Azure DevOps Engineer

Azure Cloud Engineer (TS/SCI)

About the Role

We are hiring an Azure Cloud Engineer to build and run secure, isolated cloud environments supporting a federal mission. This is a hands-on seat covering infrastructure as code, pipeline automation, Kubernetes, and virtual desktop delivery, with a real voice in where the engineering goes next.

What You Will Do

• Stand up and administer Azure Kubernetes Service (AKS) clusters, including the compute, networking, and storage that sit beneath them.
• Build automated Azure Virtual Desktop (AVD) image pipelines that produce, test, and rotate golden images on a regular cycle.
• Write, review, and debug infrastructure code in Terraform, Bicep, and ARM templates, whether newly authored or inherited.
• Own Azure DevOps CI/CD pipelines from build definitions through release.
• Provision core Azure services (Virtual Machines, Key Vault, and related resources) through pipeline-driven deployments instead of manual setup.
• Architect and operate isolated, high-security enclaves in Azure, and keep them stable, performant, and hardened.
• Enforce least-privilege access by defining and maintaining identity and permission policies across enclave systems.
• Help customers get software onto standard desktop builds, scripting the work with DSC or Packer wherever possible.
• Design the Kubernetes orchestration behind containerized workloads and automate how those workloads are deployed, scaled, and operated.
• Track infrastructure health, chase down performance problems, and tune resources for efficiency.
• Serve as an escalation point for difficult Azure issues.
• Keep clear written records of configurations, runbooks, and fixes.
• Work with engineering, security, and operations peers to improve the platform.
• Give leadership input on engineering direction and new approaches.
• Explain technical tradeoffs in plain terms to stakeholders who are not engineers.

What You Bring

• Active TS/SCI clearance or higher. U.S. citizenship is required under the governing contract.
• 5+ years building and administering cloud environments, primarily in Azure.
• Prior work inside secure enclave environments and working knowledge of security compliance frameworks.
• Deep familiarity with Azure services, Azure Virtual Desktop in particular.
• A track record of automating Azure deployments through code using Bicep, Terraform, ARM templates, and Azure DevOps.
• Fluency in PowerShell, YAML, and JSON, plus comfort picking up other scripting languages.
• Degree in computer science, IT, or a similar discipline, or equivalent hands-on experience.
• Sound judgment on technical decisions and a knack for untangling hard problems.
• A habit of tightening up how the team builds and ships, so work moves faster over time.
• Preferred: AZ-104, AZ-305, or comparable Azure certifications.

Location and Travel

• Full-time onsite in Northern Virginia. Candidates must live within commuting distance or be open to relocating; relocation assistance is offered.
• Travel of up to 10%.