Azure Cloud Engineer-Remote

VDOT ITD Tolling is seeking an Azure Cloud Engineer to join the Eng and Ops team. The role includes engineering application support and rotational helpdesk support within the Tolling group. Includes API Gateways AVD App Insights & Office 365.

Primary Responsibilities

Cloud Operations and Engineering

Maintain and implement cloud resources in theTolling Azure environment.

Ensure compliance with Virginia governmentpolicies regarding security IAM network controls and cost governance.

Maintain and improve infrastructuredocumentation naming conventions tagging standards and cloud governanceartifacts.

Assist with access reviews role assignmentsand leastprivilege IAM evaluations.

Manage vendorrequired updates and ensurecompatibility.

Implement faulttolerant and highly available Azure solutions.

Monitoring Troubleshooting and Diagnostics

Monitor Azure services and application workloadsto ensure uptime and availability.

Troubleshoot issues related to connectivityaccess security application performance and service degradation.

Perform diagnostic deepdives using logsmetrics traces Azure Monitor and Log Analytics.

Analyze and tune system/application performance.

Operational Support

Participate in daily/weekly operational cycles including pattern monitoring incident reviews and maintenance readiness checks.

Triage production issues ensure timelyresolution and document rootcause findings.

Execute and support offhours work as needed.

Define change requests detailed implementationplans and rollback procedures.

Technical Development and Compliance

Understand endtoend data flows across tollingsystems roadways data financial transactions and reporting tools.

Support optimization of integrations and datamovement.

Apply PCI or other regulatory compliancerequirements when evaluating system behavior and logging patterns.

Manage key vaults passwords certificates andsecure credential storage.

Collaboration and Communication

Work directly with architects engineersmanagers and crossfunctional teams to use Azure services effectively.

Provide bestpractice guidance related to SaaSPaaS and IaaS.

Communicate clearly in written and verbal formwith internal and external stakeholders.

Support multiple concurrent projects of complextechnical scope.

Qualifications

Minimum 3 years of experience with MicrosoftAzure services.

Minimum 3 years experience supporting VDOT /E ZPass Virginia tolling applications infrastructure and cloud workloads including hands-on diagnostic work with transaction flows roadway sensor data ingestion and tolling application performance tuning.

Bachelors degree in computer scienceinformation systems or equivalent experience.

Demonstrated ability to communicate requirementsand design concepts clearly.

Experience working in Windows environments.

Implementing Rubrik backup & recovery forAzure IaaS/PaaS including policy sets snapshot lifecycle tuning and DRvalidation.

Experience with Office 365 services andadministering Single SignOn (SSO) including Entra ID.

Experience administering SecretServer privileged access vaults including credential rotation vault workflow troubleshooting and integration with Azure workloads.

Solid scripting experience (PowerShell and/orPython).

Ability to create network and system topologydocumentation.

Experience with Azure Virtual Desktops.

Office 365 services and Power Apps.

Azure certification (preferred).

Special Instructions

Position requires a fingerprintbased backgroundcheck.

Continued education is expected at the contractors own expense to stay current with VDOT technologies.

Skill	Required / Desired	Amount	of Experience
Microsoft Azure administration/engineering	Required	3	Years
Microsoft Windows environments (2019)	Required	5	Years
Server infrastructure protocols firewalls certificates load balancers	Required	2	Years
Support of VDOT / E-ZPass Virginia tolling applications infrastructure and cloud workloads	Required	3	Years
Networking server administration (Windows/Linux) databases cloud environments	Required	2	Years
Implementing Rubrik backup & recovery for Azure IaaS/PaaS	Required	2	Years
Scripting with PowerShell/Python	Required	2	Years
Continuous integration tools (Azure DevOps Jenkins Git TFS)	Desired	1	Years
Administration of SecretServer privileged access vaults.	Required	2	Years
Office 365 and Power Apps platforms	Required	1	Years
Infrastructure as Code (Terraform or equivalent)	Desired	1	Years
Containerization (Docker Kubernetes)	Desired	1	Years
Experience with PCI or similar compliance frameworks	Required	1	Years
Key Vault secrets and certificate management	Desired	1	Years
Single Sign On and identity administration (Entra ID)	Required	1	Years
Azure certification (AZ 104 AZ 305 or similar)	Desired	1	Years
Experience with enterprise governance models	Required	1	Years
Experience analyzing cloud cost trends and delivering cost optimization recommendations	Desired	1	Years
Azure Virtual Desktops	Desired	1	Years