Senior Azure Systems Engineer — Secret Clearance, Hybrid

Capstone IT, Inc.; McLean (VA); Hybrid; USD 110,000 - 190,000; Full time

Job summary

Capstone IT is seeking a Senior Systems Engineer to design, deploy, integrate, and support secure Microsoft Azure and on‑premises infrastructure for mission‑critical systems. The role focuses on building secure, scalable, and highly available environments while maintaining enterprise identity, networking, and security controls.

Responsibilities include deploying Azure VMs, storage, Key Vault, monitoring, firewalling, and application gateway, plus implementing secure Landing Zones and supporting

Qualifications

• 8+ years of professional experience in systems, infrastructure, or cloud engineering.
• 5+ years of hands-on Microsoft Azure engineering experience.
• Strong experience supporting hybrid cloud and on-premises infrastructure.
• Expertise with Azure, Windows Server, Active Directory, Microsoft Entra ID, and PowerShell.
• Strong understanding of networking, infrastructure security, and secure system design.
• Experience supporting government, defense, or similarly regulated environments.
• Active Secret security clearance.
• Willingness and ability to travel internationally.

Responsibilities

• Design, deploy, and maintain secure Microsoft Azure and on-premises environments.
• Configure and support Azure Virtual Machines, Storage, Key Vault, Monitor, Firewall, Front Door, and Application Gateway.
• Implement secure Azure Landing Zones and support cloud migrations.
• Administer Windows Server, Active Directory, DNS, DHCP, PKI, and virtualization platforms.
• Support infrastructure across development, test, staging, and production environments.

Skills

Security Clearance

Azure Cloud Engineering

Windows Server & Hybrid Infra

Active Directory & Entra ID

PowerShell Scripting

Tools

SCCM

Splunk

Microsoft Defender

Job description

Capstone IT is seeking a Senior Systems Engineer to design, deploy, integrate, and support secure Microsoft Azure and on‑premises infrastructure for mission‑critical systems. The role focuses on building secure, scalable, and highly available environments while maintaining enterprise identity, networking, and security controls.

Responsibilities include deploying Azure VMs, storage, Key Vault, monitoring, firewalling, and application gateway, plus implementing secure Landing Zones and supporting