Position Summary

The Azure Infrastructure & Security Engineer reports to the Network Manager and works closely with the Chief Information Security Officer (CISO) and Cyber Defense Team to implement cloud security standards, remediate cloud risks, support incident response activities, and ensure compliance with agency security and regulatory requirements.

The Azure Infrastructure & Security Engineer designs, implements, administers, secures, monitors, and supports the Ohio Secretary of State's Microsoft Azure cloud infrastructure. The position is responsible for maintaining secure and resilient cloud environments; administering Azure networking, identity, compute, storage, and security services; implementing security controls and governance standards; monitoring system performance, availability, and health; and supporting disaster recovery, business continuity, and operational excellence initiatives. Serves as the agency's primary technical resource for Azure infrastructure engineering, cloud security operations, and the ongoing optimization of the agency's cloud platform.

Essential Duties And Responsibilities

Cloud Infrastructure Administration

Implements, configures, administers, and supports Microsoft Azure infrastructure services.
Deploys and maintains virtual machines, storage resources, virtual networks, and platform services.
Administers Azure subscriptions, resource groups, networking components, and resources.
This role helps maintain the Azure governance model: management groups, subscriptions, naming standards, tagging, Azure Policy, RBAC, guardrails.
Supports hybrid cloud connectivity and integration with on-premises systems.
Monitors system performance, capacity, availability, and resource utilization.
Troubleshoots and resolves cloud infrastructure issues and service disruptions.

Cloud Security and Compliance

Implements and maintains cloud security controls, policies, and technical safeguards.
Supports vulnerability management, security monitoring, threat detection, and remediation activities.
Implements encryption, segmentation, logging, monitoring, and access control standards.
Assists with security assessments, audits, compliance reviews, and incident response activities.
Collaborates with Cyber Defense Team to identify and mitigate cloud security risks.

Network Engineering and Connectivity

Designs, configures, and supports Azure Virtual Networks, subnets, peering, route tables, network security groups, application security groups, Azure Firewall, private endpoints, Private Link, Azure DNS, Azure Bastion, load balancers, Application Gateway, Web Application Firewall, and DDoS protection.
Reviews network exposure, inbound/outbound traffic flows, firewall rules, public IP usage, private connectivity, and segmentation controls to reduce cloud attack surface.
Evaluates network performance and implements improvements to support reliability and scalability.
Conducts network testing, troubleshooting, and performance analysis.
Supports cloud connectivity with external vendors, partners, and hosted applications.

Automation, Operations, and Documentation

Develops and maintains infrastructure automation and deployment processes.
Configures and maintains Azure Monitor, Log Analytics workspaces, diagnostic settings, alert rules, dashboards, action groups, and service health monitoring.
Uses Kusto Query Language to analyze Azure platform logs, activity logs, resource logs, security events, and operational telemetry.
Develops, reviews, and maintains Infrastructure as Code using approved tools such as Bicep, ARM templates, Terraform, Azure CLI, PowerShell, Azure DevOps, GitHub, or other agency-approved deployment technologies.
Uses version control, peer review, deployment pipelines, change control, rollback planning, and secure coding practices for cloud infrastructure changes.
Supports policy-as-code, reusable deployment modules, configuration baselines, and automated validation of cloud resources.
Creates and maintains technical documentation, diagrams, procedures, and operational standards.
Participates in disaster recovery planning, testing, and implementation activities.
Assists in evaluating new technologies, cloud services, and operational improvements.
Provides technical support and guidance to internal staff and project teams

Unusual Working Conditions

Unclassified per ORC 124.14(A)(9)
May require evening and weekend hours, particularly during elections, special events, and major initiatives.
Occasional statewide travel with possible overnight stays.
Must possess a valid driver’s license or reliable transportation.

Minimum Qualifications

Education/Experience

Required:
Bachelor's degree in Computer Science, Information Systems, Information Technology, Engineering, Cybersecurity, or related field and four (4) years of experience supporting cloud infrastructure, network engineering, systems administration, cybersecurity, or related information technology disciplines;
OR any equivalent combination of education, training, and experience that demonstrates the required knowledge, skills, and abilities.
Experience administering Azure environments.
Preferred:
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Azure Security Engineer Associate
Experience with cloud networking, identity management, and security operations.
Experience supporting hybrid infrastructure environments.

Knowledge

Knowledge, Skills & Abilities

Knowledge of Microsoft Azure infrastructure services, networking, storage, compute, and platform services.
Knowledge of cloud administration, systems engineering, and infrastructure support principles.
Knowledge of cloud security frameworks, identity and access management, and cybersecurity best practices.
Knowledge of network architecture, routing, firewalls, VPN technologies, and hybrid connectivity solutions.
Knowledge of vulnerability management, threat detection, incident response, and security monitoring.
Knowledge of disaster recovery, backup technologies, and business continuity practices.
Knowledge of infrastructure automation, scripting, and Infrastructure as Code concepts.
Knowledge of technical documentation standards and operational procedures.

Skills

Skilled in deploying, configuring, administering, and troubleshooting Azure resources and services.
Skilled in implementing cloud security controls and security monitoring solutions.
Skilled in diagnosing and resolving infrastructure, network, and security issues.
Skilled in configuring virtual networks, firewalls, VPNs, and cloud connectivity solutions.
Skilled in monitoring system performance, availability, and capacity utilization.
Skilled in developing technical documentation, diagrams, and operational procedures.
Skilled in supporting incident response and remediation activities.
Skilled in automating routine infrastructure and operational tasks.

Abilities

Ability to implement and maintain secure, reliable, and highly available cloud environments.
Ability to identify, analyze, and resolve technical and operational issues.
Ability to evaluate security vulnerabilities and implement corrective actions.
Ability to monitor cloud environments and proactively address performance concerns.
Ability to interpret technical requirements and implement effective solutions.
Ability to work independently while coordinating with technical teams and stakeholders.
Ability to prioritize workload and respond effectively to operational incidents.
Ability to communicate technical information effectively to users, vendors, and management.

Technology

Personal computing; Microsoft Office 365 – Word, Excel, PowerPoint, Outlook, and Visio; collaborative technology like Teams, SharePoint.

Agency Contact Name and Information

Ambra Storay

Unposting Date

Aug 7, 2026, 11:59:00 PM

Work Location

SOS Civic Center Dr 4

Primary Location

United States of America-OHIO-Franklin County-Columbus

Compensation

$143,000 based on experience and skills

Schedule

Full-time

Union

Exempt from Union

Technical Skills

Cloud computing, Information Technology

Professional Skills

Analyzation, Attention to Detail, Collaboration, Strategic Thinking

Agency Overview

AZURE INFRASTRUCTURE & SECURITY ENGINEER

About Us

As Ohio’s Secretary of State, Frank LaRose is doing his part to deliver a thriving democracy and a prosperous economy for all Ohioans. In his role as the state’s chief elections officer, he is working to ensure that Ohio’s elections are both secure and accessible. And, as the first stop for new businesses in the Buckeye State, he is assisting entrepreneurs as they receive articles of incorporation for a new business.

State of Ohio

New Jobs

Azure Infrastructure & Security Engineer