We are seeking an Azure Cloud Engineer to join the Tolling Engineering and Operations team at the Virginia Department of Transportation (VDOT) in Mechanicsville, VA. This fully remote role provides cloud infrastructure engineering, application support, and rotational help-desk support for VDOT E-ZPass Virginia tolling systems. The engineer will maintain Azure cloud resources, manage Rubrik backup/recovery policies, administer Secret Server privileged vaults, configure Entra ID SSO/Office 365 services, and ensure compliance with PCI-DSS regulatory standards.
Client: Virginia Department of Transportation (VDOT)
Location: 9120 Lockwood Blvd, Mechanicsville, VA 23116
Work Arrangement: Fully Remote
Role Type: Contract (10/19/2026 – 06/30/2027)
Submission Deadline: N/A (Urgent Requirement)
Interview Process: Web Cam Interview Only
Shift: EST Business Hours
Work Authorization & Compliance Note: Candidates must physically reside within the United States (Commonwealth of Virginia security policy prohibiting offshore contractors). Position requires a fingerprint-based background check.
Key Responsibilities
- Cloud Operations & Administration: Maintain and implement Azure cloud infrastructure (IaaS/PaaS/SaaS) for tolling workloads; enforce Virginia government security, network controls, naming conventions, and least-privilege IAM policies.
- VDOT Tolling Workload Support: Support E-ZPass Virginia tolling applications, performing diagnostics on transaction flows, roadway sensor data ingestion, and cloud application performance tuning.
- Backup & Disaster Recovery: Implement and manage Rubrik backup and recovery for Azure IaaS/PaaS, including snapshot lifecycle tuning, policy sets, and DR validation.
- Secrets & Identity Governance: Administer SecretServer privileged access vaults (credential rotation, workflow troubleshooting), manage Azure Key Vault, certificates, and configure Entra ID (Azure AD) Single Sign-On (SSO).
- Monitoring & Incident Response: Monitor application workloads using Azure Monitor and Log Analytics; perform root-cause analysis, triage production incidents, and execute planned off-hours maintenance routines.
- Productivity & Virtualization Tools: Support Office 365 services, Power Apps, and Azure Virtual Desktops (AVD); create network and system topology documentation.
- Compliance & Integration: Ensure systems comply with PCI-DSS frameworks and maintain clear audit trails across financial transaction data movement.
Required Qualifications & Experience
- Education: Bachelor’s degree in Computer Science, Information Systems, or equivalent work history.
- Windows Server Administration: 5+ years of experience in Microsoft Windows environments (Windows Server 2019+).
- Azure Administration & Engineering: 3+ years of core Microsoft Azure administration and engineering experience.
- VDOT / E-ZPass Tolling Workloads: 3+ years directly supporting VDOT or E-ZPass Virginia tolling applications, transaction flows, and roadway sensor data ingestion.
- Rubrik Cloud Backup & DR: 2+ years implementing Rubrik backup & recovery for Azure IaaS/PaaS workloads.
- Infrastructure & Networking: 2+ years supporting server infrastructure, firewalls, certificates, load balancers, and hybrid networking.
- Secret Server Administration: 2+ years administering Secret Server privileged access vaults and credential automation.
- PowerShell / Python Scripting: 2+ years writing automated scripts using PowerShell or Python.
- Identity & Access Management: 1+ year managing Entra ID (Azure AD) and Single Sign-On (SSO) integrations.
- Office 365 & Power Apps: 1+ year administering Office 365 platforms and Power Apps environments.
- PCI Regulatory Compliance: 1+ year operating within PCI-DSS or comparable compliance frameworks.
- Enterprise Governance: 1+ year applying cloud governance and tagging standards.
Preferred Qualifications
- Experience with Infrastructure as Code (Terraform, Bicep, or ARM) and CI/CD tools (Azure DevOps, Jenkins, Git).
- Experience with containerization and orchestration (Docker, Kubernetes).
- Hands-on administration of Azure Virtual Desktops (AVD).
- Cloud cost analysis and optimization experience.
- Active Azure certifications (e.g., AZ-104, AZ-305, or similar)