Core Functions:

Provision Azure infrastructure components including virtual machines, key vaults, and supporting services through automated pipeline workflows
Oversee the health of cloud environments, resolving bottlenecks and tuning resource utilization
Build and sustain continuous integration and delivery workflows within Azure DevOps
Author and maintain infrastructure definitions using declarative tooling (Bicep, Terraform, or ARM)
Audit, refactor, and debug existing infrastructure code across the platform
Architect and operate isolated, hardened Azure environments for sensitive workloads
Safeguard the reliability, throughput, and protection posture of these isolated environments
Administer access controls and identity governance, enforcing minimum-necessary permissions throughout
Work alongside adjacent engineering groups to evolve cloud capabilities
Diagnose advanced platform issues and serve as a senior escalation point
Capture runbooks, design decisions, and remediation steps in written form
Automate the lifecycle of Azure Virtual Desktop images, including scheduled refreshes
Build and operate Kubernetes-based workload orchestration
Stand up and tune AKS clusters along with their supporting fabric
Streamline rollout, elasticity, and day-two operations for containerized services
Help end users layer applications onto standardized desktop images using configuration management tooling (DSC, Packer, or similar)
Work with senior stakeholders to influence technical direction and forward-looking initiatives
Translate dense technical material for business and operational audiences

Background We're Looking For:

Degree in a computing discipline, or comparable hands-on background
A decade or more building and running cloud platforms, with Azure as the primary focus
Time spent operating inside hardened or regulated cloud boundaries, with working knowledge of relevant compliance regimes
Deep familiarity with the Azure service catalog, particularly Azure Virtual Desktop
Practical experience with declarative provisioning (Terraform, Bicep, ARM) integrated with Azure DevOps
Comfort scripting in PowerShell and adjacent languages
A track record of replacing manual provisioning with code-driven workflows
Fluency across YAML, JSON, Bicep, and PowerShell
Willingness to weigh in on architectural calls and untangle ambiguous problems
A habit of sharpening team workflows and shipping cadence
Azure credentials (AZ-104, AZ-305, or comparable) are a plus
Occasional travel, roughly one week in ten
Current Top Secret clearance with SCI access

Position Conditions:

Candidate must live within commuting range of Lorton, VA, or be open to relocating (assistance available)
Role is performed onsite
Some travel required (up to 10%)
Active TS/SCI clearance (or higher) is mandatory
U.S. citizenship is required under the terms of the supporting federal contract

What Matters to Our Team:

You write and speak with clarity
You can drive work on your own and contribute meaningfully in a group setting
You bring sharp analytical instincts to ambiguous problems
You want a workplace with structured feedback cycles and a real path forward
You want to work alongside people who care about doing good work and doing right by others

Oxenham Group

New Jobs

Cloud Engineer