Azure Cloud Engineer

Mode of Interview:- Web cam Interview OnlyLong termRemoteRichmond-VALocal to VA Or Nearer to VA Candidates Only

Job Description

The Client o join the Eng and Ops team. The role includes engineering, application support, and rotational help-desk support within the Tolling group. Includes API Gateways, AVD, App Insights, & Office 365.

Responsibilities: Cloud Operations and Engineering

• Maintain and implement cloud resources in the Tolling Azure environment.

• Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.

• Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.

• Assist with access reviews, role assignments, and least-privilege IAM evaluations.

• Manage vendor-required updates and ensure compatibility.

• Implement fault-tolerant and highly available Azure solutions.

Monitoring, Troubleshooting, and Diagnostics

• Monitor Azure services and application workloads to ensure uptime and availability.

• Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.

• Perform diagnostic deep-dives using logs, metrics, traces, Azure Monitor, and Log Analytics.

• Analyze and tune system/application performance.

Operational Support

• Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.

• Triage production issues, ensure timely resolution, and document root-cause findings.

• Execute and support off-hours work as needed.

• Define change requests, detailed implementation plans, and roll-back procedures.

Technical Development and Compliance

• Understand end-to-end data flows across tolling systems, roadways data, financial transactions, and reporting tools.

• Support optimization of integrations and data movement.

• Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns.

• Manage key vaults, passwords, certificates, and secure credential storage.

Collaboration and Communication

• Work directly with architects, engineers, managers, and cross-functional teams to use Azure services effectively.

• Provide best-practice guidance related to SaaS, PaaS, and IaaS.

• Communicate clearly in written and verbal form with internal and external stakeholders.

• Support multiple concurrent projects of complex technical scope.

Qualifications

• Minimum 3 years of experience with Microsoft Azure services.

• Minimum 3 years experience supporting VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads, including hands-on diagnostic work with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.

• Bachelor's degree in computer science, information systems, or equivalent experience.

• Demonstrated ability to communicate requirements and design concepts clearly.

• Experience working in Windows environments.

• Experience with Office 365 services and administering Single Sign-On (SSO) including Entra ID.

• Experience administering SecretServer privileged access vaults including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.

• Solid scripting experience (PowerShell and/or Python).

• Ability to create network and system topology documentation.

• Experience with Azure Virtual Desktops.

Special Instructions

• Position requires a fingerprint-based background check.

• Continued education is expected at the contractor's own expense to stay current with VDOT technologies.

Skills/Requirements

Skill Required Years

Microsoft Azure administration/engineering Required 3 Years

Microsoft Windows environments (2019+) Required 5 Years

Server infrastructure, protocols, firewalls, certificates, load balancers Required 2 Years

Support of VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads Required 3 Years

Networking, server administration (Windows/Linux), databases, cloud environments Required 2 Years

Implementing Rubrik backup & recovery for Azure IaaS/PaaS Required 2 Years

Scripting with PowerShell/Python Required 2 Years

Continuous integration tools (Azure DevOps, Jenkins, Git, TFS) Desired 1 Years

Administration of SecretServer privileged access vaults. Required 2 Years

Office 365 and Power Apps platforms Required 1 Years

Infrastructure as Code (Terraform or equivalent) Desired 1 Years

Containerization (Docker, Kubernetes) Desired 1 Years

Experience with PCI or similar compliance frameworks Required 1 Years

Key Vault, secrets and certificate management Desired 1 Years

Single Sign On and identity administration (Entra ID) Required 1 Years

Azure certification (AZ 104, AZ 305, or similar) Desired 1 Years

Experience with enterprise governance models Required 1 Years

Experience analyzing cloud cost trends and delivering cost optimization recommendations Desired 1 Years

Azure Virtual Desktops Desired 1 Years