Cloud Computing Engineer Principal

Location:

Remote

Department:
Veterans Affairs (VA)

Type:
Full Time

Min.

Experience:

Experienced

Security Clearance Level: Public Trust (MBI)

Salary Range: $109,623 - $126,790

• Create data flow diagrams, cloud diagrams, transition diagrams, and high-level architecture diagrams on Cloud Infrastructure, applications, and systems
• Design, develop, deploy, and operate automation technologies for continuous integration and continuous delivery (CI/CD)
• Manage and control permissions in the cloud service provider for each cloud application, storage, and service being hosted
• Implement, manage, and design monitoring capabilities for cloud architecture and cloud-hosted systems and applications to ensure optimal performance and compliance with VA/Federal policies
• Provide customer-focused support for Product lines and Services, including setup, configuration, and provisioning of VA Enterprise Cloud (VAEC) environments
• Provide Cloud support services for systems and applications in the VAEC Azure (Gov Cloud) environments, ensuring compliance with Veterans Independence Program (VIP) development, release, and documentation requirements
• Adopt a Dev Ops mindset with an understanding of CI/CD practices and tooling
• Provide Cloud Security Provider Documentation
• Design VAEC/cloud-hosted solutions and address cloud-readiness gaps

• A proven track record of designing, deploying, and managing Azure infrastructure and services
• Experience with large-scale, high-availability, and scalable cloud architecture
• Expertise in core Azure services such as Azure Virtual Machines, Azure Blob Storage, Azure Structured Query Language (SQL) Database, Azure Virtual Network (VNet), Azure Functions, Microsoft Entra , Azure Resource Manager (ARM), Azure Monitor, and Azure Domain Name System (DNS)
• Experience with Azure security practices and services including Microsoft Entra , Azure Role-Based Access Control (RBAC), Azure Distributed Denial-of-Service (DDoS) Protection, and Azure Web Application Firewall (WAF)
• Proficiency with Azure networking components such as VNet Peering, Azure Express Route, Virtual Private Network (VPN) Gateway, Private Endpoints, and Azure Load Balancer
• An ability to design, deploy, and manage scalable, secure, and highly available Azure cloud infrastructures
• Experience establishing and governing multi-subscription Azure environments using Management Groups, Azure Policy, and Azure Landing Zones
• Knowledge of cloud cost management, Fin Ops practices, budgeting, tagging strategies, and resource optimization using Azure Cost Management
• Proficiency in scripting languages such as Python, Power Shell, Bash, or JavaScript/NodeJS for automation and cloud operations
• Experience with Infrastructure as Code (IaC) tools such as Azure Resource Manager (ARM) Templates, Ansible, and Git Ops methodologies
• Proficiency with monitoring, logging, and observability tools including Azure Monitor, Log Analytics, Application Insights, Azure Activity Log, and third‑party tools such as Prometheus, Grafana, and New Relic
• Experience optimizing performance, availability, and resiliency of Azure resources and services
• A strong understanding of Azure security best practices and compliance frameworks including Health Insurance Portability and Accountability Act (HIPAA), Federal Risk and Authorization Management Program (FedRAMP), National Institute of Standards and Technology (NIST), General Data Protection Regulation (GDPR), and Payment Card Industry Data Security Standard (PCI DSS)
• Experience implementing encryption, key management, secrets management, and identity solutions using Azure Key Vault, customer-managed…