Storage Engineer – Architect

This role is central to OIT's hybrid infrastructure strategy, ensuring reliable integration of cloud and on-premises environments while maintaining high availability and performance. The engineer drives automation-first operations using infrastructure-as-code and CI/CD practices to improve consistency, speed, and operational resilience. The position enforces zero-trust and compliance requirements, supports migration and modernization initiatives, and provides technical leadership across cloud engineering activities.

PRIMARY RESPONSIBILITIES

Cloud Infrastructure Engineering and Operations

- Design, implement, and manage cloud infrastructure solutions in Microsoft Azure and AWS, with Azure as the primary platform and AWS support focused on integration with project-team-managed workloads and potential future expansion.

- Build and maintain cloud networking, storage, compute, app services, virtualization, and containerized environments.

- Ensure scalability, resiliency, and high availability through proactive performance tuning, capacity planning, and operational optimization.

- Partner with operations teams to monitor production services, resolve incidents, and improve reliability across cloud platforms.

Security, Identity, and Compliance

- Implement and maintain cloud security configurations aligned with SEC security policies and zero-trust principles.

- Engineer and support identity and access controls using Microsoft Entra Identity, RBAC, conditional access, and least-privilege models.

- Enforce governance controls and policy compliance to support organizational and regulatory requirements, audit readiness, and risk reduction.

- Drive patching, vulnerability remediation, and secure configuration baselines across cloud-hosted infrastructure.

Automation, IaC, and CI/CD Enablement

- Develop and maintain automation using PowerShell, Bicep, ARM templates, and Terraform to provision and manage infrastructure.

- Integrate infrastructure workflows with CI/CD pipelines to standardize deployments, reduce manual effort, and improve release quality.

- Implement reusable IaC modules, scripting standards, and version-controlled operational artifacts.

- Advance automated operating models to increase consistency, security, and scalability.

Migration, Modernization, and Technical Leadership

- Lead migration of workloads from legacy/on-premises platforms to modern Azure cloud and hybrid architectures with minimal disruption.

- Optimize cloud resource utilization, cost, and service performance based on operational and mission priorities.

- Provide technical guidance and mentorship to junior engineers and cross-functional infrastructure teams.

- Create and maintain architecture documentation, SOPs, and implementation guidance to support sustainable operations.

REQUIRED QUALIFICATIONS

Education: Bachelor's degree in a relevant field.

Experience:

- Minimum 8 years of experience in IT infrastructure roles, including 5+ years focused on Azure cloud engineering.

- Demonstrated experience designing and managing secure, highly available cloud environments for enterprise services.

- Proven experience leading Azure cloud migration and modernization efforts in regulated environments.

- Experience designing, configuring, and administering Azure cloud enterprise implementations using compute cloud resources such as Virtual Machines, Scale sets, Azure containers or Kubernetes, and Cloud Services.

- Strong experience with Azure tools such as Azure DevOps, Repos, Pipelines, and Boards.

- Experienced in Infrastructure as a Service (IaaS), Platform as a service (PaaS) and Software as a service (SaaS) Cloud Hosting Architecture/Design patterns to meet scalability, capacity, availability, performance, storage, cost, and application/platform requirements

Technical Skills:

- Cloud networking, storage, app services, virtualization, and containerization

- DevSecOps practices, CI/CD pipeline implementation and automation practices

- Infrastructure-as-Code at production scale: PowerShell, Bicep, ARM templates, and Terraform, with reusable modules, automated validation, and drift detection.

- Cloud governance, policy enforcement, operational compliance and security in Azure: Azure Policy, RBAC, conditional access, managed identities

- Zero-trust security principles, networking design patterns, and secure cloud configuration practices

- Microsoft Entra Identity services

PREFERRED QUALIFICATIONS

- Microsoft Certified: Azure Solutions Architect Expert

- Experience supporting federal agency IT environments with FISMA/FedRAMP-driven security and compliance requirements.

- Hands-on experience with Kubernetes/OpenShift and cloud-native container platform operations.

- Experience integrating observability and ITSM platforms to improve incident response and service reliability.

- Experience implementing immutable infrastructure and policy-as-code controls in enterprise environments.

- Experience with cloud cost management and FinOps practices to optimize spend and performance.

- HashiCorp Terraform Associate