Azure Cloud Engineer

Job Description

Title: Azure Cloud Engineer
Location: Mechanicsville, VA (Remote) locals preferred
Duration: Long term
Interview – Webcam

Primary Responsibilities
• Cloud Operations and Engineering
• Maintain and implement cloud resources in the Tolling Azure environment.
• Ensure compliance with Virginia government tpolicies regarding security, IAM, network controls, and cost governance.
• Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governanceartifacts.
• Assist with access reviews, role assignments, and least privilege IAM evaluations.
• Manage vendor required updates and ensure compatibility.
• Implement fault tolerant and highly available Azure solutions.
• Monitoring, Troubleshooting, and Diagnostics
• Monitor Azure services and application workloads to ensure uptime and availability.
• Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.
• Perform diagnostic deep dives using logs, metrics, traces, Azure Monitor, and Log Analytics.
• Analyze and tune system/application performance.
• Operational Support
• Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.
• Triage production issues, ensure timely resolution, and document root cause findings.
• Execute and support off hours work as needed.
• Define change requests, detailed implementation plans, and roll back procedures.
• Technical Development and Compliance
• Understand end to end data flows across tolling systems, roadways data, financial transactions, and reporting tools.
• Support optimization of integrations and data movement.
• Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns.
• Manage key vaults, passwords, certificates, and secure credential storage.
• Collaboration and Communication
• Work directly with architects, engineers, managers, and cross functional teams to use Azure services effectively.
• Provide best practice guidance related to SaaS, PaaS, and IaaS.
• Communicate clearly in written and verbal form with internal and external stakeholders.
• Support multiple concurrent projects of complex technical scope.

Qualifications
• Experience with Microsoft Azure services.
• Experience supporting VDOT /E ZPass Virginia tolling applications, infrastructure, and cloud workloads, including hands-on diagnostic work with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.
• Bachelor’s degree in computer science, information systems, or equivalent experience.
• Demonstrated ability to communicate requirements and design concepts clearly.
• Experience working in Windows environments.
• Implementing Rubrik backup & recovery for Azure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DRvalidation.
• Experience with Office 365 services and administering Single Sign On (SSO) including Entra ID.
• Experience administering Secret Server privileged access vaults including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.
• Solid scripting experience (PowerShell and/or Python).
• Ability to create network and system topology documentation.
• Experience with Azure Virtual Desktops.
• Office 365 services and Power Apps.
• Azure certification (preferred).

Special Instructions
Position requires a fingerprint based background check.
Continued education is expected at the contractor’s own expense to stay current with VDOT technologies.

Required / Desired Skills
Skill Required / Desired Amount of Experience
• Microsoft Azure administration/engineering Required
• Microsoft Windows environments (2019+) Required
• Server infrastructure, protocols, firewalls, certificates, load balancers Required
• Support of VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads Required
• Networking, server administration (Windows/Linux), databases, cloud environments Required
• Implementing Rubrik backup & recovery for Azure IaaS/PaaS Required
• Scripting with PowerShell/Python Required
• Continuous integration tools (Azure DevOps, Jenkins, Git, TFS) Desired
• Administration of SecretServer privileged access vaults. Required
• Office 365 and Power Apps platforms Required
• Infrastructure as Code (Terraform or equivalent) Desired
• Containerization (Docker, Kubernetes) Desired
• Experience with PCI or similar compliance frameworks Required
• Key Vault, secrets and certificate management Desired
• Single Sign On and identity administration (Entra ID) Required
• Azure certification (AZ 104, AZ 305, or similar) Desired
• Experience with enterprise governance models Required
• Experience analyzing cloud cost trends and delivering cost optimization recommendations Desired
• Azure Virtual Desktops Desired