Sr Systems Engineer

description

• designing, deploying, securing, and sustaining microsoft azure and azure government cloud architectures in support of navy c4i
• supporting hybrid cloud solutions that integrate on premises infrastructure with azure services
• engineering azure connectivity, including express route, vpn gateway, routing, segmentation, firewall integration, and connectivity to on premises networks
• designing and managing azure networking, including virtual networks, subnets, network security groups, routing, vlan integration, and network segmentation
• implementing cloud security using microsoft defender, azure firewall, secure baselines, least privilege access, role based access control, and zero trust principles
• administering azure identity, privileged access, service identities, and access controls in coordination with enterprise identity and cybersecurity teams
• architecting and supporting azure virtual desktop, windows and linux virtual machines, and containerized workloads
• developing repeatable infrastructure provisioning and configuration using terraform, azure automation, scripting, and ci/cd practices
• troubleshooting cloud, network, identity, security, compute, storage, and hybrid integration issues across lab, test, and production environments
• evaluating technical, cybersecurity, mission, schedule, and cost constraints to develop resilient cloud implementation plans
• producing architecture diagrams, implementation plans, test artifacts, operating procedures, troubleshooting guides, and sustainment documentation
• supporting rmf, ato, stig, vulnerability remediation, poa&m, and continuous monitoring activities
• participating in technical reviews, change management, test events, deployment planning, and production transition activities
• identifying technical risks, dependencies, integration gaps, and sustainment concerns, then recommend practical mitigation options
• communicating technical recommendations, risks, and tradeoffs to government customers, engineering teams, cybersecurity stakeholders, and program leadership

#li-jc1

• u.s. Citizenship required
• active dod secret clearance required at start, with ability to obtain top secret clearance
• ability to qualify for cswf / dod 8140 iat level ii
  • security+ ce or equivalent iat ii certification isrequiredas a minimum
• bachelor’s degree or higher in a technical discipline
• five (5) or more years of experience with:
  • microsoft azure systems engineering, including architecture design, deployment, migration, configuration, administration, and sustainment
  • azure government or dod owned cloud environments
  • hybrid cloud architectures integrating on premises infrastructure with azure services
  • azure networking, including virtual networks, subnets, network security groups, routing, segmentation, vpn gateway, and express route
  • operating systems management, including linux, windows, and vmware based environments
  • cloud security implementation, including microsoft defender, azure firewall, secure baselines, least privilege access,role based access control, and zero trust principles
  • identity and access management, including privileged access, service identities, and integration with enterprise identity services
  • infrastructure automation using terraform, azure automation, powershell, bash, python, ansible, or comparable tools
  • troubleshooting complex cloud, network, identity, security, compute, and hybrid integration issues
• experience with dod impact level environments, with il5 experience strongly preferred
• ability to understand complex network operating systems, cloud services, and supporting infrastructure
• experience producing technical documentation, including architecture diagrams, implementation plans, test artifacts, operating procedures, and rmf / ato compliance evidence
• strong verbal and…