Systems Engineer - Azure

Job Details

Sr System Engineer

Onsite at one of the following locations: Oak Ridge, TN; Germantown, MD: or Lemont, IL

**U.S Citizenship Required**

The Systems Engineer (Azure) will design, implement, and optimize cloud and hybrid infrastructure solutions within Microsoft Azure to support enterprise IT services and mission-critical workloads. This role requires strong technical depth in Azure platform services, identity, automation, and infrastructure-as-code, combined with the ability to work across engineering, cybersecurity, and operations teams.

The engineer will contribute to the full system lifecycle - from requirements analysis and architecture design through secure integration, deployment, documentation, and transition to operations. This position is ideal for someone who thrives in a hybrid cloud environment and can balance hands-on engineering with strategic planning and modernization initiatives.

#cjpost

Job Requirements:

• Design and implement Azure-based solutions including Virtual Networks, VNets peering, Azure Firewall, Application Gateways, Load Balancers, and hybrid connectivity (VPN/ExpressRoute).
• Deploy and manage Azure compute services such as Virtual Machines, Azure Kubernetes Service (AKS), App Services, and serverless workloads.
• Develop secure, scalable architectures aligned with enterprise cloud strategy and governance frameworks.
• Implement Azure identity and access solutions including Azure AD, Conditional Access, Privileged Identity Management (PIM), and role-based access control (RBAC).
• Engineer hybrid cloud integrations using Azure AD Connect, ExpressRoute, site-to-site VPNs, and hybrid identity models.
• Support migration of on-premises workloads to Azure using tools such as Azure Migrate and ASR (Azure Site Recovery).
• Collaborate with network and security teams to ensure seamless connectivity, segmentation, and compliance.
• Automate provisioning, configuration, and operational tasks using PowerShell, Azure CLI, and Azure Automation.
• Apply Azure security best practices including NSGs, ASGs, Defender for Cloud, Key Vault, and managed identities.
• Ensure compliance with enterprise security baselines, cloud governance policies, and regulatory requirements.
• Participate in security reviews, risk assessments, and architecture evaluations.
• Monitor performance, availability, and cost using Azure Monitor, Log Analytics, Application Insights, and Cost Management.
• Troubleshoot complex cloud and hybrid infrastructure issues, serving as an escalation point for operations teams.
• Optimize cloud resource utilization, performance, and cost efficiency.
• Produce architecture diagrams, configuration baselines, runbooks, and lifecycle documentation.
• Support transition-to-operations activities including knowledge transfer, acceptance testing, and operational readiness reviews.
• Maintain accurate documentation aligned with enterprise lifecycle and change management processes.

Minimum Qualifications

• Bachelor's Degree in Information Technology, Computer Science, other relevant field, or equivalent relevant experience; Master's Degree preferred.
• Advanced computing certification preferred.
• 5-8 years of experience in systems engineering, with at least 3 years focused on Azure.

Other Job Specific Skills

• Experience working with IaC templates and Config Management tools.
• Strong experience with Azure networking, compute, identity, and security services.
• Proficiency with PowerShell, Azure CLI, and infrastructure-as-code tools.
• Hands-on experience with hybrid cloud integrations and workload migrations.
• Strong analytical and problem-solving skills with the ability to troubleshoot complex cloud issues.
• Excellent communication skills and the ability to collaborate across engineering, operations, and cybersecurity teams.
• A mindset focused on automation, modernization, and continuous improvement.
• Ability to balance hands-on engineering with architectural thinking and long-term planning.

Preferred Certifications

• Microsoft Certified: Azure Administrator Associate (AZ‑104).
• Microsoft Certified: Azure Solutions Architect Expert (AZ‑305).
• Microsoft Certified: Azure Security Engineer (AZ‑500).
• Terraform Associate or equivalent IaC certification (optional but valuable).

#cjpost