We are seeking a full-time Azure Platform Engineer to help design, automate, secure, and operate a large-scale enterprise Azure environment. This role is responsible for the day-to-day administration, governance, and evolution of a multi-subscription Azure platform supporting mission-critical workloads.
You will own real infrastructure and operations, building Infrastructure as Code, automation solutions, CI/CD pipelines, security controls, and governance frameworks that keep the platform secure, compliant, cost-efficient, and resilient. This is a hands-on engineering role with deep operational ownership where you will take solutions from architecture through production support.
This position is based in the Reston, VA / Rockville, MD area, a hybrid work arrangement with occasional on-site collaboration.
Work Schedule & Availability
This role supports production systems, participates in a shared on-call rotation, and is expected to support after-hours and weekend maintenance windows when required. The engineer must be able to plan, execute, and support production changes and respond to production incidents during assigned on-call periods.
What You'll Do
Azure Platform Administration & Operations
Administer enterprise Azure environments across multiple subscriptions and management groups.
Manage Azure Landing Zones, Management Groups, Azure Policy, role-based access control (RBAC), and subscription lifecycle processes.
Govern Azure resources to support security, compliance, and operational consistency.
Infrastructure as Code (IaC)
Design, deploy, and maintain cloud infrastructure using Terraform, Bicep, ARM templates, or similar IaC tools.
Manage infrastructure deployments through governed CI/CD pipelines rather than manual portal-based changes.
Develop reusable modules and templates that enforce enterprise standards.
Automation & Platform Engineering
Build automation that reduces operational overhead and enables controlled self-service capabilities.
Develop Azure Automation runbooks, Azure Functions, Logic Apps, and PowerShell-based automation.
Automate governance, compliance validation, resource provisioning, drift detection, and remediation.
DevOps & CI/CD
Design and maintain GitHub Actions and Azure DevOps deployment pipelines.
Implement environment promotion strategies across development, test, staging, and production.
Build secure deployment workflows with validation, approvals, automated testing, and notifications.
Azure Security & Governance
Implement and maintain controls using Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Key Vault, and Microsoft Entra ID.
Design and enforce identity, access management, privileged access, and least-privilege processes.
Support security assessments, vulnerability remediation, and compliance initiatives.
Networking & Connectivity
Design, deploy, and troubleshoot Virtual Networks, Private Endpoints, ExpressRoute, VPN Gateway, Azure Firewall, NSGs, Application Gateway, and Web Application Firewall.
Support hybrid connectivity, routing, DNS, segmentation, and secure application access patterns.
Operational Ownership & Incident Response
Serve as an escalation point for complex production issues.
Perform incident response, root cause analysis, and post-incident corrective actions.
Own problems end to end across infrastructure, networking, identity, and platform services.
Compliance & Audit Readiness
Support NIST 800-53, FedRAMP, SOX, and other applicable compliance initiatives.
Maintain evidence collection, control documentation, and audit readiness.
Participate in code reviews, design reviews, change management (CAB), and operational documentation.
Azure Technologies You'll Work With
Azure Platform: Azure Landing Zones, Management Groups, Azure Policy, Azure Resource Manager, Azure Monitor, and Log Analytics
Identity & Security: Microsoft Entra ID, Privileged Identity Management (PIM), Microsoft Defender for Cloud, Microsoft Sentinel, Key Vault, and Conditional…