Remote job
Senior Azure Cloud Platform Engineer
Job details
About this role
Role overview
Design and operate secure, scalable services on a regulated Azure cloud platform supporting a large defense IT environment. The work combines infrastructure engineering, automation, identity and access governance, security monitoring, and compliance, with a focus on making controls repeatable and reducing manual operations.
Responsibilities - Build and maintain Azure governance controls, including policies and management group guardrails, to enforce security baselines and detect configuration drift. - Automate identity workflows such as privileged access, just-in-time permissions, and role-based access control lifecycles. - Turn defense cloud security requirements into practical architectures and network configurations. - Develop runbooks, workflows, and dashboards to gather telemetry and support continuous monitoring and audit readiness. - Coordinate remediation of cloud security and reliability recommendations, and maintain compliance-aligned cloud boundaries. - Add infrastructure checks, template validation, and policy tests to deployment pipelines.
Requirements - At least 15 years of relevant experience; a related bachelor’s degree may count for five years of that experience. - Active Secret clearance and a qualifying DoD 8570/8140 cybersecurity certification, such as Security+ CE or an approved equivalent. - Extensive experience engineering and operating Azure infrastructure in enterprise environments. - Strong Infrastructure as Code skills with Bicep, ARM templates, Terraform, or comparable tools; experience with Azure Policy, RBAC, PIM, and Microsoft Entra ID. - Experience building Azure DevOps and Git-based delivery pipelines, plus working knowledge of Azure networking and hybrid connectivity. - Cloud security monitoring and remediation experience with Defender for Cloud, Azure Monitor, or Azure Advisor; scripting skills in PowerShell, Azure CLI, or Python.
Nice to have - Experience with DoD IL5, Zero Trust, DISA STIGs, SCCA, RMF, or authorization-to-operate processes. - Azure architecture, administration, or DevOps certifications; experience on large federal cloud modernization programs.
Benefits and work setup Full-time role with up to 10% local travel. The source describes flexible time off, learning and development resources, and health, wellness, financial, retirement, family support, and education benefits. The listed national salary range is $98,500–$206,800.