Senior Azure Cloud Engineer

SAIC - Montgomery, AL

Full-time - Mid Level

Onsite - Montgomery, AL

Professional, Scientific, and Technical Services

About the position

SAIC is seeking a Senior Azure Cloud Engineer to join the USAF Cloud One contract team to work in Impact Level 2-6. This candidate will be part of a team responsible for the architecture design/planning, automation, management, support, and oversight of the Cloud One Azure environments. The Senior Azure Cloud Engineer will be supporting the Cloud One common services platform under the Air Force Lifecycle Management Center Office for Network Integration (AFLCMC/HNI). Cloud One is an existing global, interconnected, virtualized, hybrid, and IT infrastructure hosting mission systems, applications, services, and data that will serve the U.S. Air Force (USAF) and U.S. Army (USA). Cloud One incorporates the capabilities of commercial cloud and Managed Service Providers (MSP) residing in Cloud Service Providers (CSPs). Cloud One facilitates the USAF and USA's efforts to migrate applications to a cloud environment, allowing the closure of data centers to support the Data Center Optimization Initiative (DCOI) and allowing for increased efficiencies across the entire spectrum of the USAF and USA's IT operations. This is a Hybrid Remote position; all candidates must have access to a SIPRnet facility. Preferred locations are: Hanscom AFB, Montgomery AL, Joint Base Andrews, or Charleston SC or other approved SIPRnet facility. Daily activities may include: Manage and maintain DISA ACAS and Trend Micro platforms for security and compliance monitoring. Design, sustain, and maintain Azure 3-tier hub and spoke environments and topologies. Proactively identify and resolve operational, tooling, and process inefficiencies. Maintain regular contact with customers during support and projects. Provide technical assistance and training to users. Perform routine operations including troubleshooting and resolving Tier 3 service desk tickets, performance monitoring, server monitoring, and log monitoring. Deploy software packages to the various Cloud One zones. This also includes supporting regression and other testing for the Cloud One Common Services. Address security findings and vulnerabilities by developing, testing, and deploying configuration changes. Provide integration support to developers. Perform activities for patch releases including configuration changes, required documentation, and approvals. Develop code in Bash, Terraform, Terragrunt, Azure CLI, and PowerShell for infrastructure automation and orchestration to support deployment, maintenance, and monitoring of the Cloud One Common Services. Develop and test configurations to address performance issues and to reduce operational costs. Develop and update Infrastructure as Code (IaC) to provision and support Cloud One Infrastructure. Create and update documentation related to the maintenance and support of the Cloud Common Services.

Responsibilities

• Manage and maintain DISA ACAS and Trend Micro platforms for security and compliance monitoring.
• Design, sustain, and maintain Azure 3-tier hub and spoke environments and topologies.
• Proactively identify and resolve operational, tooling, and process inefficiencies.
• Maintain regular contact with customers during support and projects.
• Provide technical assistance and training to users.
• Perform routine operations including troubleshooting and resolving Tier 3 service desk tickets, performance monitoring, server monitoring, and log monitoring.
• Deploy software packages to the various Cloud One zones, including supporting regression and other testing for the Cloud One Common Services.
• Address security findings and vulnerabilities by developing, testing, and deploying configuration changes.
• Provide integration support to developers.
• Perform activities for patch releases including configuration changes, required documentation, and approvals.
• Develop code in Bash, Terraform, Terragrunt, Azure CLI, and PowerShell for infrastructure automation and orchestration.
• Develop and test configurations to address performance issues and to reduce operational costs.
• Develop and update Infrastructure as Code (IaC) to provision and support Cloud One Infrastructure.
• Create and update documentation related to the maintenance and support of the Cloud Common Services.

Requirements

• Bachelor's degree with five (5) or more years of experience; additional years of experience may be considered in lieu of a degree.
• Interim Secret clearance required to start; Ability to obtain a Secret clearance required to maintain employment.
• Security + or higher certification.
• In-depth understanding of and experience with automated deployments of various compute and storage systems to Azure, including Virtual Machines, VM Scale Sets, Azure Functions, Azure App Services, Azure Blob Storage, Azure Files, Azure SQL Database, EntraID, Active Directory, ADFS, SAML-based federation, Application Gateways, Azure Load Balancers, Azure Virtual Network (VNet), Azure VPN Gateway, and Azure ExpressRoute.
• Knowledge of DISA ACAS and host-based IPS/IDS/malware detection platforms such as Trend Micro.
• Strong proficiency in Infrastructure as Code using Terraform, Terragrunt.
• Proficiency in CI/CD tools such as Azure DevOps and Gitlab.
• Experience with ITIL frameworks, Agile methodologies, or other modern software development practices.
• Experience with Azure Kubernetes Service (AKS) and container technologies.
• Strong proficiency in both Debian-based and RPM-based Linux distributions.
• Experienced in building solutions that include Azure security best practices, including Azure RBAC and Azure Policy.
• Ability to interact with high-level customers and collaborate, design, plan, and implement proposed solutions.
• Strong problem-solving and analytical skills.

Nice-to-haves

• Microsoft Azure Administrator Associate and/or Microsoft Azure Solutions Architect Expert certifications.
• Experience supporting USAF or DoD software development projects.
• Experience working in a large enterprise environment with multiple teams.
• Experience with some of the following: Active Directory, Data Factory, Cosmos DB, Azure Functions, Azure Policy, Federation Services (ADFS).
• Familiarity with JFrog Artifactory for artifact management.
• SIPR facility access and/or previous SIPR experience.
• Previous work using IaC-driven, code-first development and deployment models.