Tolling Azure Cloud Engineer

Mbi Llc; Mechanicsville (VA); On-site; USD 100,000 - 140,000; Full time

Job summary

Mbi Llc in Mechanicsville, Virginia is seeking a Cloud Engineer to maintain and secure Azure resources, ensure policy compliance, and improve governance artifacts. You will work with IAM, encryption, and SSO (Entra ID) while collaborating with architects and engineers on data flows and integrations.

The role requires 3+ years of Azure experience, Windows and Office 365 proficiency, and scripting skills (PowerShell/Python).

Qualifications

• Minimum 3 years of experience with Microsoft Azure services.
• Bachelors degree in computer science, information systems, or equivalent experience.
• Ability to communicate requirements and design concepts clearly.
• Experience in Windows environments.
• Experience with Office 365 and administering SSO (Entra ID).
• Scripting experience with PowerShell and/or Python.
• Create network and system topology documentation.
• Experience with Azure Virtual Desktops.
• Office 365 services and Power Apps.

Responsibilities

• Maintain and implement cloud resources in the Tolling Azure environment.
• Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.
• Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.
• Assist with access reviews, role assignments, and least-privilege IAM evaluations.
• Monitor Azure services and application workloads to ensure uptime and availability.
• Troubleshoot connectivity, access, security, and performance issues.
• Perform diagnostic deep-dives using logs and Azure Monitor.
• Define change requests, implementation plans, and rollback procedures.
• Understand end-to-end data flows across tolling systems and reporting tools.
• Collaborate with architects and cross-functional teams and provide best-practice guidance.

Skills

Server infrastructure, protocols, fire

Scripting with PowerShell/Python

CI tools Azure DevOps Jenkins Git TFS

Office 365 and Power Apps

Infrastructure as Code Terraform

PCI or similar compliance

Key Vault and secret management

Single Sign-On Entra ID

Enterprise governance models

Cloud cost analysis and optimization

Job description

- Maintain and implement cloud resources in the Tolling Azure environment.

- Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.

- Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.

- Assist with access reviews, role assignments, and least?privilege IAM evaluations.

- Manage vendor?required updates and ensure compatibility.

- Implement fault?tolerant and highly available Azure solutions.

Monitoring, Troubleshooting, and Diagnostics

- Monitor Azure services and application workloads to ensure uptime and availability.

- Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.

- Perform diagnostic deep?dives using logs, metrics, traces, Azure Monitor, and Log Analytics.

- Analyze and tune system/application performance.

Operational Support

- Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.

- Triage production issues, ensure timely resolution, and document root?cause findings.

- Execute and support off?hours work as needed.

- Define change requests, detailed implementation plans, and roll?back procedures.

Technical Development and Compliance

- Understand end?to?end data flows across tolling systems, roadways data, financial transactions, and reporting tools.

- Support optimization of integrations and data movement.

- Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns.

- Manage key vaults, passwords, certificates, and secure credential storage.

Collaboration and Communication

- Work directly with architects, engineers, managers, and cross?functional teams to use Azure services effectively.

- Provide best?practice guidance related to SaaS, PaaS, and IaaS.

- Communicate clearly in written and verbal form with internal and external stakeholders.

- Support multiple concurrent projects of complex technical scope.

Qualifications

- Minimum 3 years of experience with Microsoft Azure services.

- Bachelor's degree in computer science, information systems, or equivalent experience.

- Demonstrated ability to communicate requirements and design concepts clearly.

- Experience working in Windows environments.

- Experience with Office 365 services and administering Single Sign?On (SSO) including Entra ID.

- Solid scripting experience (PowerShell and/or Python).

- Ability to create network and system topology documentation.

- Experience with Azure Virtual Desktops.

- Office 365 services and Power Apps.

Special Instructions

- Position requires a fingerprint?based background check.

- Continued education is expected at the contractor’s own expense to stay current with VDOT technologies.

Fill the skill matrix below:

Skill

Amount

Candidate's No. of years of experience

Required

2

Server infrastructure, protocols, firewalls, certificates, load balancers

Required

2

Required

3

Required

2

Scripting with PowerShell/Python

Required

2

Continuous integration tools (Azure DevOps, Jenkins, Git, TFS)

1

Office 365 and Power Apps platforms

Required

1

Infrastructure as Code (Terraform or equivalent)

Required

1

1

Experience with PCI or similar compliance frameworks

Required

1

Key Vault, secrets and certificate management

1

Single Sign-On and identity administration (Entra ID)

Required

1

1

Experience with enterprise governance models

1

Experience analyzing cloud cost trends and delivering cost-optimization recommendations

1

1