Microsoft Azure Senior Cloud Architect Remote​/Telecommute

Microsoft Azure Senior Cloud Engineer

Hyer Tek is a federal technology consulting firm delivering secure enterprise applications, data analytics, cloud infrastructure, and modernization solutions to federal government agencies. Hyer Tek is seeking a Microsoft Azure Senior Cloud Engineer to design, build, implement, secure, and operate Azure environments supporting DoW Impact Levels 5, 6, and 7 or equivalent classification levels and other accredited environments as required by the customer.

A successful candidate will own the solution end to end, working directly with cybersecurity professionals, application teams, and Government stakeholders to translate mission requirements and security controls into sounds technical designs and production-ready solutions. This role uses AI-assisted development tools and code generation to accelerate infrastructure-as-code, control documentation, and runbooks, while applying sounds engineering judgment to review and validate AI-generated output before it is deployed to an accredited environment.

This is a hybrid position. Candidates must reside in the Washington, DC, metropolitan area. Some work will be performed at customer facilities, including accredited Secure Areas and SCIFs at Fort Meade.

Responsibilities

• Build, configure, and maintain secure Microsoft Azure environments supporting IL5, IL6, and IL7, or equivalent workloads in accordance with approved architectures, customer and contract requirements, and applicable security controls and regulations.
• Implement cloud landing zones, subscriptions, resource organization, network boundaries, identity controls, logging, and governance policies.
• Deploy and manage Azure infrastructure using Terraform, Bicep, ARM templates, or comparable Infrastructure as Code tools.
• Configure Azure networking, including virtual networks, subnets, routing, private endpoints, DNS, firewalls, load balancers, network security groups, and hybrid connectivity.
• Implement identity and access controls using Microsoft Entra , role-based access control, managed identities, privileged-access controls, and Azure Key Vault.
• Deploy and operate Azure compute, storage, database, and container services in accordance with approved architectures and security requirements.
• Apply Azure Policy, security baselines, DISA STIGs, encryption requirements, and configuration standards in partnership with cybersecurity teams.
• Implement, validate, and maintain applicable DISA STIGs and security configuration baselines, including remediation of configuration findings and support for automated compliance validation.
• Implement monitoring, alerting, audit logging, and operational dashboards using Azure Monitor, Log Analytics, Defender for Cloud, and Microsoft Sentinel, as applicable to the environment.
• Support deployment and operations in disconnected, air-gapped, or classified environments where public-cloud services and external dependencies may be limited.
• Troubleshoot cloud infrastructure, networking, identity, performance, and configuration issues across development, test, and production environments.
• Support backup, recovery, continuity-of-operations, and disaster-recovery planning and testing.
• Produce infrastructure diagrams, configuration documentation, operating procedures, and customer-handoff materials.
• Provide technical evidence and configuration details in support of RMF authorization, assessment, and continuous-monitoring activities.
• Collaborate with cybersecurity and Dev Sec Ops  teams to remediate vulnerabilities, security findings, configuration deviations, and compliance deficiencies.
• Support security assessments, authorization activities, audits, and customer reviews by providing accurate infrastructure configurations, technical documentation, and required evidence.

Required Qualifications

• 5+ years of hands-on cloud or infrastructure engineering experience, including responsibility for production environments.
• Strong experience designing, deploying, and operating solutions in Microsoft Azure.
• Hands-on experience with Azure Government or another regulated government-cloud environment.
• Strong knowledge of Azure networking, identity and access management,…