Systems Engineer - Azure

Onsite at one of the following locations:
Oak Ridge, TN;
Germantown, MD: or Lemont, IL

The Systems Engineer (Azure) will design, implement, and optimize cloud and hybrid infrastructure solutions within Microsoft Azure to support enterprise IT services and mission-critical workloads. This role requires strong technical depth in Azure platform services, identity, automation, and infrastructure-as-code, combined with the ability to work across engineering, cybersecurity, and operations teams.

The engineer will contribute to the full system lifecycle — from requirements analysis and architecture design through secure integration, deployment, documentation, and transition to operations. This position is ideal for someone who thrives in a hybrid cloud environment and can balance hands-on engineering with strategic planning and modernization initiatives.

• Design and implement Azure-based solutions including Virtual Networks, VNets peering, Azure Firewall, Application Gateways, Load Balancers, and hybrid connectivity (VPN/Express Route).
• Deploy and manage Azure compute services such as Virtual Machines, Azure Kubernetes Service (AKS), App Services, and serverless workloads.
• Develop secure, scalable architectures aligned with enterprise cloud strategy and governance frameworks.
• Implement Azure identity and access solutions including Azure AD, Conditional Access, Privileged Identity Management (PIM), and role-based access control (RBAC).
• Engineer hybrid cloud integrations using Azure AD Connect, Express Route, site-to-site VPNs, and hybrid identity models.
• Support migration of on-premises workloads to Azure using tools such as Azure Migrate and ASR (Azure Site Recovery).
• Collaborate with network and security teams to ensure seamless connectivity, segmentation, and compliance.
• Automate provisioning, configuration, and operational tasks using Power Shell, Azure CLI, and Azure Automation.
• Apply Azure security best practices including NSGs, ASGs, Defender for Cloud, Key Vault, and managed identities.
• Ensure compliance with enterprise security baselines, cloud governance policies, and regulatory requirements.
• Participate in security reviews, risk assessments, and architecture evaluations.
• Monitor performance, availability, and cost using Azure Monitor, Log Analytics, Application Insights, and Cost Management.
• Troubleshoot complex cloud and hybrid infrastructure issues, serving as an escalation point for operations teams.
• Optimize cloud resource utilization, performance, and cost efficiency.
• Produce architecture diagrams, configuration baselines, runbooks, and lifecycle documentation.
• Support transition-to-operations activities including knowledge transfer, acceptance testing, and operational readiness reviews.
• Maintain accurate documentation aligned with enterprise lifecycle and change management processes.

• Bachelor's Degree in Information Technology, Computer Science, other relevant field, or equivalent relevant experience;
  Master's Degree preferred.
• Advanced computing certification preferred.
• 5–8 years of experience in systems engineering, with at least 3 years focused on Azure.

• Experience working with IaC templates and Config Management tools.
• Strong experience with Azure networking, compute, identity, and security services.
• Proficiency with Power Shell, Azure CLI, and infrastructure-as-code tools.
• Hands-on experience with hybrid cloud integrations and workload migrations.
• Strong analytical and problem-solving skills with the ability to troubleshoot complex cloud issues.
• Excellent communication skills and the ability to collaborate across engineering, operations, and cybersecurity teams.
• A mindset focused on automation, modernization, and continuous improvement.
• Ability to balance hands-on engineering with architectural thinking and long-term planning.

• Microsoft Certified:
  Azure Solutions Architect Expert (AZ‑305).
• Microsoft Certified:
  Azure Security Engineer (AZ‑500).
• Terraform Associate or equivalent IaC certification (optional but valuable).