitoring, patching, cost hygiene, and incident response.