Job Description:
• Support the Arkloud IRAD initiative
• Develop, automate, and sustain Azure Government cloud infrastructure
• Author and maintain production Infrastructure-as-Code modules using Bicep/ARM, Terraform, Pulumi, or Crossplane
• Engineer and manage end-to-end CI/CD pipelines using GitLab CI, GitHub Actions, or Azure DevOps
• Perform Azure platform engineering across compute, networking, storage, identity, PaaS data services, observability, and ARM control-plane operations
• Develop production-grade automation using Python and Bash/PowerShell
• Write tools and API clients using Azure REST and JSON/YAML manipulation
• Support DoD workforce compliance
• Deliver solutions in Azure Government environments, GCC High, or air-gapped sovereign clouds
• Build and maintain golden images using Packer, Ansible, Salt, or DSC
• Publish images via Azure Compute Gallery and maintain STIG/SCAP hardening and automated patch cadence
• Manage AKS clusters and workloads, including private clusters, node pool automation, CNI/network policy, Helm delivery, GitOps, and cross-layer debugging
• Automate identity lifecycles via Entra ID Graph API/CLI, including app registrations, service principals, RBAC-as-code, managed identity, workload identity federation, and Key Vault/CSI integration
• Implement network automation for NSG, UDR, private endpoints, Private DNS, hub-spoke, forced-tunnel, and IPAM discipline
• Perform other duties as assigned
Requirements:
• Must be a US citizen
• Must have or be willing to attain a Secret Clearance
• Bachelor's degree in Computer Science, Information Technology, or related technical field
• CompTIA Security+ (or equivalent qualifying credential) required within 90 days of start
• 3+ years of experience in Azure automation, Infrastructure-as-Code, or platform engineering
• Proficiency in Python and Bash/PowerShell; Go is preferred
• Azure depth across compute, networking, storage, identity, PaaS, and monitoring
• Extensive experience building and owning CI/CD pipelines
• Strong debugging ability across Azure control plane, IaC state, and Kubernetes boundaries
• Hands-on Azure Government, GCC High, IL4/IL5 experience preferred
• Experience with STIG/SCAP image hardening pipelines preferred
• AKS, GitOps (ArgoCD/Flux), Helm delivery, and container platform automation experience preferred
• Entra ID identity automation and federated identity experience preferred
• Network topology automation (hub-spoke, forced tunnel, private endpoints, IPAM) preferred
• All positions are subject to background investigations
• Employment is contingent upon successful completion of a background investigation including criminal history and identity check
Benefits:
• Industry competitive benefits package
• Awards and recognition program
• Personalized attention from ARS Senior Managers
• Work/life balance
• Career development support and opportunities
• Reasonable accommodation for applicants with disabilities