Hybrid Multi-Cloud Engineer SME (Azure/Endpoint Management)

Hybrid Multi-Cloud Engineer SME (Azure/Endpoint Management)

GES is seeking a highly qualified Hybrid Multi-Cloud Engineer SME to support mission-critical Department of Defense (DoD) programs Fort Belvoir, VA or Albuquerque, New Mexico. The successful candidate will serve as a senior technical contributor responsible for architecting, engineering, implementing, and sustaining secure hybrid cloud solutions across Microsoft Azure and Amazon Web Services (AWS). This position requires both strategic cloud architecture expertise and hands-on engineering experience in designing and deploying modern cloud infrastructure, endpoint management, and security solutions within highly secure enterprise environments.

The ideal candidate is an experienced cloud engineer who thrives in fast-paced environments, enjoys solving complex technical challenges, and is capable of developing greenfield cloud solutions while collaborating with cross-functional engineering and cybersecurity teams. This position may also provide technical leadership and mentoring to junior cloud engineers.

Clearance: Must have Active DoD Top Secret security clearance with eligibility for Sensitive Compartmented Information (SCI) access.

Primary Responsibilities:
• Architect, design, engineer, and implement secure hybrid cloud solutions utilizing Microsoft Azure and AWS.
• Design and deploy greenfield cloud environments supporting Department of Defense mission requirements.
• Develop secure, scalable, and resilient cloud architectures aligned with DoD cybersecurity guidance and Zero Trust principles.
• Design and implement Infrastructure as Code (IaC) solutions utilizing Terraform, Azure Bicep, ARM Templates, CloudFormation, or similar technologies.
• Design and administer Microsoft Intune, Microsoft Defender for Endpoint, Defender for Server, and Defender for Cloud, Microsoft Purview, and Azure Virtual Desktop (AVD) environments supporting enterprise endpoint management and security.
• Engineer secure networking solutions integrating on-premises infrastructure with Azure and AWS cloud environments.
• Implement cloud-native monitoring, logging, backup, disaster recovery, and security services.
• Automate cloud deployments and operational processes using PowerShell, Python, Azure CLI, AWS CLI, or similar scripting tools.
• Collaborate with cybersecurity, systems engineering, networking, and application development teams to deliver integrated cloud solutions.
• Support system accreditation activities and ensure compliance with DoD security policies, NIST guidance, and Risk Management Framework (RMF) requirements. Evaluate emerging cloud technologies and recommend innovative technical solutions supporting mission objectives.
• Provide technical mentorship and guidance to junior engineers and support technical leadership responsibilities as required.

Required Qualifications
• Bachelor's degree in computer science, Information Systems, Engineering, or a related technical discipline with 12+ years of relevant experience. Additional experience may be considered in lieu of a degree.
• Active DoD Top Secret security clearance with eligibility for Sensitive Compartmented Information (SCI) access.
• Current DoD 8570/8140 IAT Level II certification (Security+, CySA+, CCNA Security, or equivalent).
• Microsoft Certified: Azure Solutions Architect Expert certification.
• Minimum of five (5) years of experience architecting and implementing enterprise cloud solutions.
• Extensive experience designing and deploying Microsoft Azure infrastructure and platform services.
• Demonstrated experience architecting hybrid cloud environments integrating on-premises infrastructure with Microsoft Azure and AWS.
• Hands-on experience implementing and administering:

o Microsoft Intune

o Microsoft Defender for Endpoint

o Microsoft Purview

o Azure Virtual Desktop (AVD)
• Experience managing enterprise endpoint security, device compliance, application deployment, endpoint configuration, data governance, information protection, and Data Loss Prevention (DLP).
• Experience with Infrastructure as Code (Terraform, Azure Bicep, ARM Templates, CloudFormation, or equivalent).
• Experience automating cloud administration through PowerShell, Python, Bash, Azure CLI, and/or AWS CLI.
• Strong understanding of cloud networking, enterprise security, Zero Trust architecture, NIST cybersecurity guidance, and RMF.
• Excellent written and verbal communication skills.
• Ability to work effectively within dynamic, mission-focused engineering organizations.
• Familiarization with cloud connected endpoints, remote users, virtual devices, and non-persistent endpoints.

Desired Qualifications
• AWS Certified Solutions Architect - Professional certification.
• Additional AWS Professional or Specialty certifications.
• Experience supporting Department of Defense cloud modernization initiatives.
• Familiarity with the Department of Defense Joint Warfighting Cloud Capability (JWCC), DoD Joint Tenant environments, or other enterprise cloud initiatives.
• Understanding of the DoD Enterprise Cloud Strategy and cloud adoption across the Joint Force.
• Familiarization with Trellix and Tanium in on-prem environments.
• Experience supporting Zero Trust implementation initiatives within DoD environments.
• Experience with Windows 365 Cloud PC.
• Experience with Kubernetes, Azure Kubernetes Service (AKS), Amazon Elastic Kubernetes Service (EKS), or Red Hat OpenShift.
• Experience with Azure Arc or other hybrid cloud management platforms.
• Familiarity with DevSecOps methodologies and CI/CD automation pipelines.
• Previous experience serving as a technical lead or mentoring cloud engineering teams.

Location: Fort Belvoir, VA or Albuquerque, New Mexico