DevOps Engineer (MCCF- Healthcare Systems)Location: RemoteDescriptionHigherEchelon has an exciting opportunity for a
DevOps Engineer to join a high-performance team supporting the Department of Veterans Affairs (VA) migration to the cloud. This role offers a significant growth opportunity for an experienced cloud engineer to work within a modern cloud ecosystem, apply cutting-edge technologies, and serve as a trusted advisor to the customer.
The DevOps Engineer will design, deploy, operate, secure, and optimize Azure cloud infrastructure, applications, and services within VA Enterprise Cloud (VAEC) environments. The successful candidate will work effectively at scale and with autonomy; provide technical leadership for cloud modernization, migration, automation, security, and operations; and collaborate with product teams, application engineers, security personnel, infrastructure teams, and VA stakeholders to deliver compliant, resilient, and high-performing cloud solutions.
Job Responsibilities- Create and maintain data-flow diagrams, cloud-infrastructure diagrams, transition diagrams, high-level architecture diagrams, and related technical documentation for cloud-hosted applications, systems, and services.
- Design, develop, deploy, and operate automation technologies that support continuous integration and continuous delivery (CI/CD) processes.
- Design, implement, and maintain scalable, secure, highly available Azure cloud solutions that support application migration, modernization, cloud readiness, and enterprise business requirements.
- Provide customer-focused support for product lines and services, including the setup, configuration, provisioning, and operational support of VAEC environments.
- Provide cloud support services for systems and applications hosted in VAEC Azure cloud environments, ensuring alignment with VIP development, release, security, and documentation requirements.
- Manage and control cloud-service-provider access permissions for hosted applications, storage, infrastructure, and services in accordance with least-privilege, role-based-access-control, and security-governance principles.
- Implement, manage, and enhance monitoring, logging, alerting, and observability capabilities for Azure cloud architecture, cloud-hosted systems, and applications.
- Monitor cloud environments to ensure optimal performance, availability, resiliency, security, compliance, and data integrity in accordance with VA and Federal policies.
- Develop and maintain Cloud Service Provider documentation, including architecture diagrams, security-control documentation, operational procedures, system configurations, and support runbooks.
- Identify cloud-readiness gaps and design practical migration, modernization, remediation, and optimization solutions for VAEC and cloud-hosted workloads.
- Design and administer Azure identity, access, encryption, secrets-management, key-management, network-security, and data-protection controls.
- Develop and maintain infrastructure-as-code solutions using ARM templates, Ansible, GitOps practices, and related cloud-automation technologies.
- Configure, administer, and optimize Azure networking components, including virtual networks, subnets, route tables, VNet peering, ExpressRoute, VPN Gateway, private endpoints, load balancers, security controls, and hybrid connectivity services.
- Establish and support multi-subscription Azure environments using Management Groups, Azure Policy, Azure Landing Zones, and related cloud-governance capabilities.
- Implement cloud cost-management and FinOps practices, including budgeting, tagging strategies, resource optimization, consumption monitoring, and Azure Cost Management analysis.
- Configure and support Azure monitoring, logging, auditing, and observability services, including Azure Monitor, Log Analytics, Application Insights, Azure Activity Log, Prometheus, Grafana, New Relic, and comparable tools.
- Support Azure data platform services, including Azure SQL Database, Azure SQL Managed Instance, Azure Cosmos DB, Azure Database for PostgreSQL, and Azure Database for MySQL.
- Implement and support database performance tuning, backup and recovery, high-availability, business-continuity, and disaster-recovery strategies.
- Support CI/CD and DevOps practices using Azure DevOps Pipelines, GitHub Actions, Jenkins, GitLab CI, and related build, deployment, and release-management tools.
- Design, deploy, and support containerized workloads using Docker, Kubernetes, Azure Kubernetes Service, and Azure Container Apps.
- Diagnose, troubleshoot, and resolve complex cloud-platform, infrastructure, networking, application, security, performance, availability, and resiliency issues.
- Provide technical leadership, mentoring, and guidance to engineers and team members; contribute to cloud-architecture governance, technical standards, and knowledge-sharing activities.
- Lead and support complex cloud modernization, migration, and transformation initiatives in collaboration with cross-functional infrastructure, security, application-development, business, and customer teams.
- Participate in on-call support, emergency maintenance, operational-response, and incident-management activities when required.
- Maintain current knowledge of emerging Azure technologies, cloud-native architectures, security practices, cost-management strategies, and industry best practices; recommend and implement practical improvements.
Required Skills- Extensive expertise in core Azure services, including Azure Virtual Machines, Azure Blob Storage, Azure SQL Database, Azure Virtual Network, Azure Functions, Microsoft Entra ID, Azure Resource Manager, Azure Monitor, and Azure DNS.
- Experience designing, deploying, managing, and supporting scalable, secure, highly available, and resilient Azure cloud infrastructure and cloud-hosted applications.
- Experience implementing Azure security practices and services, including Microsoft Entra ID, Azure RBAC, Azure DDoS Protection, Azure Web Application Firewall, Azure Key Vault, customer-managed keys, encryption, secrets management, identity management, and privileged-access controls.
- Strong knowledge of Azure networking capabilities, including VNet peering, Azure ExpressRoute, VPN Gateway, private endpoints, Azure Load Balancer, routing, connectivity troubleshooting, and hybrid-cloud architectures.
- Experience establishing and governing multi-subscription Azure environments using Management Groups, Azure Policy, and Azure Landing Zones.
- Knowledge of cloud cost-management and FinOps practices, including Azure Cost Management, budgeting, tagging, resource utilization analysis, resource right-sizing, and cost-governance strategies.
- Proficiency with automation and scripting languages, including Python, PowerShell, Bash, and JavaScript/Node.js.
- Experience with infrastructure-as-code and configuration-management technologies, including ARM templates, Ansible, and GitOps methodologies.
- Proficiency with cloud-monitoring, logging, observability, and diagnostic tools, including Azure Monitor, Log Analytics, Application Insights, Azure Activity Log, Prometheus, Grafana, and New Relic.
- Experience optimizing Azure resources and services for performance, availability, reliability, scalability, resiliency, and operational efficiency.
- Strong knowledge of Azure security best practices and compliance frameworks, including HIPAA, FedRAMP, NIST, GDPR, and PCI DSS.
- Experience with Azure database services, including Azure SQL Database, Azure SQL Managed Instance, Azure Cosmos DB, Azure Database for PostgreSQL, and Azure Database for MySQL.
- Experience supporting database performance tuning, backup and recovery, high-availability configurations, and disaster-recovery strategies.
- Familiarity with CI/CD tools and practices, including Azure DevOps Pipelines, GitHub Actions, Jenkins, and GitLab CI.
- Experience with containerization and orchestration technologies, including Docker, Kubernetes, Azure Kubernetes Service, and Azure Container Apps.
- Strong analytical and problem-solving skills, with the ability to troubleshoot complex cloud infrastructure, networking, security, application, and platform issues.
- Excellent written and verbal communication skills, including the ability to explain complex technical concepts, cloud architecture decisions, risks, and recommendations to non-technical stakeholders.
- Demonstrated ability to prioritize competing work, manage multiple projects and workstreams, meet project deadlines, and produce high-quality deliverables.
- Strong attention to detail to ensure system stability, operational excellence, security, compliance, reliability, and data integrity.
- Proven ability to lead technical projects, mentor engineers, provide technical guidance, and collaborate effectively with cross-functional teams.
- Strong documentation skills for creating and maintaining cloud architectures, system configurations, security controls, operational procedures, and technical runbooks.
- Willingness to participate in on-call, emergency-support, and maintenance activities as required.
- Commitment to continuous learning and maintaining current knowledge of emerging Azure technologies, cloud-native practices, tools, security trends, and industry standards.
- U.S. Citizenship is required
- Ability to obtain and maintain a Public Trust security clearance.
Desired Skills and Experience- Advanced Azure certifications, including one or more of the following:
- Microsoft Certified: DevOps Engineer Expert
- Azure Administrator Associate
- Azure Security Engineer Associate
- Experience supporting VA, Department of Defense, or other Federal government cloud programs.
- Experience providing cloud engineering support within VA Enterprise Cloud (VAEC) or comparable Federal Azure cloud environments.
- Experience supporting Federal cloud-security, release-management, system-documentation, and governance requirements.
- Experience implementing DevSecOps practices, security automation, policy-as-code, CI/CD security controls, and compliance-as-code capabilities.
- Experience supporting enterprise cloud-migration planning, cloud-readiness assessments, legacy-application modernization, and cloud transformation initiatives.
- Experience with enterprise monitoring, observability, incident management, and service-management practices.
Education and Experience- Bachelor's degree in Computer Science, Systems Engineering, Cloud Engineering, or a related technical discipline and 20 years of relevant experience; or a master's degree in an applicable discipline and 10 years of relevant experience.
- Proven track record of designing, deploying, and managing Azure infrastructure, cloud services, and enterprise cloud environments.
- Demonstrated experience with large-scale, secure, highly available, and scalable cloud architectures.
- Equivalent relevant experience may be considered in lieu of formal education, as appropriate.
#dice
#CJ
About HigherEchelon, Inc.HigherEchelon, Inc. (HE) is a service-disabled veteran-owned small business (SDVOSB) with offerings in Engineering, Gaming, Human Capital, Enterprise Technology and Cyber Solutions. HigherEchelon aims to be the premier trusted partner in organizational excellence and achieves this through sustained investment in talent and the employee experience. HigherEchelon puts the employee first to better serve customer needs and sustain excellence.
HigherEchelon offers competitive full-time benefits including paid vacation and holidays, 401(k) matching, full health/dental/vision coverage, plus much more. For on-site and remote employees, flexible work schedules are offered when authorized.
By joining our team, you are choosing to embark on a journey towards excellence as a valued team member and trusted partner. We appreciate your inquiry and look forward to discussing the opportunity further.
EOE/Minorities/Females/Veterans/Disabled:HigherEchelon, Inc. is an Equal Employment Opportunity employer and provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in its job application procedures.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, citizenship, ancestry, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law. HigherEchelon, Inc. participates in E-Verify.
