Azure Platform Engineer (SecureEnclave / CMMC Migration)Workplace Type: Hybrid (3 days onsite: Tue-Thu)
Location: 1701 City Plaza Dr, Spring, TX 77389
Placement Type: 12-month Contract
Category: Cloud Engineer (Azure)
OPCO: TEKsystems, Inc.
SummaryOur client is seeking a highly skilled
Azure Platform Engineer to support a major initiative migrating applications into a
secure enclave environment. This engineer will partner with Application Security, Cloud Engineering, and Architecture teams to build
secure-by-default, automated onboarding pathways aligned to
CMMC Level 2,
NIST 800-171, and internal
ARB/SDLC governance.
This is a fast-paced engagement with a
hard audit deadline (Sept/Oct). The consultant will make an impact immediately and work as part of a core team including AppSec, Security Automation, IaC, Architecture, and PMO.
Top Skills - Must Haves- Azure (Commercial or Gov Cloud)
- DevOps / CI-CD
- Terraform
- Automation frameworks
- PowerShell
- GitHub / GitHub Actions
Must-Have Details- 5+ years in Platform Engineering, DevOps, or Cloud Engineering
- Strong experience in Azure, Azure DevOps, or GitHub Actions
- Experience building reusable templates, pipelines, or automation frameworks
Nice to Have Skills- Python, Bash
- Bicep
- YAML
- CI/CD design
- Key Vault / HSM
- Secure Enclave / GCC High
- KQL queries
Key ResponsibilitiesPlatform Engineering & Developer Experience- Build reusable platform templates, reference architectures, and golden patterns.
- Develop guardrail-driven developer experiences (standardized pipelines, IaC scaffolding, secrets handling).
- Implement OIDC, managed identities, and secure identity patterns.
- Integrate platform tooling with ARB/SDLC to auto-capture required artifacts.
Security & Compliance Integration- Embed security controls into CI/CD pipelines, IaC modules, and deployment frameworks.
- Enforce Zero Trust: least privilege, encryption, policy-as-code, logging, and auditability.
- Automate compliance checks aligned to CMMC Level 2 & NIST 800-171.
Cross-Team Collaboration- Work with Cloud Engineering, AppSec, DevOps, and Enterprise Architecture to standardize secure patterns.
- Mentor application teams on enclave requirements and platform onboarding.
Secure Enclave Migration / ApplicationOnboarding- Lead teams migrating into Azure GovC High or similar secure enclaves.
- Translate application architecture into enclave-compliant patterns.
- Ensure compliance for access control, logging, monitoring, identity, and network segmentation.
Additional Technical Exposure- IaC: Terraform, Bicep
- Pipelines: GitHub Actions (YAML)
- Kubernetes: Helm, basic manifests
- Azure Policy, OPA, policy-as-code
- Git standards: CODEOWNERS, branch protection, PR templates
- App Service, AKS, Functions, AVD, networks
- SAST/DAST, dependency scanning, container scanning
- Familiarity with CMMC/NIST frameworks strongly preferred
Employee Value PropositionThis is part of a
high-visibility compliance initiative with a
hard deadline. The consultant will:
- Immediately impact the organization
- Work with a specialized team driving CMMC readiness
- Help design secure Azure Gov architecture that will influence future enterprise standards
Work Environment- Hybrid schedule: Onsite Tue-Thu, remote Mon/Fri
- Part of a 4-person technical team + PMO alignment
- Collaborating with governance, cloud, infrastructure, and security teams
Why the Position is OpenThe internal team lacks the
bandwidth and specialized expertise required to execute secure
enclave onboarding at scale while meeting governance and audit requirements.
Job Type & LocationThis is a Contract position based out of Spring, TX.
Pay and BenefitsThe pay range for this position is $80.00 - $100.00/hr.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)
Workplace TypeThis is a hybrid position in Spring,TX.
Application DeadlineThis position is anticipated to close on Mar 10, 2026.
>About TEKsystems:
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
About TEKsystems and TEKsystems Global Services We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.