Azure Cloud Engineer

Primary Responsibilities

Cloud Operations and Engineering

• Maintain and implement cloud resources in the Tolling Azure environment.
• Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.
• Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.
• Assist with access reviews, role assignments, and least‑privilege IAM evaluations.
• Manage vendor‑required updates and ensure compatibility.
• Implement fault‑tolerant and highly available Azure solutions.

Monitoring, Troubleshooting, and Diagnostics

• Monitor Azure services and application workloads to ensure uptime and availability.
• Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.
• Perform diagnostic deep‑dives using logs, metrics, traces, Azure Monitor, and Log Analytics.
• Analyze and tune system/application performance.

Operational Support

• Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.
• Triage production issues, ensure timely resolution, and document root‑cause findings.
• Execute and support off‑hours work as needed.
• Define change requests, detailed implementation plans, and roll‑back procedures.

Technical Development and Compliance

• Understand end‑to‑end data flows across tolling systems, roadways data, financial transactions, and reporting tools.
• Support optimization of integrations and data movement.
• Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns.
• Manage key vaults, passwords, certificates, and secure credential storage.

Collaboration and Communication

• Work directly with architects, engineers, managers, and cross‑functional teams to use Azure services effectively.
• Provide best‑practice guidance related to SaaS, PaaS, and IaaS.
• Communicate clearly in written and verbal form with internal and external stakeholders.
• Support multiple concurrent projects of complex technical scope.

Qualifications

• Minimum 3 years of experience with Microsoft Azure services.
• Bachelor’s degree in computer science, information systems, or equivalent experience.
• Demonstrated ability to communicate requirements and design concepts clearly.
• Experience working in Windows environments.
• Experience with Office 365 services and administering Single Sign‑On (SSO) including Entra ID.
• Solid scripting experience (PowerShell and/or Python).
• Ability to create network and system topology documentation.
• Experience with Azure Virtual Desktops.
• Office 365 services and Power Apps.
• Azure certification (preferred).

Special Instructions

• Position requires a fingerprint‑based background check.
• Continued education is expected at the contractor’s own expense to stay current with VDOT technologies. 

Skill	Required /Desired	Amount	Actual Yearsof Experience
Microsoft Windows environments (2019+)	Required	2
Server infrastructure, protocols, firewalls, certificates, load balancers	Required	2
Microsoft Azure administration/engineering	Required	3
Networking, server administration (Windows/Linux), databases, cloud environments	Required	2
Scripting with PowerShell/Python	Required	2
Continuous integration tools (Azure DevOps, Jenkins, Git, TFS)	Desired	1
Office 365 and Power Apps platforms	Required	1
Infrastructure as Code (Terraform or equivalent)	Required	1
Containerization (Docker, Kubernetes)	Desired	1
Experience with PCI or similar compliance frameworks	Required	1
Key Vault, secrets and certificate management	Desired	1
Single Sign-On and identity administration (Entra ID)	Required	1
Azure certification (AZ-104, AZ-305, or similar)	Desired	1
Experience with enterprise governance models	Desired	1
Experience analyzing cloud cost trends and delivering cost-optimization recommendations	Desired	1
Azure Virtual Desktops	Desired	1