Build automated Azure Virtual Desktop (AVD) image pipelines that produce, test, and rotate golden images on a regular cycle. This is a hands-on seat covering infrastructure as code, pipeline automation, Kubernetes, and virtual desktop delivery, with a real voice in where the engineering goes next.
Numbers & Facts
Location
Lorton, VA
Salary
$160,000–$220,000 Per Year
Description
Azure Cloud Engineer (TS/SCI) About the Role
We are hiring an Azure Cloud Engineer to build and run secure, isolated cloud environments supporting a federal mission. This is a hands-on seat covering infrastructure as code, pipeline automation, Kubernetes, and virtual desktop delivery, with a real voice in where the engineering goes next. What You Will Do
Stand up and administer Azure Kubernetes Service (AKS) clusters, including the compute, networking, and storage that sit beneath them.
Build automated Azure Virtual Desktop (AVD) image pipelines that produce, test, and rotate golden images on a regular cycle.
Write, review, and debug infrastructure code in Terraform, Bicep, and ARM templates, whether newly authored or inherited.
Own Azure DevOps CI/CD pipelines from build definitions through release.
Provision core Azure services (Virtual Machines, Key Vault, and related resources) through pipeline-driven deployments instead of manual setup.
Architect and operate isolated, high-security enclaves in Azure, and keep them stable, performant, and hardened.
Enforce least-privilege access by defining and maintaining identity and permission policies across enclave systems.
Help customers get software onto standard desktop builds, scripting the work with DSC or Packer wherever possible.
Design the Kubernetes orchestration behind containerized workloads and automate how those workloads are deployed, scaled, and operated.
Track infrastructure health, chase down performance problems, and tune resources for efficiency.
Serve as an escalation point for difficult Azure issues.
Keep clear written records of configurations, runbooks, and fixes.
Work with engineering, security, and operations peers to improve the platform.
Give leadership input on engineering direction and new approaches.
Explain technical tradeoffs in plain terms to stakeholders who are not engineers.
What You Bring
Active TS/SCI clearance or higher. U.S. citizenship is required under the governing contract.
5+ years building and administering cloud environments, primarily in Azure.
Prior work inside secure enclave environments and working knowledge of security compliance frameworks.
Deep familiarity with Azure services, Azure Virtual Desktop in particular.
A track record of automating Azure deployments through code using Bicep, Terraform, ARM templates, and Azure DevOps.
Fluency in PowerShell, YAML, and JSON, plus comfort picking up other scripting languages.
Degree in computer science, IT, or a similar discipline, or equivalent hands-on experience.
Sound judgment on technical decisions and a knack for untangling hard problems.
A habit of tightening up how the team builds and ships, so work moves faster over time.
Preferred: AZ-104, AZ-305, or comparable Azure certifications.
Location and Travel
Full-time onsite in Northern Virginia. Candidates must live within commuting distance or be open to relocating; relocation assistance is offered.