Azure Cloud Engineer

Job Summary:

The VDOT Azure Cloud Engineer is responsible for engineering, supporting, and maintaining cloud infrastructure and applications within the Virginia Department of Transportation Tolling group. This role involves cloud operations, troubleshooting, compliance, and collaboration with cross-functional teams to ensure secure, fault-tolerant, and highly available Azure environments supporting tolling systems and related applications. Responsibilities:

• Maintain and implement cloud resources in the Tolling Azure environment.
• Ensure compliance with Virginia government security policies, IAM, network controls, and cost governance.
• Maintain infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.
• Assist with access reviews, role assignments, and least-privilege IAM evaluations.
• Manage vendor-required updates and ensure compatibility.
• Implement fault-tolerant and highly available Azure solutions.
• Monitor Azure services and application workloads to ensure uptime and availability.
• Troubleshoot connectivity, access, security, application performance, and service degradation issues.
• Perform diagnostic deep-dives using logs, metrics, Azure Monitor, and Log Analytics.
• Analyze and tune system and application performance.
• Participate in operational cycles including pattern monitoring, incident reviews, and maintenance readiness.
• Triage production issues, ensure timely resolution, and document root causes.
• Support off-hours work and define change requests with implementation and rollback plans.
• Understand end-to-end data flows across tolling systems and support data integration optimization.
• Apply PCI and other regulatory compliance requirements in system behavior and logging.
• Manage key vaults, passwords, certificates, and secure credential storage.
• Collaborate with architects, engineers, managers, and cross-functional teams to optimize Azure services usage.
• Provide best-practice guidance for SaaS, PaaS, and IaaS solutions.
• Communicate clearly with internal and external stakeholders.
• Support multiple concurrent complex technical projects.

Required Skills & Certifications:

• Minimum 3 years of experience with Microsoft Azure services.
• Minimum 3 years supporting VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads.
• Bachelor's degree in computer science, information systems, or equivalent experience.
• Experience with Windows environments (2019+).
• Experience implementing Rubrik backup & recovery for Azure IaaS/PaaS.
• Experience with Office 365 services and administering Single Sign-On (Entra ID).
• Experience administering SecretServer privileged access vaults and credential rotation.
• Proficient scripting skills in PowerShell and/or Python.
• Ability to create network and system topology documentation.
• Experience with Azure Virtual Desktops.
• Experience with PCI or similar compliance frameworks.
• Experience managing key vaults, secrets, and certificates.
• Experience with Single Sign-On and identity administration (Entra ID).
• Experience administering server infrastructure, protocols, firewalls, certificates, and load balancers.
• Experience with networking, server administration (Windows/Linux), databases, and cloud environments.
• Experience with SecretServer privileged access vault administration.
• Ability to communicate requirements and design concepts clearly.
• Fingerprint-based background check required.

Preferred Skills & Certifications:

• Azure certification (AZ-104, AZ-305, or similar).
• Experience with continuous integration tools (Azure DevOps, Jenkins, Git, TFS).
• Experience with Infrastructure as Code tools like Terraform.
• Experience with containerization technologies such as Docker and Kubernetes.
• Experience with enterprise governance models.
• Experience analyzing cloud cost trends and delivering cost optimization recommendations.
• Experience with Office 365 Power Apps platform.

Special Considerations:

• Position requires a fingerprint-based background check.
• Candidate must reside physically within the United States for the duration of the assignment.
• Continued education is expected at the contractor's own expense to maintain current knowledge of VDOT technologies.

Scheduling:

• Support includes participation in daily and weekly operational cycles.
• Off-hours work may be required to support maintenance and incident resolution.
• Work schedule aligns with typical business hours with flexibility for rotational help-desk and operational support.