Syms Strategic Group (SSG) is seeking a talented Cloud Computing Engineer Principal (MCCF-Healthcare Systems)
Location: Remote
Department: Veterans Affairs (VA)
Type: Full Time
Min. Experience: Experienced
Security Clearance Level: Public Trust (MBI)
Salary Range: $109,623 - $126,790
If you have previously applied to Syms Strategic Group (SSG), there is no need to reapply. Applications are still under review.
Military Veterans are highly encouraged to apply!
Essential Duties and Responsibilities
Create data flow diagrams, cloud diagrams, transition diagrams, and high-level architecture diagrams on Cloud Infrastructure, applications, and systems
Design, develop, deploy, and operate automation technologies for continuous integration and continuous delivery (CI/CD)
Manage and control permissions in the cloud service provider for each cloud application, storage, and service being hosted
Implement, manage, and design monitoring capabilities for cloud architecture and cloud-hosted systems and applications to ensure optimal performance and compliance with VA/Federal policies
Provide customer-focused support for Product lines and Services, including setup, configuration, and provisioning of VA Enterprise Cloud (VAEC) environments
Provide Cloud support services for systems and applications in the VAEC Azure (GovCloud) environments, ensuring compliance with Veterans Independence Program (VIP) development, release, and documentation requirements
Adopt a DevOps mindset with an understanding of CI/CD practices and tooling
Provide Cloud Security Provider Documentation
Design VAEC/cloud-hosted solutions and address cloud-readiness gaps
Required Skills and Experience
A proven track record of designing, deploying, and managing Azure infrastructure and services
Experience with large-scale, high-availability, and scalable cloud architecture
Expertise in core Azure services such as Azure Virtual Machines, Azure Blob Storage, Azure Structured Query Language (SQL) Database, Azure Virtual Network (VNet), Azure Functions, Microsoft Entra ID, Azure Resource Manager (ARM), Azure Monitor, and Azure Domain Name System (DNS)
Experience with Azure security practices and services including Microsoft Entra ID, Azure Role-Based Access Control (RBAC), Azure Distributed Denial-of-Service (DDoS) Protection, and Azure Web Application Firewall (WAF)
Proficiency with Azure networking components such as VNet Peering, Azure ExpressRoute, Virtual Private Network (VPN) Gateway, Private Endpoints, and Azure Load Balancer
An ability to design, deploy, and manage scalable, secure, and highly available Azure cloud infrastructures
Experience establishing and governing multi-subscription Azure environments using Management Groups, Azure Policy, and Azure Landing Zones
Knowledge of cloud cost management, FinOps practices, budgeting, tagging strategies, and resource optimization using Azure Cost Management
Proficiency in scripting languages such as Python, PowerShell, Bash, or JavaScript/NodeJS for automation and cloud operations
Experience with Infrastructure as Code (IaC) tools such as Azure Resource Manager (ARM) Templates, Ansible, and GitOps methodologies
Proficiency with monitoring, logging, and observability tools including Azure Monitor, Log Analytics, Application Insights, Azure Activity Log, and third-party tools such as Prometheus, Grafana, and New Relic
Experience optimizing performance, availability, and resiliency of Azure resources and services
A strong understanding of Azure security best practices and compliance frameworks including Health Insurance Portability and Accountability Act (HIPAA), Federal Risk and Authorization Management Program (FedRAMP), National Institute of Standards and Technology (NIST), General Data Protection Regulation (GDPR), and Payment Card Industry Data Security Standard (PCI DSS)
Experience implementing encryption, key management, secrets management, and identity solutions using Azure Key Vault, customer-managed keys, and…