> Markdown version of [/jobs/ext/4289878-senior-cloud-engineer-microsoft-azure](https://www.wearedevelopers.com/jobs/ext/4289878-senior-cloud-engineer-microsoft-azure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Engineer - Microsoft Azure - **Company:** TechSur Solutions - **Location:** Reston, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Engineering, Configuration Management Databases, Linux, DevOps, Disaster Recovery, Domain Name System (DNS), Github, Virtual Private Networks (VPN), OpenID, Role-Based Access Control, Azure Active Directory, Cloud Services, Ansible, Zero Trust Network Access, Runbook, Security Assertion Markup Language (SAML), Single Sign-On, Windows Desktop, Datadog, Policy as Code, Google Cloud, System Availability, Firewalls (Computer Science), Information Technology, Bicep, Hashicorp, Microsoft Sentinel, Cloud Migration, Terraform, Oracle Cloud Infrastructure, Splunk, Dynatrace, Servicenow - **Published:** October 13, 2026 - **Apply:** https://www.dice.com/job-detail/3fa57202-d21b-4094-af29-fc53e33b7ae1 ## About the Role * Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field. * At least 9 years of experience deploying and configuring cloud environments, including significant hands-on Azure work. * Production experience with Infrastructure-as-Code using Terraform and/or Bicep (ARM). * Hands-on experience with Azure landing zones, VNet design, Azure Firewall, and ExpressRoute or site-to-site VPN. * Experience administering Microsoft Entra ID, RBAC, and single sign-on federation (SAML 2.0/OIDC). * Experience monitoring, patching, and troubleshooting Windows and Linux workloads in Azure. * Working knowledge of NIST SP 800-53 security controls in a federal environment. * Ability to obtain and maintain the background investigation required by the federal customer. Preferred Qualifications * Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or DevOps Engineer Expert (AZ-400). * Microsoft Certified: Azure Security Engineer Associate (AZ-500) or HashiCorp Certified Terraform Associate. * Experience in Azure Government or FedRAMP Moderate/High environments, including support for ATO packages. * Working knowledge of AWS, Google Cloud, or Oracle Cloud Infrastructure. * Experience with Azure DevOps or GitHub Actions pipelines, Ansible, and policy-as-code. * Experience integrating Azure tooling with ServiceNow ITSM and CMDB. * Prior support of a civilian federal agency. ## Description * Design and deploy Azure landing zones using the Cloud Adoption Framework, including management groups, subscriptions, and hub-and-spoke or Virtual WAN networking integrated with the customer's WAN and DNS. * Build and maintain Infrastructure-as-Code (Terraform, Bicep) and GitOps workflows that provision consistent production, integration, development, and sandbox environments. * Configure Microsoft Entra ID, RBAC, and federation with the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles. * Enforce security and compliance guardrails with Azure Policy, Microsoft Defender for Cloud, and Microsoft Sentinel against NIST SP 800-53 Rev 5 and customer security standards. * Apply the enterprise tagging strategy for asset management, cost tracking, and chargeback/showback using Azure Cost Management and Advisor. * Monitor environments with Azure Monitor and enterprise tools such as Datadog, Splunk, and Dynatrace; integrate events, incidents, and changes with ServiceNow. * Perform patching (Azure Update Manager), routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support. * Design and test high availability, Azure Backup, and Azure Site Recovery for cloud workloads. * Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.