Azure Cloud Engineer

At Systems Planning and Analysis Inc. (SPA) we tackle the most complex national security challenges with highimpact technical solutions. With over 50 years of proven expertise and a track record of consistent growth we are recognized for driving innovation and delivering value to our government customers in the U.S. and beyond. An exceptionally talented and collaborative team powers our success united in producing Results that Matter. When you join us youll find opportunities meaningful challenges and a shared commitment to mission success. Come work with the best and make a difference where it truly counts.

We seek an experienced Azure Cloud Engineer to design deploy and manage a scalable and secure cloud infrastructure in a complex Azure environment. This role focuses on implementing and maintaining cloud services aligned with Azure Landing Zone (ALZ) principles supporting Secure Cloud Computing Architecture (SCCA) and enterpriselevel interconnectivity including B2B integrations. The ideal candidate will have handson experience with Azure services and Infrastructure as Code (IaC) and a strong understanding of governance compliance and automation in multisubscription environments.

Why Join Us

This is an exciting opportunity to contribute to a forwardthinking organization by building and managing secure scalable cloud infrastructure in Azure. Join a team of talented professionals and gain handson experience with cuttingedge cloud technologies supporting critical workloads while driving innovation in enterprise connectivity and compliance.

1. Cloud Infrastructure Design and Management

• Design implement and manage scalable Azure cloud infrastructure including networking computing and storage resources.
• Configure and maintain hubandspoke architectures with Azure Virtual Networks VPN Gateway ExpressRoute and Azure Firewall.
• Optimize and secure Azure environments following Azure Landing Zone (ALZ) and SCCA guidelines.

1. B2B and Enterprise Interconnectivity

• Enable secure B2B integrations using Azure AD B2B Guest Access and Conditional Access Policies.
• Manage identity federation and access control between Azure AD tenants and external identity providers.
• Configure hybrid connectivity solutions using Azure ExpressRoute VPN Gateway and Private Link to integrate onpremises and cloud environments.

1. Security and Compliance

• Implement security measures across the Azure environment including Microsoft Defender for Cloud Network Security Groups (NSGs) and Key Vault.
• Ensure compliance with frameworks like NIST SP 80053 CMMC and FedRAMP by leveraging Azure Policy and Blueprints.
• Perform regular security assessments and compliance audits addressing vulnerabilities and risks proactively.

1. Automation and Infrastructure as Code (IaC)

• Develop and maintain Infrastructure as Code (IaC) solutions using Terraform ARM templates or Bicep for resource provisioning and automation.
• Automate routine tasks such as resource monitoring configuration management and patching.
• Integrate IaC workflows into CI/CD pipelines to support DevSecOps practices.

1. Monitoring and Optimization

• Set up and maintain monitoring tools such as Azure Monitor Log Analytics and Network Watcher to track performance and detect anomalies.
• Analyze resource utilization and recommend cost optimization strategies.
• Troubleshoot and resolve issues related to cloud infrastructure ensuring high availability and performance.

1. Collaboration and Support

• Work closely with cloud architects DevOps and cybersecurity teams to ensure infrastructure alignment with organizational goals.
• Provide technical support and guidance to application teams for deploying workloads in the cloud.
• Create and maintain detailed documentation for infrastructure configurations processes and troubleshooting procedures.

Required Qualifications:

Experience:

• 5 years of experience in cloud engineering with 3 years focused on Azure.
• Proven track record of implementing and managing multisubscription Azure environments aligned with Azure Landing Zone principles.
• Handson experience with hybrid and B2B connectivity in enterprise environments.

Technical Skills:

• Proficiency in Azure services: Azure AD Virtual Networks Azure Firewall ExpressRoute VPN Gateway and Private Link.
• Strong understanding of governance tools such as Azure Policy Blueprints and management groups.
• Knowledge of security tools including Microsoft Defender for Cloud Key Vault and Azure Sentinel.

Compliance Knowledge:

• Familiarity with regulatory frameworks such as NIST SP 80053 CMMC FedRAMP and ISO 27001.
• Experience implementing compliance controls in cloud environments.

Soft Skills:

• Strong problemsolving and troubleshooting skills.
• Effective communication skills to collaborate with technical and nontechnical teams.
• Ability to manage multiple priorities in a dynamic environment.

Desired Qualifications:

• Experience with Mission Landing Zone (MLZ) principles and crossdomain solutions (CDS).
• Certifications such as Microsoft Certified: Azure Administrator Associate Azure Solutions Architect Expert or equivalent.
• Knowledge of CI/CD pipeline integration and DevSecOps practices.
• Familiarity with multicloud or hybrid cloud architectures.