Senior Cloud Engineer (Azure/Identity)

Ft Belvoir, VA
Full Time
Experienced
Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! 

Job Summary
JCS Solutions is seeking a highly skilled Senior Cloud Engineer (Azure/Identity) to support mission-critical Department of Defense (DoD) cloud modernization initiatives. This position will serve as a senior technical contributor responsible for designing, engineering, implementing, and sustaining secure Microsoft Azure cloud solutions within classified enterprise environments.
The successful candidate will possess deep expertise in Microsoft Azure architecture, hybrid cloud engineering, and enterprise identity management. This role requires an experienced engineer capable of translating complex mission requirements into secure, scalable cloud solutions while maintaining a hands-on engineering role throughout the solution lifecycle.
The ideal candidate will have experience supporting DoD cloud initiatives, implementing hybrid identity solutions, and engineering cloud environments aligned with Zero Trust principles and Department of Defense cybersecurity requirements.

Location: Ft. Meade, MD
Clearance: Secret
Salary: $96,000.00 - $105,000.00
Certification: Active DoD 8140/8570 IAT Level II certification.

What’s in it for you: 
  • Join a premier technology firm specializing in innovative solutions.  
  • Be part of a collaborative, inclusive, and innovative work culture.  
  • Enjoy tremendous growth potential in a high-performing team environment.  
  • A robust benefits package: 
    • Health, dental, and vision insurance  
    • Life insurance  
    • Short-and-long term disability  
    • Paid time off (PTO)  
    • 401k retirement plan with employer match 
    • Annual Professional Development Reimbursement Program  
    • And more! 
 
What you will do:
Cloud Architecture & Engineering
  • Architect, design, engineer, and implement secure Microsoft Azure cloud solutions supporting DoD mission requirements.
  • Design and deploy greenfield Azure environments and hybrid cloud architectures integrating on-premises infrastructure with Azure services.
  • Design Azure Landing Zones, governance frameworks, subscription architectures, and management group strategies utilizing Microsoft Cloud Adoption Framework (CAF) and Azure Well-Architected Framework guidance.
  • Implement Azure-native monitoring, governance, backup, disaster recovery, and security capabilities.
  • Troubleshoot and resolve complex cloud infrastructure, networking, identity, and security issues.
  • Evaluate emerging Microsoft cloud technologies and recommend innovative solutions supporting mission objectives.
Identity & Access Management
  • Design, implement, and maintain enterprise hybrid identity solutions utilizing:
  • Microsoft Entra ID
  • Microsoft Entra Connect
  • Active Directory
  • Enterprise Identity, Credential, and Access Management (E-ICAM) capabilities
  • Engineer authentication, authorization, identity governance, and privileged access management solutions.
Support:
  • Just-in-Time (JIT) access
  • Role-Based Access Control (RBAC)
  • Attribute-Based Access Control (ABAC)
  • Zero Trust security models
Configure and administer Microsoft Entra ID Governance capabilities including:
  • Conditional Access
  • Access Reviews
  • Entitlement Management
Lifecycle Workflows
  • Privileged Identity Management (PIM)
  • Cloud Networking & Security
Design and implement secure Azure networking solutions utilizing:
  • Virtual Networks (VNets)
  • ExpressRoute
  • VPN Gateway
  • Azure Firewall
  • Virtual WAN
  • Private connectivity services
Support compliance with:
  • Risk Management Framework (RMF)
  • Security Technical Implementation Guides (STIGs)
  • DoD cybersecurity requirements
  • Zero Trust initiatives
  • Automation & Infrastructure as Code
Develop Infrastructure as Code (IaC) solutions utilizing:
  • Terraform
  • Azure Bicep
  • ARM Templates
  • Similar automation technologies
Automate cloud administration using:
  • Azure CLI
  • PowerShell
  • Python
  • Comparable scripting languages
Systems Engineering & Collaboration
  • Collaborate with cybersecurity, networking, systems engineering, and application development teams.
  • Support Authority to Operate (ATO) activities and accreditation efforts.
Produce:
  • Architecture documentation
  • Engineering diagrams
  • Implementation guides
  • Standard operating procedures
  • Technical documentation

What you will bring: 
Education & Experience
  • Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical discipline and 12-15 years of relevant experience, OR
  • Master's degree in a related technical discipline and 10-13 years of relevant experience, OR
  • Doctorate in a related technical discipline, OR
  • Equivalent combination of education, training, and directly related experience where permitted.
Technical Qualifications
  • Minimum five (5) years of experience designing and implementing Microsoft Azure enterprise cloud solutions.
  • Demonstrated experience architecting hybrid Azure environments integrating enterprise on-premises infrastructure with Azure cloud services.
  • Advanced experience with:
    • Microsoft Entra ID
    • Microsoft Entra Connect
    • Active Directory
    • AWS IAM
    • Hybrid identity synchronization
    • Federation
    • Enterprise identity management
    • Enterprise Identity, Credential, and Access Management (E-ICAM) solutions
  • Experience implementing Microsoft Entra ID Governance capabilities, including:
    • Conditional Access
    • Policy Information Points and Policy Engines
    • Access Reviews
    • Entitlement Management
    • Lifecycle Workflows
    • Identity lifecycle automation
  • Experience implementing Azure Landing Zones and enterprise governance models.
  • Strong understanding of Azure networking, storage, compute, governance, and security services.
  • Experience implementing Infrastructure as Code utilizing:
    • Terraform
    • Azure Bicep
    • ARM Templates
    • Similar technologies
  • Experience with:
    • Azure CLI
    • PowerShell
    • Python
    • Comparable automation languages
  • Strong understanding of:
    • Zero Trust architecture
    • Identity-centric security
    • Cloud security best practices
  • Excellent written and verbal communication skills.
  • Clearance Requirement: Active DoD Top Secret/SCI (TS/SCI) clearance
  • Current DoD 8570/8140 IAT Level II certification, including one of the following:
    • Security+ CE, CySA+, CCNA Security, CASP+ CE, CISSP (Associate or Full), CCSP, CISA, SSCP, GSEC, GCIH, GCED, CND, Other approved IAT Level II certifications
  • Microsoft Certified: Azure Solutions Architect Expert

How you will wow us:
Certifications
  • AWS Certified Solutions Architect – Professional certification required/preferred.
  • Additional AWS Professional and/or Specialty Certifications highly desired.
Cloud Modernization & Multi-Cloud Expertise
  • Experience designing, implementing, and managing hybrid multi-cloud environments integrating Microsoft Azure and Amazon Web Services (AWS).
  • Familiarity with U.S. Department of Defense (DoD) cloud initiatives and environments, including:
    • Joint Warfighting Cloud Capability (JWCC)
    • DoD Joint Tenant Cloud Environments
    • DoD Enterprise Cloud Strategy and related cloud modernization efforts
Identity, Access Management & Zero Trust
  • Understanding of DoD Enterprise Identity, Credential, and Access Management (E-ICAM) architecture and principles.
  • Experience supporting:
    • Identity Federation
    • Identity Governance and Administration (IGA)
    • Zero Trust Architecture (ZTA) initiatives
    • Secure access and authorization within DoD cloud environments
Hybrid Cloud Technologies
  • Hands-on experience with hybrid cloud solutions and management platforms, including:
    • Azure Arc
    • Azure Stack HCI
    • Azure Local
    • Enterprise hybrid cloud management and orchestration platforms
Cloud-Native Platforms & Containerization
  • Experience deploying and managing cloud-native applications using:
    • Azure Kubernetes Service (AKS)
    • Kubernetes
    • Container orchestration and cloud-native platform technologies
Security, Compliance & Governance
  • Experience implementing and managing cloud security, compliance, and governance solutions, including:
    • Microsoft Defender for Cloud
    • Microsoft Sentinel
    • Microsoft Intune
    • Microsoft Purview
DevSecOps & Automation
  • Experience designing and implementing DevSecOps practices and CI/CD pipelines utilizing:
    • Azure DevOps
    • GitHub Enterprise
  • Ability to integrate security controls, compliance checks, and automation throughout the software development lifecycle.

JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.

JCS is both a Great Place to Work and a Top Places to Work certified company.
  
Our employees embody our core values, and we are looking for others who do too!
  • Customer Experience: Strive for excellence and delight our clients 
  • Innovation: Embrace creative thinking to enable continual growth and powerful solutions 
  • Accountability: Take ownership of and pride in our actions and service delivery 
  • Inspire: Be inspired to be your best self and have fun in the process 
  • Integrity: Do the right thing, the right way, every time! 
  • Stewardship: The careful and responsible management of something entrusted to our care. 
 At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $96,000.00 - $105,000.00

Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.
 

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.

Share

Apply for this position

Required*
We've received your resume. Click here to update it.
Attach resume or Paste resume
Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.
Invitation for Job Applicants to Self-Identify as a U.S. Veteran
  • A “disabled veteran” is one of the following:
    • a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
    • a person who was discharged or released from active duty because of a service-connected disability.
  • A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
  • An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
  • An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.
Veteran status


Human Check*