VDOT Tolling Azure Cloud Engineer

VDOT ITD Tolling is seeking an Azure Cloud Engineer to join the Eng and Ops team. The role includes engineering, application support, and rotational helpdesk support within the Tolling group. Includes API Gateways, AVD, App Insights, & Office 365.

The VDOT Information Technology Division (ITD) Tolling group is seeking a Cloud Engineer to join the Tolling Engineering and Operations Team. This role provides Azure Cloud Engineering, application support, and rotational helpdesk support within the Tolling group.

The selected candidate will implement, maintain, and support resources within the Tolling Azure environment. The position collaborates with management, architects, developers, DBAs, and engineers to ensure secure, efficient, and optimized use of Azure services such as App Services, API Gateways, Function Apps, Azure Virtual Desktops, and Azure Kubernetes Service.

Primary Responsibilities

Cloud Operations and Engineering

• Maintain and implement cloud resources in the Tolling Azure environment.

• Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.

• Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.

• Assist with access reviews, role assignments, and leastprivilege IAM evaluations.

• Manage vendorrequired updates and ensure compatibility.

• Implement faulttolerant and highly available Azure solutions.

Monitoring, Troubleshooting, and Diagnostics

• Monitor Azure services and application workloads to ensure uptime and availability.

• Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.

• Perform diagnostic deepdives using logs, metrics, traces, Azure Monitor, and Log Analytics.

• Analyze and tune system/application performance.

Operational Support

• Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.

• Triage production issues, ensure timely resolution, and document rootcause findings.

• Execute and support offhours work as needed.

• Define change requests, detailed implementation plans, and rollback procedures.

Technical Development and Compliance

• Understand endtoend data flows across tolling systems, roadways data, financial transactions, and reporting tools.

• Support optimization of integrations and data movement.

• Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns.

• Manage key vaults, passwords, certificates, and secure credential storage.

Collaboration and Communication

• Work directly with architects, engineers, managers, and crossfunctional teams to use Azure services effectively.

• Provide bestpractice guidance related to SaaS, PaaS, and IaaS.

• Communicate clearly in written and verbal form with internal and external stakeholders.

• Support multiple concurrent projects of complex technical scope.

Qualifications

• Minimum 3 years of experience with Microsoft Azure services.

• Bachelor s degree in computer science, information systems, or equivalent experience.

• Demonstrated ability to communicate requirements and design concepts clearly.

• Experience working in Windows environments.

• Experience with Office 365 services and administering Single SignOn (SSO) including Entra ID.

• Solid scripting experience (PowerShell and/or Python).

• Ability to create network and system topology documentation.

• Experience with Azure Virtual Desktops.

• Office 365 services and Power Apps.

• Azure certification (preferred).

Special Instructions

• Position requires a fingerprintbased background check.

• Continued education is expected at the contractor s own expense to stay current with VDOT technologies.

Skill	Required / Desired	Amount	of Experience
Microsoft Windows environments (2019+)	Required	2	Years
Server infrastructure, protocols, firewalls, certificates, load balancers	Required	2	Years
Microsoft Azure administration/engineering	Required	3	Years
Networking, server administration (Windows/Linux), databases, cloud environments	Required	2	Years
Scripting with PowerShell/Python	Required	2	Years
Continuous integration tools (Azure DevOps, Jenkins, Git, TFS)	Desired	1	Years
Office 365 and Power Apps platforms	Required	1	Years
Infrastructure as Code (Terraform or equivalent)	Required	1	Years
Containerization (Docker, Kubernetes)	Desired	1	Years
Experience with PCI or similar compliance frameworks	Required	1	Years
Key Vault, secrets and certificate management	Desired	1	Years
Single Sign-On and identity administration (Entra ID)	Required	1	Years
Azure certification (AZ-104, AZ-305, or similar)	Desired	1	Years
Experience with enterprise governance models	Desired	1	Years
Experience analyzing cloud cost trends and delivering cost-optimization recommendations	Desired	1	Years
Azure Virtual Desktops	Desired	1	Years