Azure Cloud Engineer Job Roanoke area,Virginia USA,Engineering

Join to apply for the Azure Cloud Engineer role at TEKsystems

Top Skills' Details

5+ years of Azure cloud infrastructure experience

Infrastructure as Code (IaC) - experience is a MUST

Azure - Landing zone and VNets

Must be able to script in Powershell or code in Python or Golang

somewhat active Github

Azure Skills/Services (in Order Of Priority)

Virtual Network

Storage Services

Blob, Queue, Table, File

VM & Scale Sets

Load Balancer

EntraID

Automation

Disk Storage

Express Route

Monitor

Site Recovery

Application Gateway

This role focuses on supporting and enhancing the Azure cloud platform environment. It involves a combination of Business As Usual (BAU) support and critical engineering work. A significant portion of the role is dedicated to ensuring governance, compliance, and security posture within the Azure environment. The primary objective is to proactively address compliance requirements and security findings.

Key Responsibilities

Engage proactively in Azure governance and compliance activities.
Pull and analyze compliance data to identify non-compliance findings.
Review control adherence and take necessary action on non-compliant resources or configurations.
Ensure Azure services and the teams utilizing them maintain compliance with established standards.
Proactively address potential compliance issues before they are identified by auditors or testers.
Perform security bug fixes to remediate non-compliance issues, which is considered engineering work. This involves problem-solving and developing solutions to bring configurations back into compliance.
Participate in control validation processes and testing walkthroughs. Provide documentation or walkthroughs to show how controls are met and monitored.
Understand and interpret existing runbooks, many of which are written in Power Shell, used for monitoring control effectiveness.
Conduct feasibility reviews for net new controls proposed by the cyber risk team, assessing their technical viability within Azure.
Review, update, and/or create new detective controls. This may involve translating existing controls from Power Shell runbooks into Wiz/Rego. Implementation of these controls is the responsibility of this role.
Identify issues related to controls where policies are not used and monitoring relies on runbooks (often Azure Automation runbooks written in Power Shell).
Contribute to discussions and potentially the implementation of a future disconnected Azure tenant/sandbox environment, with a focus on establishing controls and governance
May contribute to identity-related work within Azure, understanding authentication and authorization concepts.

Required

Skills & Qualifications

Solid foundation in cloud infrastructure, with expertise in Microsoft Azure services and architecture. Must understand Azure services inside out, including various configurations and associated risks.
Ability to build with code; again the role is not that of a cloud administrator solely performing tasks via the GUI.
Essential knowledge of Power Shell is required to understand existing runbooks and control configurations.
Familiarity with or the ability to quickly learn Wiz/Rego for implementing detective controls is necessary.
Understanding of cloud security principles, governance frameworks, and compliance requirements.
Ability to troubleshoot technical issues within the Azure platform.
Understanding of cloud-based identity and access management (IAM) concepts, including authentication and authorization.

Note:

The current work priority for Azure is BAU and security bug fixes (non-compliance remediation).

Skills

Golang, azure, restful api, infrastructure as code, IaC, landing zones, powershell

Pay And Benefits

The pay range for this position is $65.00 - $75.00/hr.

Eligibility requirements apply to some benefits and may depend on your job

classification and length of employment. Benefits are subject to change and may be

subject to specific elections, plan, or program terms. If eligible, the benefits

Available For This Temporary Role May Include The Following

Medical, dental & vision
Critical Illness, Accident, and Hospital
401(k) Retirement Plan –…