Apply on Employer Site

SMS Data Products Group, Inc. · 1 month ago

Senior Cloud Engineer/Architect (AZURE)

US-VA-Fort Belvoir

Full-time

Onsite

Senior Level, Lead/Staff

10+ years exp

SMS Data Products Group, Inc. is seeking an experienced Senior Cloud Engineer/Architect (Azure) to support large-scale migration and operations on a high-profile DOD contract. This role involves designing and implementing secure, scalable, and compliant hybrid and multi-cloud architectures to enable mission success across complex defense environments.

GovernmentHardwareInformation TechnologySoftwareTelecommunications

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Design, implement, and secure Azure-based cloud architectures in alignment with DoD mission objectives and cybersecurity standards

Lead configuration, deployment, and management of Microsoft Entra ID / Azure AD for centralized identity, single sign-on (SSO), and role-based access control (RBAC) across Azure tenants and subscriptions

Integrate federated identity solutions with AWS Identity Center, Okta, or on-premises Active Directory

Develop and enforce Azure governance frameworks, including Azure Policy, Management Groups, and Blueprints, ensuring alignment with DoD Zero Trust and least-privilege principles

Architect and secure hybrid connectivity across Azure, AWS, and DoD on-premises networks, ensuring consistent identity and access management across clouds

Collaborate with cybersecurity teams to ensure solutions comply with DISA STIGs, DoD Cloud Computing SRG, FedRAMP High, and NIST 800-53 controls

Implement and manage Infrastructure as Code (IaC) solutions using Bicep, Terraform, or Azure Resource Manager (ARM) templates

Qualification

Microsoft Azure architectureMicrosoft Entra IDInfrastructure as CodeDoD cybersecurity complianceMulti-cloud identity integrationTerraformBicepAzure RBACCommunication skillsTeam collaboration

Required

Active Microsoft Certified: Azure Solutions Architect Expert certification (or equivalent)

Active DoD Top Secret clearance with SCI Eligibility

DoD 8570 IAT Level II certification

BS degree and 12+ years of prior relevant experience or a Masters degree with 10+ years of prior relevant experience, additional years of experience may be considered in lieu of a degree

5+ years of experience designing and implementing secure Azure-based solutions in enterprise or government environments

Proven expertise in Microsoft Entra ID / Azure AD, Azure RBAC, and Conditional Access

Experience with multi-cloud identity integration (Azure + AWS or GCP)

Strong understanding of federated identity, SAML/OIDC protocols, and cross-cloud authentication mechanisms

Familiarity with Azure Government (DoD), FedRAMP, and DISA STIG compliance frameworks

Hands-on experience with Terraform, Bicep, Azure CLI, and CI/CD automation

Excellent written and verbal communication skills with the ability to brief technical concepts to leadership and stakeholders

Must be able to work as part of a team to troubleshoot and resolve complex issues

Excellent written and verbal communication skills. This shall include drafting SOPs and technical documentation as well as communication with senior program and customer leadership

Must be able to present designs and plans to technical leadership personnel and boards for approvals