Azure Cloud Engineer

Salary: $145,600 - 166,400 per year
Requirements:
We require an active Top Secret security clearance. We need 3–5 years of hands-on experience in systems administration, IT operations, cloud engineering, or cloud support, with a strong focus on Microsoft Azure. We require the ability to work full-time on site, five days per week, in a secure Washington, D.C. facility supporting classified networks. We look for working knowledge of provisioning and supporting Azure Data Lake Storage Gen2, Azure Key Vault, Azure Virtual Networks, Network Security Groups, Azure Data Factory, Azure Monitor, and Log Analytics. We expect familiarity with running, scheduling, monitoring, and troubleshooting Azure Data Factory pipelines, data flows, and ETL workflows. We need basic knowledge of Microsoft Entra ID, Azure RBAC, managed identities, service principals, security groups, and least-privilege access. We value a willingness to learn the administration, user setup, integration, and support of Palantir data platforms. We require the ability to modify and execute basic deployment scripts with PowerShell and Azure CLI, along with Infrastructure-as-Code templates such as ARM, Bicep, or Terraform. We expect the ability to investigate technical issues, review system logs, document findings, follow established procedures, and escalate complex problems appropriately. We require a bachelors degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related field, or equivalent practical experience or military technical training. We prefer Microsoft Certified: Azure Administrator Associate (AZ-104) and CompTIA Security+ CE, or another customer-approved cybersecurity certification. We prefer candidates who can meet applicable DoD 8140 qualification requirements for the assigned cyber workforce role. We prefer prior exposure to Palantir Foundry, Palantir Gotham, or another Palantir platform. We prefer familiarity with Azure Government or approved classified cloud environments. We prefer previous experience in a SCIF or in support of classified networks. We prefer familiarity with Azure private endpoints, private DNS, routing, firewalls, and secure network connectivity. We prefer basic understanding of Docker. We prefer basic understanding of CI/CD concepts, Azure DevOps, Git, and source control practices. We prefer knowledge of federal cybersecurity requirements, including NIST controls, RMF concepts, STIGs, role-based access control, and least-privilege principles. We prefer familiarity with Microsoft Entra ID, public key infrastructure, certificates, secrets management, and access control processes. We prefer familiarity with change management, configuration management, vulnerability remediation, and security documentation requirements.
Responsibilities:
We deploy, configure, and maintain Microsoft Azure and Azure Government resources in classified environments in line with established architecture and security standards. We provision and support core Azure services, including Azure Data Lake Storage Gen2, Azure Key Vault, Azure Virtual Networks, and Azure Data Factory, using approved scripts and templates. We assist with basic data engineering work by monitoring, running, and troubleshooting existing Azure Data Factory pipelines and data flows. We support integration, user administration, and system upkeep for project platform applications, including learning and supporting Palantir platform tools. We manage secrets, certificates, managed identities, and access permissions securely within Azure Key Vault across classified networks. We help maintain Azure networking components such as Network Security Group changes, VNet peering, private endpoints, DNS, and connectivity troubleshooting. We monitor cloud infrastructure health, performance alerts, pipeline activity, and compliance status using Azure Monitor, Log Analytics, and other approved tools. We support identity and access management efforts using Microsoft Entra ID, Azure role-based access control, security groups, service principals, and managed identities. We troubleshoot cloud infrastructure incidents, record our findings, and escalate complex technical or security issues to senior engineering staff. We maintain technical documentation, configuration records, troubleshooting steps, and change-management logs for supported systems. We support approved system updates, vulnerability remediation, security configuration reviews, and routine compliance tasks.
Technologies:
ARM Azure CI/CD Cloud DevOps Docker ETL Git Support Network PowerShell RBAC Security Terraform ASP.NET
More:
We are hiring for a full-time 1099 opportunity in Washington, DC, with onsite work required five days per week in a secure classified environment. The role supports Azure and Azure Government operations for mission-critical systems, and the pay range is $70.00 to $80.00 per hour. This position offers the chance to work with a range of cloud, security, networking, and data platform technologies, including exposure to Palantir tools, while supporting a highly secure federal environment.
last updated 31 week of 2026