Azure Cloud/DevOps Engineer - Interim Secret or Higher Required

Overview

JOB TITLE: Azure Cloud/DevOps Engineer

GOVERNMENT AGENCY: Department of State

POSITION INFORMATION: Full-Time Position; Government contractor supporting federal agency clients

LOCATION: Downtown Washington, DC (Hybrid); 3 days onsite per week

BENEFITS: Health, Dental and Vision, 401(k), Flexible Spending Account (FSA), 11 Paid Federal Holidays, PTO, education reimbursement

CLEARANCE: Must have, at minimum, an active Interim Secret security clearance, with the ability to obtain and maintain a final Top-Secret clearance.

ITC is seeking anAzure Cloud/DevOps Engineer to help run and modernize the Azure environment behind a mission-critical federal program in downtown Washington, DC. This is a Terraform-first role, not a ticket queue: the engineer will own infrastructure as code end to end-writing the Terraform, building the GitLab pipelines that ship it, and standing up the Azure Virtual Desktop (AVD) environment a live user base depends on every day. The engineer will join a small, senior, hands-on team with direct access to the customer, where proposed improvements go straight to the person who can approve them.

ITC values demonstrated work over years of experience; candidates who can do the work described below are encouraged to apply even if their background does not align perfectly.

WHY THIS ROLE:

• Real IaC ownership. Terraform is the primary tool here, not an aspiration in a roadmap deck. You'll write it, review it, and own the modules.
• A stack you can point to later. Azure core services, Terraform, GitLab CI/CD, PowerShell, and AVD at production scale-a combination that is hard to get hands-on time with and that travels well.
• Visible impact. The environment you build is the environment the mission runs on, and you'll hear about your work from the people who use it.
• Room to build, not just maintain. This is an active modernization effort, with greenfield work alongside the operational load.
• A team that's actually in the room. Working onsite with the customer and each other four days a week means fast decisions, real whiteboarding, and none of the multi-day message loops that stall cloud work.

Responsibilities

RESPONSIBILITIES:

• Azure Cloud Engineering
• Design, deploy, and maintain Azure infrastructure, including virtual machines, VNets, Storage, Azure Active Directory (Azure AD), and PaaS services.
• Manage and optimize Azure networking, including VNets, network security groups (NSGs), load balancers, and VPN/ExpressRoute connectivity.
• Infrastructure as Code
• Develop and maintain the Terraform modules and templates that define the environment.
• Automate everything worth automating using PowerShell, Bash, YAML/JSON, and GitLab pipelines.
• Azure Virtual Desktop
• Deploy, configure, and manage AVD environments, including host pools, session hosts, FSLogix profile containers, and Azure AD/Microsoft 365 integrations.
• Troubleshoot and tune AVD performance for a live user community.
• CI/CD & Automation
• Build, maintain, and troubleshoot CI/CD pipelines in GitLab.
• Automate cloud operations, system configuration, and monitoring.
• Security & Compliance
• Implement secure cloud practices for federal environments, including role-based access control (RBAC), Azure Key Vault, identity and access management (IAM), and encryption standards.
• Maintain alignment with NIST, RMF, FedRAMP, and agency-specific security controls.
• Monitoring & Reliability
• Use Azure Monitor, Log Analytics, and related tooling to track system health, diagnose issues, and meet service level agreements (SLAs).
• Collaboration
• Work directly with engineering, security, and program staff to advance the cloud modernization effort.

Qualifications

REQUIRED:

• 5+ years of experience in cloud engineering, DevOps, or systems engineering, with substantial hands-on Microsoft Azure experience.
• Demonstrated depth with Azure core services and architecture, including designing and operating production environments.
• Strong hands-on Terraform experience, including writing and maintaining modules other engineers depend on. This is the most heavily weighted requirement.
• Solid PowerShell scripting ability for automation and system configuration.
• Working experience building and troubleshooting CI/CD pipelines in GitLab.
• Hands-on experience with Azure Virtual Desktop in a production environment, including host pools, session hosts, and FSLogix.
• Experience supporting Azure networking, including VNets, routing, NSGs, and VPN/ExpressRoute.
• Familiarity with federal cloud security frameworks such as FedRAMP, NIST, and RMF.
• Strong troubleshooting skills and the ability to communicate technical reasoning to both technical and non-technical audiences.
• Ability to work onsite in downtown Washington, DC three days per week.

PREFERRED:

• Experience supporting DoD or federal agency cloud environments.
• Experience with Docker and Azure Kubernetes Service (AKS).
• Experience with Azure serverless tooling, including Azure Functions, Logic Apps, and Event Grid.
• Cost optimization experience using Azure Cost Management or FinOps practices.
• Relevant Azure certifications (AZ-104, AZ-400, or AZ-500).

SECURITY CLEARANCE REQUIREMENTS:

• Must have an active Interim Secret security clearance and be eligible to obtain a Top Secret clearance. ITC will sponsor and support the Top Secret upgrade, including guidance for candidates who have not previously been through a TS adjudication.
• U.S. Citizenship is required due to the nature of this government contract.

WORK ENVIRONMENT AND PHYSICAL DEMANDS: This is a hybrid position based in Washington, DC, with three days per week onsite and two days remote. The onsite requirement is driven by the operating environment and the teams this role supports and is a standing condition of the position. As the escalation point for complex OCI issues, the engineer may occasionally be called on outside normal business hours.