Azure Systems Engineer

We cannot sponsor this role or Work with Third Parties

Location: Hybrid
- McLean VA.

Duration: Contract or Direct Hire

Compensation: Based on Experience

Capstone IT is helping our client find a Senior Systems Engineer who will design, deploy, integrate, and support secure Microsoft Azure and on-premises infrastructure for mission-critical systems. This is a hands-on engineering position focused on building secure, scalable, and highly available environments while maintaining enterprise identity, networking, and security infrastructure. The engineer will work across development, testing, and production environments, troubleshoot complex technical issues, and support systems operating under strict government and defense security requirements.

• Security Clearance
• Microsoft Azure Cloud Engineering: Designing, deploying, securing, and maintaining enterprise Azure infrastructure, including networking, virtual machines, security services, and Azure Landing Zones.
• Windows Server & Hybrid Infrastructure: Managing enterprise Windows Server environments, virtualization, on-premises systems, and hybrid cloud connectivity.
• Active Directory & Microsoft Entra :
  Enterprise identity management, directory services, authentication, RBAC, and integration between cloud and on-premises environments.
• Power Shell Scripting: Automating infrastructure administration, system configuration, deployment, and operational tasks.

• Design, deploy, and maintain secure Microsoft Azure and on-premises environments.
• Configure and support Azure Virtual Machines, Storage, Key Vault, Monitor, Firewall, Front Door, and Application Gateway.
• Implement secure Azure Landing Zones and support cloud migrations.
• Administer Windows Server, Active Directory, DNS, DHCP, PKI, and virtualization platforms.
• Support infrastructure across development, test, staging, and production environments.

• Implement Zero Trust security principles and defense-in-depth controls.
• Configure Microsoft Entra , privileged access controls, and RBAC.
• Support PKI, certificates, smart cards, HSMs, and secure authentication.
• Perform security assessments, vulnerability remediation, system hardening, and compliance validation.
• Support incident response and security investigations.

• Integrate Active Directory, LDAP, PKI, SCCM, Splunk, SQL Server, and third-party systems.
• Troubleshoot issues involving infrastructure, authentication, connectivity, and security.
• Support system testing, performance optimization, and disaster recovery.

• Create architecture diagrams, runbooks, deployment guides, and technical documentation.
• Support system implementations and ongoing operations.

• 8+ years of professional experience in systems, infrastructure, or cloud engineering.
• 5+ years of hands-on Microsoft Azure engineering experience.
• Strong experience supporting hybrid cloud and on-premises infrastructure.
• Expertise with Azure, Windows Server, Active Directory, Microsoft Entra , and Power Shell.
• Strong understanding of networking, infrastructure security, and secure system design.
• Experience supporting government, defense, or similarly regulated environments.
• Active Secret security clearance.
• Willingness and ability to travel internationally.

• Identity and Access Management (IAM) platforms.
• PKI, certificate lifecycle management, and HSMs.
• Azure Landing Zones and Microsoft Defender.
• Splunk and Dev Sec Ops  practices.
• Experience supporting classified or mission-critical systems.

This position supports an organization responsible for deploying and sustaining secure, mission-critical technology environments.

The engineer will be responsible for ensuring systems operate reliably across both Azure cloud infrastructure and traditional on-premises environments.

• Secure infrastructure deployment: Building and integrating enterprise systems across multiple environments while meeting government or defense security requirements.
• Hybrid identity and connectivity: Ensuring Azure, Windows Server, Active Directory, Entra , and authentication services work together securely.
• Security engineering: Applying access controls, certificate-based authentication, vulnerability remediation, and infrastructure hardening.
• Operational continuity: Providing senior-level troubleshooting, Tier…