Azure Cloud Engineer with Security Clearance

Cient is seeking an Azure Cloud Engineer to join the Eng and Ops team. The role includes engineering, application support, and rotational help‐desk support within the Tol ling group. Includes API Gateways, AVD, App Insights, && Office 365.

Primary Responsibilities Cloud Operations and Engineering • Maintain and implement cloud resources in the Tol ling Azure environment. • Ensure compliance with Virginia government policies regarding security, IAM, network contr ols, and cost governance. • Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts. • Assist with access reviews, role assignments, and least‐privilege IAM evaluations. • Manage vendor‐required updates and ensure compatibility. • Implement fault‐tolerant and highly available Azure solutions.

Monitoring, Troubleshooting, and Diagnostics • Monitor Azure services and application workloads to ensure uptime and availability. • Troubleshoot issues related to connectivity, access, security, application performance, and service degradation. • Perform diagnostic deep‐dives using logs, metrics, traces, Azure Monitor, and Log Analytics. • Analyze and tune system/application performance.

Operational Support • Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks. • Triage production issues, ensure timely resolution, and document root‐cause findings. • Execute and support off‐hours work as needed. • Define change requests, detailed implementation plans, and roll‐back procedures.

Technical Development and Compliance • Understand end‐to‐end data flows across tol ling systems, roadways data, financial transactions, and reporting tools. • Support optimization of integrations and data movement. • Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns. • Manage key vaults, passwords, certificates, and secure credential storage.

Collaboration and Communication • Work directly with architects, engineers, managers, and cross‐functional teams to use Azure services effectively. • Provide best‐practice guidance related to SaaS, PaaS, and IaaS. • Communicate clearly in written and verbal form with internal and external stakeholders. • Support multiple concurrent projects of complex technical scope.

Qualifications • Minimum 3 years of experience with Microsoft Azure services. • Minimum 3 years experience supporting /E ‐ZPass Virginia tol ling applications , infrastructure, and cloud workloads, including hands-on diagnostic work with transaction flows, roadway sensor data ingestion, and tol ling application performance tuning. • Bachelor's degree in computer science, information systems, or equivalent experience. • Demonstrated ability to communicate requirements and design concepts clearly. • Experience working in Windows environments. • Implementing Rubrik backup && recovery for Azure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DR validation. • Experience with Office 365 services and administering Single Sign‐On (SSO) including Entra ID. • Experience administering Secret Server privileged access vaults including credential rotation, vault workflow troubleshooting, and integration with Azure workloads. • Solid scripting experience (PowerShell and/or Python). • Ability to create network and system topology documentation. • Experience with Azure Virtual Desktops. • Office 365 services and Power Apps. • Azure certification (preferred).

Special Instructions • Position requires a fingerprint‐based background check. • Continued education is expected at the contractor's own expense to stay current with Client technologies.

Skills Required Required Experience Candidate Experience Last Used Microsoft Azure administration/engineering Required 3 Years Microsoft Windows environments (2019) Required 5 Years Server infrastructure, protocols, firewalls, certificates, load balancers Required 2 Years Support of Client / E-ZPass Virginia tol ling applications, infrastructure, and cloud workloads Required 3 Years Networking, server administration (Windows/Linux), databases, cloud environments Required 2 Years Implementing Rubrik backup && recovery for Azure IaaS/PaaS Required 2 Years Scripting with PowerShell/Python Required 2 Years Continuous integration tools (Azure DevOps, Jenkins, Git, TFS) Desired 1 Years Administration of SecretServer privileged access vaults.

Required 2 Years Office 365 and Power Apps platforms Required 1 Years Infrastructure as Code (Terraform or equivalent) Desired 1 Years Containerization (Docker, Kubernetes) Desired 1 Years Experience with PCI or similar compliance frameworks Required 1 Years Key Vault, secrets and certificate management Desired 1 Years Single Sign On and identity administration (Entra ID) Required 1 Years Azure certification (AZ 104, AZ 305, or similar) Desired 1 Years Experience with enterprise governance models Required 1 Years Experience analyzing cloud cost trends and delivering cost optimization recommendations Desired 1 Years Azure Virtual Desktops Desired 1 Years Description Questions Answers Question 1 Commonwealth of Virginia security policies prohibit the use of offshore IT contractors.

Do you attest to the fact that your candidate will physically reside within the US for the duration of the assignment? Question 2 What is your candidate's email address?