NOTE: APPLICANT MUST BE ON OUR W2 OR 1099 AND CURRENT VA RESIDENT. C2C IS ALLOWED IF OWN CORPORATION ONLY. NOT ACCEPTING SUB-VENDORS.
Role: Azure Cloud Engineer
Location: Remote - Mechanicsville, VA
Duration: 8+ Months
Interview: MS Teams
Description:
The Agency ITD Tolling is seeking an Azure Cloud Engineer to join the Eng and Ops team. The role includes engineering, application support, and rotational help-desk support within the Tolling group. Includes API Gateways, AVD, App Insights, & Office 365.
Primary Responsibilities:
Cloud Operations and Engineering:
· Maintain and implement cloud resources in the Tolling Azure environment.
· Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.
· Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.
· Assist with access reviews, role assignments, and least-privilege IAM evaluations.
· Manage vendor-required updates and ensure compatibility.
· Implement fault-tolerant and highly available Azure solutions.
· Monitoring, Troubleshooting, and Diagnostics:
· Monitor Azure services and application workloads to ensure uptime and availability.
· Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.
· Perform diagnostic deep-dives using logs, metrics, traces, Azure Monitor, and Log Analytics.
· Analyze and tune system/application performance.
Operational Support:
· Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.
· Triage production issues, ensure timely resolution, and document root-cause findings.
· Execute and support off-hours work as needed.
· Define change requests, detailed implementation plans, and roll-back procedures.
· Technical Development and Compliance:
· Understand end-to-end data flows across tolling systems, roadways data, financial transactions, and reporting tools.
· Support optimization of integrations and data movement.
· Apply PCI or other regulatory compliance requirements when evaluating system behaviour and logging patterns.
· Manage key vaults, passwords, certificates, and secure credential storage.
Collaboration and Communication:
· Work directly with architects, engineers, managers, and cross-functional teams to use Azure services effectively.
· Provide best-practice guidance related to SaaS, Paas, and IaaS.
· Communicate clearly in written and verbal form with internal and external stakeholders.
· Support multiple concurrent projects of complex technical scope.
Qualifications:
· Minimum 3 years of experience with Microsoft Azure services.
· Minimum 3 years’ experience supporting Agency /E-ZPass Virginia tolling applications, infrastructure, and cloud workloads, including hands-on diagnostic work with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.
· Bachelor’s degree in computer science, information systems, or equivalent experience.
· Demonstrated ability to communicate requirements and design concepts clearly.
· Experience working in Windows environments.
· Implementing Rubrik backup & recovery for Azure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DRvalidation.
· Experience with Office 365 services and administering Single Sign-On (SSO) including Entra ID.
· Experience administering SecretServer privileged access vaults including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.
· Solid scripting experience (PowerShell and/or Python).
· Ability to create network and system topology documentation.
· Experience with Azure Virtual Desktops.
· Office 365 services and Power Apps.
· Azure certification (preferred).
Special Instructions:
· Position requires a fingerprint-based background check.
· Continued education is expected at the contractor’s own expense to stay current with Agency technologies.
Skill Required / Desired Amount of Experience
• Microsoft Azure administration/engineering. – Required – 3 Years
• Microsoft Windows environments (2019+). – Required – 5 Years
• Server infrastructure, protocols, firewalls, certificates, load balancers. – Required – 2 Years
• Support of Agency / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads. – Required – 3 Years
• Networking, server administration (Windows/Linux), databases, cloud environments. – Required – 2 Years
• Implementing Rubrik backup & recovery for Azure IaaS/PaaS. – Required – 2 Years
• Scripting with PowerShell/Python. – Required – 2 Years
• Continuous integration tools (Azure DevOps, Jenkins, Git, TFS). – Desired – 1 Years
• Administration of SecretServer privileged access vaults. – Required – 2 Years
• Office 365 and Power Apps platforms. – Required – 1 Years
• Infrastructure as Code (Terraform or equivalent). – Desired – 1 Years
• Containerization (Docker, Kubernetes). – Desired – 1 Years
• Experience with PCI or similar compliance frameworks. – Required – 1 Years
• Key Vault, secrets and certificate management. – Desired – 1 Years
• Single Sign On and identity administration (Entra ID). – Required – 1 Years
• Azure certification (AZ 104, AZ 305, or similar). – Desired – 1 Years
• Experience with enterprise governance models. – Required – 1 Years
• Experience analyzing cloud cost trends and delivering cost optimization recommendations. – Desired – 1 Years
• Azure Virtual Desktops. – Desired – 1 Years