Azure Cloud Engineer

Cloud Engineer

The NC Department of Transportation Web Services group is seeking a Cloud Engineer with solid Azure experience to help implement and manage cloud infrastructure in a secure and scalable manner. The contractor will work closely with senior architects and application teams to support the deployment, configuration, documentation and optimization of Azure services, networking components, and infrastructure. This role requires a proactive engineer who can contribute to documentation, knowledge sharing, and enforcement of cloud governance policies in a large public-sector environment. The engineer will support a maturing Azure environment, assisting in both new deployments and modernization of existing applications.

Work is largely related to the Real ID federal mandate and the need for quicker processing in NC DMV databases.

Key Responsibilities

• Assist in the setup and configuration of Core Azure subscriptions, resource groups, and environments.
• Implement Azure Policies, RBAC permissions, and tagging standards based on team guidance.
• Deploy and support core Azure networking (VWAN, Azure Firewall, VNets, NSGs, Private Endpoints, VPN/ExpressRoute).
• Help configure and manage Azure Application Gateways and related components.
• Contribute to infrastructure automation using Bicep, ARM, or PowerShell scripts.
• Troubleshoot connectivity and application including issues between Azure and on-prem networks
• Support incident resolution and assist with root cause analysis.
• Monitor Azure environments and assist in alerting, logging, and diagnostics configuration.
• Collaborate with development, architecture, and security teams on deployments and infrastructure changes.
• Follow and reinforce cloud governance, security, and compliance policies.

Preferred:

AZ-104, AZ-700, AZ-305 and other Azure certifications.

Skill - Preference - Minimum - Span

Hands on experience managing and deploying azure landing zone architecture in enterprise environments - Required - 3 - Years

Strong azure networking skills (VWAN, Express Route, VPN, Firewall, VNET etc) including hybrid networking with on premises. - Required - 3 - Years

Experience designing Azure environments with a “private-by-default” approach which includes use of Private Endpoints, disabling public IPs, restricting access via NSGs and Azure Firewall, and enforcing policies to prevent public exposure. - Required - 3 - Years

Familiarity with implementing and managing Azure Policies, RBAC, and resource tagging strategies - Required - 3 - Years

Strong problem-solving and communication skills; ability to collaborate effectively with cross-functional teams - Required - 5 - Years