[Hiring] Azure Cloud Engineer @Ampcus Inc.

Role Description

The Tolling Engineering and Operations team is seeking an Azure Cloud Engineer. The role includes cloud engineering, application support, and rotational help-desk support within the Tolling group. Responsibilities include supporting API Gateways, Azure Virtual Desktop (AVD), Application Insights, and Office 365.

Primary Responsibilities

• Cloud Operations and Engineering
  • Maintain and implement cloud resources in the Tolling Azure environment.
  • Ensure compliance with Virginia government policies regarding security, IAM, network controls, and cost governance.
  • Maintain and improve infrastructure documentation, naming conventions, tagging standards, and cloud governance artifacts.
  • Assist with access reviews, role assignments, and least-privilege IAM evaluations.
  • Manage vendor-required updates and ensure compatibility.
  • Implement fault-tolerant and highly available Azure solutions.
• Monitoring, Troubleshooting, and Diagnostics
  • Monitor Azure services and application workloads to ensure uptime and availability.
  • Troubleshoot issues related to connectivity, access, security, application performance, and service degradation.
  • Perform diagnostic deep-dives using logs, metrics, traces, Azure Monitor, and Log Analytics.
  • Analyze and tune system/application performance.
• Operational Support
  • Participate in daily/weekly operational cycles, including pattern monitoring, incident reviews, and maintenance readiness checks.
  • Triage production issues, ensure timely resolution, and document root-cause findings.
  • Execute and support off-hours work as needed.
  • Define change requests, detailed implementation plans, and rollback procedures.
• Technical Development and Compliance
  • Understand end-to-end data flows across tolling systems, roadway data, financial transactions, and reporting tools.
  • Support optimization of integrations and data movement.
  • Apply PCI or other regulatory compliance requirements when evaluating system behavior and logging patterns.
  • Manage Key Vaults, passwords, certificates, and secure credential storage.
• Collaboration and Communication
  • Work directly with architects, engineers, managers, and cross-functional teams to use Azure services effectively.
  • Provide best-practice guidance related to SaaS, PaaS, and IaaS.
  • Communicate clearly in written and verbal form with internal and external stakeholders.
  • Support multiple concurrent projects of complex technical scope.

Qualifications

• Minimum 3 years of experience with Microsoft Azure services.
• Minimum 3 years of experience supporting VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads, including hands-on diagnostic work with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.
• Bachelor’s degree in computer science, information systems, or equivalent experience.
• Demonstrated ability to communicate requirements and design concepts clearly.
• Experience working in Windows environments.
• Experience implementing Rubrik backup and recovery for Azure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DR validation.
• Experience with Office 365 services and administering Single Sign-On (SSO), including Entra ID.
• Experience administering SecretServer privileged access vaults, including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.
• Solid scripting experience with PowerShell and/or Python.
• Ability to create network and system topology documentation.
• Experience with Azure Virtual Desktops.
• Experience with Office 365 services and Power Apps.
• Azure certification preferred.

Requirements

• Position requires a fingerprint-based background check.
• Continued education is expected at the contractor’s own expense to stay current with required technologies.

Skills

• Microsoft Azure administration/engineering - 3 Years
• Microsoft Windows environments (2019+) - 5 Years
• Server infrastructure, protocols, firewalls, certificates, load balancers - 2 Years
• Support of VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads - 3 Years
• Networking, server administration (Windows/Linux), databases, cloud environments - 2 Years
• Implementing Rubrik backup & recovery for Azure IaaS/PaaS - 2 Years
• Scripting with PowerShell/Python - 2 Years
• Continuous integration tools (Azure DevOps, Jenkins, Git, TFS) - Desired 1 Year
• Administration of SecretServer privileged access vaults - 2 Years
• Office 365 and Power Apps platforms - 1 Year
• Infrastructure as Code (Terraform or equivalent) - Desired 1 Year
• Containerization (Docker, Kubernetes) - Desired 1 Year
• Experience with PCI or similar compliance frameworks - 1 Year
• Key Vault, secrets and certificate management - Desired 1 Year
• Single Sign On and identity administration (Entra ID) - 1 Year
• Azure certification (AZ 104, AZ 305, or similar) - Desired 1 Year
• Experience with enterprise governance models - 1 Year
• Experience analyzing cloud cost trends and delivering cost optimization recommendations - Desired 1 Year
• Azure Virtual Desktops - Desired 1 Year