CLOUD OPERATIONS ENGINEER

The Cloud Operations Engineer delivers full lifecycle management of Azure services across commercial and government ecosystems. This role focuses on the deployment, configuration, and monitoring of security stacks and identity services to support multiple data impact levels ranging from IL2 to IL5. You will be responsible for the sustainment of cloud native security stacks and shared services to ensure robust, compliant mission support.

RESPONSIBILITIES:

• Identity and Access Management (ICAM)

  • Provide Microsoft Entra account management, including provisioning Azure Role-Based Access Control (RBAC), custom roles, and subscription inheritance in coordination with Service Request Management.

  • Manage Microsoft Entra Premium licenses and other customer CSM purchased licenses required for the Azure portal.

  • Manage existing and future identity services including Entra ID (Azure AD), Certificate-Based Authentication (CBA), Flank Speed IdP, and Naval Identity Services (NIS).

  • Enable Common Access Card (CAC) authentication and custom configurations to validate Mission Owner (MO) credentials for identity management purposes.

• Infrastructure and Network Operations

  • Deliver full lifecycle management (configuration, backup, monitoring, and reporting) for Azure services, including Azure Policies, Storage Accounts, Firewalls, Microsoft Sentinel, and Directory Services.

  • Support and maintain critical infrastructure components: ADConnect, ADFS, Web Application Proxy (WAP), and Application Gateways.

  • Collaborate with Mission Owners and Program Managers to configure and deploy Bastion Host Services and Remote Desktop Gateways.

  • Coordinate the configuration of Virtual Networks (VNets) within designated IP spaces to meet customer CSM requirements.

• Security Stack Management (SCCA)

  • Manage, maintain, and sustain the Cloud Native Security Stack across Azure Government and Commercial regions to support IL2, IL4, and isolated IL5 workloads.

  • Maintain Secure Cloud Computing Architecture (SCCA) services and applicable Azure services upon "go-live" status.

  • Preserve and optimize Shared Services separate from the SCCA, including:

    • Azure Firewall Premium and Azure VPN/NAT Gateways.

    • Microsoft Defender XDR suite (Defender for Endpoint, Identity, and Cloud).

    • F5 BigIP devices and IaaS Virtual Machines.

QUALIFICATIONS:

Basic:

* Education: Bachelor's degree in Computer Science or a related technical field.

* Experience: 2-4 years of cloud engineering experience with expertise in Azure administration and cloud architecture.

* Technical Knowledge: Strong understanding of Azure Networking, CI/CD pipelines, and DevSecOps toolchains.

* Compliance: Experience supporting IL2, IL4, and IL5 workloads within DoD environments.

* Certification: Active Security+ certification.

* Security Clearance: U.S. Citizenship and the ability to obtain a DoD Top Secret clearance.

Preferred:

* Active DoD Top Secret clearance

* Relevant Cloud certifications (e.g., Microsoft Certified: Azure Associate)

* Experience implementing DISA STIG configurations and supporting compliance for DoD SRG and NIST SP 800-53 security controls.

Location: Ventura, CA or Remote