Azure Cloud Engineer

Overview

At Systems Planning and Analysis, Inc. (SPA), we tackle the most complex national security challenges with high-impact technical solutions. With over 50 years of proven expertise and a track record of consistent growth, we are recognized for driving innovation and delivering value to our government customers in the U.S. and beyond. An exceptionally talented and collaborative team powers our success, united in producing Results that Matter . When you join us, you’ll find opportunities, meaningful challenges, and a shared commitment to mission success. Come work with the best and make a difference where it truly counts.

We seek an experienced Azure Cloud Engineer to design, deploy, and manage a scalable and secure cloud infrastructure in a complex Azure environment. This role focuses on implementing and maintaining cloud services aligned with Azure Landing Zone (ALZ) principles, supporting Secure Cloud Computing Architecture (SCCA) and enterprise-level interconnectivity, including B2B integrations. The ideal candidate will have hands-on experience with Azure services and Infrastructure as Code (IaC) and a strong understanding of governance, compliance, and automation in multi-subscription environments.

Why Join Us?

This is an exciting opportunity to contribute to a forward-thinking organization by building and managing secure, scalable cloud infrastructure in Azure. Join a team of talented professionals and gain hands-on experience with cutting-edge cloud technologies, supporting critical workloads while driving innovation in enterprise connectivity and compliance.

Responsibilities

• Cloud Infrastructure Design and Management
• Design, implement, and manage scalable Azure cloud infrastructure, including networking, computing, and storage resources.
• Configure and maintain hub-and-spoke architectures with Azure Virtual Networks, VPN Gateway, ExpressRoute, and Azure Firewall.
• Optimize and secure Azure environments following Azure Landing Zone (ALZ) and SCCA guidelines.
• B2B and Enterprise Interconnectivity
• Enable secure B2B integrations using Azure AD B2B, Guest Access, and Conditional Access Policies.
• Manage identity federation and access control between Azure AD tenants and external identity providers.
• Configure hybrid connectivity solutions using Azure ExpressRoute, VPN Gateway, and Private Link to integrate on-premises and cloud environments.
• Security and Compliance
• Implement security measures across the Azure environment, including Microsoft Defender for Cloud, Network Security Groups (NSGs), and Key Vault.
• Ensure compliance with frameworks like NIST SP 800-53, CMMC, and FedRAMP by leveraging Azure Policy and Blueprints.
• Perform regular security assessments and compliance audits, addressing vulnerabilities and risks proactively.
• Automation and Infrastructure as Code (IaC)
• Develop and maintain Infrastructure as Code (IaC) solutions using Terraform, ARM templates, or Bicep for resource provisioning and automation.
• Automate routine tasks, such as resource monitoring, configuration management, and patching.
• Integrate IaC workflows into CI / CD pipelines to support DevSecOps practices.
• Monitoring and Optimization
• Set up and maintain monitoring tools, such as Azure Monitor, Log Analytics, and Network Watcher, to track performance and detect anomalies.
• Analyze resource utilization and recommend cost optimization strategies.
• Troubleshoot and resolve issues related to cloud infrastructure, ensuring high availability and performance.
• Collaboration and Support
• Work closely with cloud architects, DevOps, and cybersecurity teams to ensure infrastructure alignment with organizational goals.
• Provide technical support and guidance to application teams for deploying workloads in the cloud.
• Create and maintain detailed documentation for infrastructure configurations, processes, and troubleshooting procedures.

Qualifications

Required Qualifications :

Experience :

Technical Skills :

Compliance Knowledge :

Soft Skills :

Desired Qualifications :