Senior Hybrid Cloud Engineer – Azure Identity (DoD)

Leidos; Albuquerque (NM); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos seeks a Hybrid Multi-Cloud Engineer SME to design, engineer, implement, and sustain secure Microsoft Azure cloud solutions for DoD needs in Fort Belvoir, VA or Albuquerque, NM. The role maintains a hands-on engineering stance through the lifecycle, aligning with CAF/Well-Architected guidance.

Ideal candidates have TS/SCI clearance, strong Entra ID governance, hybrid identity, and experience with Azure networking, IaC, and secure cloud strategies for DoD missions.

Qualifications

• Bachelor's degree and 12–15 years of relevant experience, or Masters with 10–13 years.
• Must have Active TS/SCI at time of hire.
• Current DoD 8570/8140 IAT Level II certification.
• Microsoft Certified: Azure Solutions Architect Expert certification.
• Minimum of five years of experience designing and implementing Microsoft Azure enterprise cloud solutions.
• Demonstrated experience architecting hybrid Azure environments.
• Advanced experience with Microsoft Entra ID, Entra Connect, Active Directory and E-ICAM solutions.
• Experience implementing Entra ID Governance: Access Reviews, Entitlement Management, Lifecycle Workflows, PIM.
• Experience with Azure Landing Zones and governance models.
• Strong understanding of Azure networking, storage, compute, governance, and security.
• IaC with Terraform, Azure Bicep, ARM Templates.
• Azure CLI, PowerShell, Python scripting.
• Understanding of Zero Trust architecture and cloud security best practices.
• Excellent written and verbal communication skills.

Responsibilities

• Architect, design, engineer, and implement secure Azure cloud solutions for DoD mission requirements.
• Design and deploy green-field Azure environments and hybrid architectures.
• Design, implement, and maintain hybrid identity solutions using Entra ID and related technologies.
• Engineer authentication, authorization, IAM, PAM with JIT and RBAC/ABAC under Zero Trust.
• Design Azure Landing Zones, governance, subscription architectures, and management group strategies.
• Engineer IaC solutions using Terraform, Azure Bicep, ARM Templates.
• Design secure Azure networking with VNETs, ExpressRoute, VPN, Firewall, Private connectivity.
• Implement Azure monitoring, backup, DR, governance, and security capabilities.
• Configure Entra ID Governance capabilities: Access Reviews, Entitlement Management, Lifecycle Workflows, PIM.
• Collaborate with cybersecurity, systems engineering, networking, and dev teams.
• Support ATO activities and RMF/STIG compliance.
• Produce architecture docs, diagrams, SOPs, and implementation guides.
• Troubleshoot and resolve complex cloud issues.
• Evaluate emerging Microsoft cloud technologies and recommend solutions.

Skills

Azure architecture

Hybrid cloud engineering

Identity management

Zero Trust

DoD cybersecurity

IaC (Terraform/Bicep)

Azure Entra ID

Networking (Azure)

Scripting (PowerShell/Python)

Architectural documentation

Education

Bachelor's degree in Computer Science, Information Systems, Engineering

Master's degree in a related field

Tools

Terraform

Azure Bicep

ARM Templates

Azure CLI

PowerShell

Python

GitHub

Job description

Leidos seeks a Hybrid Multi-Cloud Engineer SME to design, engineer, implement, and sustain secure Microsoft Azure cloud solutions for DoD needs in Fort Belvoir, VA or Albuquerque, NM. The role maintains a hands-on engineering stance through the lifecycle, aligning with CAF/Well-Architected guidance.

Ideal candidates have TS/SCI clearance, strong Entra ID governance, hybrid identity, and experience with Azure networking, IaC, and secure cloud strategies for DoD missions.