Job Description
\n
Job Title: Azure DevOps Cloud Engineer
\n
Location: 9120 Lockwood Blvd, Mechanicsville, VA 23116 -Onsite
\n
Contract
\n
\n
\n
DevOps & Cloud Engineering
\n
CI/CD Engineering & Release Automation
\n
- \n
- Design, build, and maintain CI/CD pipelines in Azure DevOps (YAML and Classic) for microservices and APIs.
- Establish reusable pipeline templates, release standards, and guardrails for compliant, repeatable deployments.
- Implement secure secrets and key management using Azure Key Vault and managed identities in pipelines.
- Automate database deployment workflows (e.g., DACPAC/SQLCMD) and integrate migration steps into releases.
- Enable blue/green or automated rollback strategies to minimize downtime and risk.
\n
\n
\n
\n
\n
\n
Environment Consistency & Observability
\n
- \n
- Standardize provisioning and configuration across Dev/QA/Prod environments; codify configuration baselines.
- Build monitoring dashboards and actionable alerts for pipeline and deployment health (App Insights, pipeline logs).
- Uphold DevOps best practices tailored to a compliant government environment.
\n
\n
\n
\n
Azure Resource Engineering & Governance
\n
- \n
- Implement and maintain Azure services and governance standards (e.g., App Services, Function Apps, API Gateways/API Management, AKS) supporting Tolling workloads.
- Support identity and access management (e.g., Entra ID SSO and role assignments) following least-privilege principles.
- Ensure solutions are fault tolerant and highly available; coordinate change requests and rollback procedures.
\n
\n
\n
\n
Monitoring, Troubleshooting & Reliability
\n
- \n
- Monitor Azure services and application workloads to ensure uptime and performance; perform diagnostic deep-dives with Azure Monitor and Log Analytics.
- Triage production incidents, drive timely resolution, and document root cause findings; participate in operational cycles and maintenance readiness checks.
\n
\n
\n
Compliance, Data Flows & Cost Awareness
\n
- \n
- Consider PCI or comparable regulatory requirements when evaluating system behavior, logging, and integrations.
- Understand end-to-end data flows across tolling systems (e.g., roadway data, financial transactions, reporting) and support optimization of integrations.
- Contribute to cloud cost visibility and optimization recommendations; align operational choices with governance and budget goals.
\n
\n
\n
\n
Collaboration & Communication
\n
- \n
- Partner with architects, developers, DBAs, and engineers to align deployments with secure network and identity configurations; communicate clearly with stakeholders.
\n
\n
Required Qualifications
\n
- \n
- Hands-on experience with Azure DevOps CI/CD (YAML & Classic).
- Azure application deployment engineering (e.g., App Services, Functions, Containers, APIs).
- Secure secrets & key management (Azure Key Vault, RBAC, managed identities).
- SQL deployment automation integrated with CI/CD.
- Logging & observability (App Insights, pipeline logs, dashboards, alerts).
- Infrastructure as Code (Terraform, Bicep, or ARM templates).
- Scripting & automation (PowerShell and/or Python).
- Experience with Azure administration/engineering in production environments.
\n
\n
\n
\n
\n
\n
\n
\n
\n
D esired Qualifications
\n
- \n
- Experience designing CI/CD standards or DevOps frameworks for microservices.
- Containerization & orchestration (Docker, AKS); registry-integrated build and release pipelines.
- Governance & compliance automation (Azure Policy, RBAC standards, pipeline guardrails).
- Experience with PCI or similar compliance frameworks.
- Exposure to cloud cost analysis and optimization in enterprise environments.
- Azure certifications (e.g., AZ-104, AZ-305, AZ-400) preferred.
\n
\n
\n
\n
\n
\n
\n
Guidelines
\n
- \n
- Position requires a fingerprint-based background check.
- Candidate expected continued education to stay current with VDOT technologies.
\n
\n
\n
Experience Requirements
\n
Required
\n
- \n
- Azure DevOps CI/CD (YAML & Classic) – 4 years.
- Azure App Services / Functions / APIs / Containers – 3 years.
- Secure Secrets & Key Management (Key Vault, RBAC, managed identities) – 3 years.
- SQL Deployment Automation (DACPAC, SQLCMD, CI/CD-integrated DB migrations) – 1 year.
- Environment Provisioning & Configuration (Dev/QA/Prod standardization) – 3 years.
- Logging & Observability (App Insights, pipeline logs, dashboards, alerts) – 3 years.
- Infrastructure as Code (Terraform/Bicep/ARM) – 2 years.
- Identity & Access (Entra ID), least-privilege IAM – 1 year.
- PCI or similar compliance frameworks – 1 year.
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Desired
\n
- \n
- AKS / Containerization (Docker, Kubernetes) – 1 year.
- Governance & Compliance Automation (Azure Policy, RBAC, pipeline guardrails) – 1 year.
- Cloud Cost Analysis & Optimization – 1 year.
\n
\n
\n
\n