Cloud Engineer

Overview Role focused on provisioning, operating, and securing Azure infrastructure through automated pipelines and DevOps practices. Responsible for building hardened, compliant cloud environments and collaborating with cross-functional teams. Responsibilities Provision Azure infrastructure components including virtual machines, key vaults, and supporting services through automated pipeline workflows. Oversee the health of cloud environments, resolve bottlenecks, and tune resource utilization. Build and sustain continuous integration and delivery workflows within Azure DevOps. Author and maintain infrastructure definitions using declarative tooling (Bicep, Terraform, or ARM). Audit, refactor, and debug existing infrastructure code across the platform. Architect and operate isolated, hardened Azure environments for sensitive workloads. Safeguard the reliability, throughput, and protection posture of these isolated environments. Administer access controls and identity governance, enforcing minimum-necessary permissions throughout. Work alongside adjacent engineering groups to evolve cloud capabilities. Diagnose advanced platform issues and serve as a senior escalation point. Capture runbooks, design decisions, and remediation steps in written form. Automate the lifecycle of Azure Virtual Desktop images, including scheduled refreshes. Build and operate Kubernetes-based workload orchestration. Stand up and tune AKS clusters along with their supporting fabric. Streamline rollout, elasticity, and day-two operations for containerized services. Help end users layer applications onto standardized desktop images using configuration management tooling (DSC, Packer, or similar). Work with senior stakeholders to influence technical direction and forward-looking initiatives. Translate dense technical material for business and operational audiences. Qualifications Degree in a computing discipline, or comparable hands-on background. A decade or more building and running cloud platforms, with Azure as the primary focus. Time spent operating inside hardened or regulated cloud boundaries, with working knowledge of relevant compliance regimes. Deep familiarity with the Azure service catalog, particularly Azure Virtual Desktop. Practical experience with declarative provisioning (Terraform, Bicep, ARM) integrated with Azure DevOps. Comfort scripting in PowerShell and adjacent languages. A track record of replacing manual provisioning with code-driven workflows. Fluency across YAML, JSON, Bicep, and PowerShell. Willingness to weigh in on architectural calls and untangle ambiguous problems. A habit of sharpening team workflows and shipping cadence. Azure credentials (AZ-104, AZ-305, or comparable) are a plus. Occasional travel, roughly one week in ten. Current Top-Secret clearance with SCI access. Position Conditions Candidate must live within commuting range of Lorton, VA, or be open to relocating (assistance available). Role is performed onsite. Some travel required (up to 10%). Active TS/SCI clearance (or higher) is mandatory. U.S. citizenship is required under the terms of the supporting federal contract. #J-18808-Ljbffr