This role is central to OIT's hybrid infrastructure strategy, ensuring reliable integration of cloud and on-premises environments while maintaining high availability and performance. The engineer drives automation-first operations using infrastructure-as-code and CI/CD practices to improve consistency, speed, and operational resilience. The position enforces zero-trust and compliance requirements, supports migration and modernization initiatives, and provides technical leadership across cloud engineering activities.
PRIMARY RESPONSIBILITIES
Cloud Infrastructure Engineering and Operations
- Design, implement, and manage cloud infrastructure solutions in Microsoft Azure and AWS, with Azure as the primary platform and AWS support focused on integration with project-team-managed workloads and potential future expansion.
- Build and maintain cloud networking, storage, compute, app services, virtualization, and containerized environments.
- Ensure scalability, resiliency, and high availability through proactive performance tuning, capacity planning, and operational optimization.
- Partner with operations teams to monitor production services, resolve incidents, and improve reliability across cloud platforms.
Security, Identity, and Compliance
- Implement and maintain cloud security configurations aligned with SEC security policies and zero-trust principles.
- Engineer and support identity and access controls using Microsoft Entra Identity, RBAC, conditional access, and least-privilege models.
- Enforce governance controls and policy compliance to support organizational and regulatory requirements, audit readiness, and risk reduction.
- Drive patching, vulnerability remediation, and secure configuration baselines across cloud-hosted infrastructure.
Automation, IaC, and CI/CD Enablement
- Develop and maintain automation using PowerShell, Bicep, ARM templates, and Terraform to provision and manage infrastructure.
- Integrate infrastructure workflows with CI/CD pipelines to standardize deployments, reduce manual effort, and improve release quality.
- Implement reusable IaC modules, scripting standards, and version-controlled operational artifacts.
- Advance automated operating models to increase consistency, security, and scalability.
Migration, Modernization, and Technical Leadership
- Lead migration of workloads from legacy/on-premises platforms to modern Azure cloud and hybrid architectures with minimal disruption.
- Optimize cloud resource utilization, cost, and service performance based on operational and mission priorities.
- Provide technical guidance and mentorship to junior engineers and cross-functional infrastructure teams.
- Create and maintain architecture documentation, SOPs, and implementation guidance to support sustainable operations.
REQUIRED QUALIFICATIONS
Education: Bachelor's degree in a relevant field.
Experience:
- Minimum 8 years of experience in IT infrastructure roles, including 5+ years focused on Azure cloud engineering.
- Demonstrated experience designing and managing secure, highly available cloud environments for enterprise services.
- Proven experience leading Azure cloud migration and modernization efforts in regulated environments.
- Experience designing, configuring, and administering Azure cloud enterprise implementations using compute cloud resources such as Virtual Machines, Scale sets, Azure containers or Kubernetes, and Cloud Services.
- Strong experience with Azure tools such as Azure DevOps, Repos, Pipelines, and Boards.
- Experienced in Infrastructure as a Service (IaaS), Platform as a service (PaaS) and Software as a service (SaaS) Cloud Hosting Architecture/Design patterns to meet scalability, capacity, availability, performance, storage, cost, and application/platform requirements
Technical Skills:
- Cloud networking, storage, app services, virtualization, and containerization
- DevSecOps practices, CI/CD pipeline implementation and automation practices
- Infrastructure-as-Code at production scale: PowerShell, Bicep, ARM templates, and Terraform, with reusable modules, automated validation, and drift detection.
- Cloud governance, policy enforcement, operational compliance and security in Azure: Azure Policy, RBAC, conditional access, managed identities
- Zero-trust security principles, networking design patterns, and secure cloud configuration practices
- Microsoft Entra Identity services
PREFERRED QUALIFICATIONS
- Microsoft Certified: Azure Solutions Architect Expert
- Experience supporting federal agency IT environments with FISMA/FedRAMP-driven security and compliance requirements.
- Hands-on experience with Kubernetes/OpenShift and cloud-native container platform operations.
- Experience integrating observability and ITSM platforms to improve incident response and service reliability.
- Experience implementing immutable infrastructure and policy-as-code controls in enterprise environments.
- Experience with cloud cost management and FinOps practices to optimize spend and performance.
- HashiCorp Terraform Associate
