Azure Infrastructure Engineer

## Overview **The Work** The Azure Infrastructure Engineer will be responsible for designing, implementing, and managing secure, scalable, and highly available cloud infrastructure solutions on the Microsoft Azure platform to support mission‑critical systems for federal customers. This role will focus on building and maintaining robust Azure environments that align with organizational business objectives and federal security/compliance requirements. The Azure Infrastructure Engineer will work closely with software development teams, IT operations, security, and other stakeholder groups to ensure seamless deployment, operation, and optimization of Azure‑hosted services. The ideal candidate will have deep expertise in cloud architecture, networking, and security, and will be instrumental in driving performance optimization, reliability, and cost efficiency across the cloud infrastructure landscape. ## Responsibilities **Key Responsibilities** - Design, implement, and manage cloud infrastructure solutions on Microsoft Azure that meet functional, performance, security, and compliance requirements. - Develop reference architectures and patterns for Azure environments (IaaS, PaaS, and related services) that can be reused across projects and programs. - Provision and configure Azure resources including, but not limited to, virtual machines, storage accounts, managed identities, service principals, and associated role‑based access controls (RBAC). - Implement tagging, resource grouping, and governance policies to support cost management, security, and operational consistency. - Automate deployment and management processes using Azure DevOps, ARM/Bicep templates, PowerShell, and other Infrastructure‑as‑Code (IaC) tools. - Execute deployment and release activities entirely through CI/CD pipelines, ensuring all components of the system are deployed using established automated workflows and remain consistent across development, test, staging, and production environments. - Develop, maintain, and automate operational tasks using PowerShell to support repeatable builds, environment configuration, and long‑term system operations. - Design and implement Azure networking components, including Virtual Networks (VNets), Network Security Groups (NSGs), subnets, and routing configurations. - Create and configure private endpoints in production environments and coordinate DNS registration and related activities with appropriate teams to ensure secure and reliable connectivity. - Support hybrid connectivity patterns (e.g., VPN, ExpressRoute) in coordination with network and security teams, as applicable. - Coordinate cross‑team tasks such as DNS registration requests, production‑level integration steps, environment cutovers, and architecture clarifications to ensure regulated processes are followed and supporting teams are aligned. - Collaborate with development and IT operations teams to support application deployment, environment readiness, and ongoing maintenance activities. - Monitor and optimize the performance, scalability, and availability of Azure environments using native tools (e.g., Azure Monitor, Application Insights, Log Analytics) and third‑party solutions as needed. - Implement alerting, logging, and observability best practices to support proactive operations and incident response. - Troubleshoot and resolve complex cloud‑related issues and incidents, including performance degradations, deployment failures, connectivity problems, and security events. - Implement Azure security best practices, including least‑privilege access, network segmentation, encryption, and secure configuration baselines. - Ensure compliance with applicable industry standards and regulations (e.g., NIST, FedRAMP, DoS and National Security requirements, and agency‑specific policies as applicable). - Collaborate with security and compliance stakeholders to support audits, assessments, and continuous monitoring activities. - Provide guidance, coaching, and traini…