Hybrid Multi-Cloud Engineer SME (Azure/Identity)
- Compensation
- Not disclosed
- Location
- Fort Belvoir, VA, US
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 10+ years
- Category
- Devops
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical discipline and 12 – 15 years of prior relevant experience or Masters with 10 – 13 years of prior relevan
- Active Top Secret security clearance with eligibility for access to Sensitive Compartmented Information (SCI).
- Current DoD 8570/8140 IAT Level II certification.
- Microsoft Certified: Azure Solutions Architect Expert certification.
- Minimum of five years of experience designing and implementing Microsoft Azure enterprise cloud solutions.
- Demonstrated experience architecting hybrid Azure environments integrating enterprise on-premises infrastructure with Azure cloud services.
- Advanced experience with Microsoft Entra ID, Microsoft Entra Connect, Active Directory, AWS IAM, hybrid identity synchronization, federation, and enterprise identity management with enterprise Identit
- Experience implementing Microsoft Entra ID Governance capabilities, including:
Nice to have
- AWS Certified Solutions Architect – Professional certification.
- Experience integrating Azure and AWS within hybrid multi-cloud enterprise environments.
- Familiarity with the Department of Defense Joint Warfighting Cloud Capability (JWCC) and DoD Joint Tenant cloud environments.
- Understanding of the DoD Enterprise Cloud Strategy and cloud modernization initiatives.
- Familiarity with the Department of Defense Enterprise Identity, Credential, and Access Management (E-ICAM) architecture and its role in enterprise identity federation, identity governance, Zero Trust
- Experience with Azure Arc, Azure Stack HCI, Azure Local, and hybrid cloud management technologies.
- Experience with Azure Kubernetes Service (AKS) and cloud-native container platforms.
- Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Intune, and Microsoft Purview.
- Experience implementing DevSecOps pipelines using Azure DevOps and/or GitHub Enterprise.
Full description
GES is seeking a highly skilled Hybrid Multi-Cloud Engineer SME to support mission-critical Department of Defense (DoD) cloud modernization initiatives in Fort Belvoir, VA or Albuquerque, New Mexico. This position will serve as a senior technical contributor responsible for designing, engineering, implementing, and sustaining secure Microsoft Azure cloud solutions within classified enterprise environments.
The successful candidate will possess deep expertise in Microsoft Azure architecture, hybrid cloud engineering, and enterprise identity management. This role requires an experienced engineer capable of translating complex mission requirements into secure, scalable cloud solutions while maintaining a hands-on engineering role throughout the solution lifecycle. The ideal candidate will have experience supporting DoD cloud initiatives, implementing hybrid identity solutions, and engineering cloud environments that align with Zero Trust principles and Department of Defense cybersecurity requirements.
Clearance: Must have Active Top Secret security clearance with eligibility for access to Sensitive Compartmented Information (SCI).
Primary Responsibilities:
- Architect, design, engineer, and implement secure Microsoft Azure cloud solutions supporting DoD mission requirements.
- Design and deploy green-field Azure environments and hybrid cloud architectures integrating on-premises infrastructure with Azure services.
- Design, implement, and maintain enterprise hybrid identity solutions utilizing Microsoft Entra ID, Microsoft Entra Connect, Active Directory, and related identity technologies.
- Engineer secure authentication, authorization, identity governance, and privileged access management (PAM) solutions supporting just-in-time (JIT) access, attribute- and role- based access controls (ABAC/RBAC) and similar Zero Trust principles and objectives.
- Design Azure Landing Zones, governance frameworks, subscription architectures, and management group strategies following Microsoft Cloud Adoption Framework (CAF) and Azure Well-Architected Framework guidance.
- Engineer Infrastructure as Code (IaC) solutions using Bicep, ARM Templates, Terraform, or comparable automation technologies.
- Design secure Azure networking solutions utilizing Virtual Networks, ExpressRoute, VPN Gateway, Azure Firewall, Virtual WAN, and private connectivity services.
- Implement Azure-native monitoring, backup, disaster recovery, governance, and security capabilities.
- Configure and administer Microsoft Entra ID Governance capabilities, including Access Reviews, Entitlement Management, Lifecycle Workflows, Conditional Access, and Privileged Identity Management (PIM).
- Collaborate with cybersecurity, systems engineering, networking, and application development teams to deliver integrated cloud solutions.