Cloud Engineer

Overview

Role focused on provisioning, operating, and securing Azure infrastructure through automated pipelines and Dev Ops practices. Responsible for building hardened, compliant cloud environments and collaborating with cross-functional teams.

• Provision Azure infrastructure components including virtual machines, key vaults, and supporting services through automated pipeline workflows.
• Oversee the health of cloud environments, resolve bottlenecks, and tune resource utilization.
• Build and sustain continuous integration and delivery workflows within Azure Dev Ops.
• Author and maintain infrastructure definitions using declarative tooling (Bicep, Terraform, or ARM).
• Audit, refactor, and debug existing infrastructure code across the platform.
• Architect and operate isolated, hardened Azure environments for sensitive workloads.
• Safeguard the reliability, throughput, and protection posture of these isolated environments.
• Administer access controls and identity governance, enforcing minimum-necessary permissions throughout.
• Work alongside adjacent engineering groups to evolve cloud capabilities.
• Diagnose advanced platform issues and serve as a senior escalation point.
• Capture runbooks, design decisions, and remediation steps in written form.
• Automate the lifecycle of Azure Virtual Desktop images, including scheduled refreshes.
• Build and operate Kubernetes-based workload orchestration.
• Stand up and tune AKS clusters along with their supporting fabric.
• Streamline rollout, elasticity, and day-two operations for containerized services.
• Help end users layer applications onto standardized desktop images using configuration management tooling (DSC, Packer, or similar).
• Work with senior stakeholders to influence technical direction and forward-looking initiatives.
• Translate dense technical material for business and operational audiences.

• Degree in a computing discipline, or comparable hands-on background.
• A decade or more building and running cloud platforms, with Azure as the primary focus.
• Time spent operating inside hardened or regulated cloud boundaries, with working knowledge of relevant compliance regimes.
• Deep familiarity with the Azure service catalog, particularly Azure Virtual Desktop.
• Practical experience with declarative provisioning (Terraform, Bicep, ARM) integrated with Azure Dev Ops.
• Comfort scripting in Power Shell and adjacent languages.
• A track record of replacing manual provisioning with code-driven workflows.
• Fluency across YAML, JSON, Bicep, and Power Shell.
• Willingness to weigh in on architectural calls and untangle ambiguous problems.
• A habit of sharpening team workflows and shipping cadence.
• Azure credentials (AZ-104, AZ-305, or comparable) are a plus.
• Occasional travel, roughly one week in ten.
• Current Top-Secret clearance with SCI access.

• Candidate must live within commuting range of Lorton, VA, or be open to relocating (assistance available).
• Role is performed onsite.
• Some travel required (up to 10%).
• Active TS/SCI clearance (or higher) is mandatory.
• U.S. citizenship is required under the terms of the supporting federal contract.