Title : Sr Azure Engineer

Duration : FTE/Permanent

Location : Remote but must be local to DC metro area to go onsite from time to time

Salary : 140-160k DOE

We are seeking a highly skilled and motivated Senior Azure Engineer with a strong background with Azure infrastructure management and enterprise level design with a focus on Azure security.

As a Senior Azure Engineer, you will be responsible for designing, implementing, and maintaining the organization's Azure-based infrastructure. This individual will also be responsible for the execution of projects, optimization of the compute infrastructure and be an escalation point for any operational issues resulting from service outages.

• BGP routing
• Azure security experience a plus
• Azure – Technical/Operational
• Best practices for security with cloud – Azure
• Automation in Azure (Terraform, Powershell, ARM, Bicep)
• Certifications a plus: Azure 500 or 104
• Experience with Azure and M365

Responsibilities:

• Manage the security posture, identify and remediate vulnerabilities, perform threat modeling, and implement threat protection.
• Work with management, administrators, and developers to plan and implement solutions that meet security and compliance requirements.
• Develop and maintain automation scripts using PowerShell, ARM templates, or other relevant tools to streamline deployment and management processes.
• Stay up to date with the latest trends and features with Azure and Office 365.
• Security monitoring including log aggregation/centralization, correlation, and alerting of security events and incidents.

Qualifications:

• Bachelors degree in Information Technology, Computer Science, or a related field preferred but not required.
• 7 years of IT Operations/ Engineering with Azure
• Law firm experience a plus
• 3 years of experience in Azure Cloud Engineer roles in mid-sizer or larger companies with geographically-distributed environments with 24x7 uptime environments.
• Architect solutions that are scalable, resilient, and highly available to meet business needs.
• Conduct an evaluation of existing cloud architecture with an emphasis on security and best practices design.
• Identify, evaluate, and design plans to mitigate or eliminate risks in the system or network.
• Working knowledge of native Azure Platform security tools and service tools such as Azure Policies, Conditional Access, NSGs, Defender, Sentinel, Firewall, and Monitor/LogAnalytics.
• Proven experience as an Azure Engineer or a similar role in an Azure environment.
• Working knowledge of native Azure Platform tools such as Azure Policies, Conditional Access, NSGs, RBAC, and Identity Governance.
• Understanding of Azure cloud networking (e.g., Subnetting, Route Tables, Security Groups, VPC, vNet Peering, Virtual Network Gateways, optimizing for egress costs)
• Understanding of BGP routing is a plus.
• Experience with various Azure services like app services, Entra ID, enterprise apps, API management, function apps, and load balancing.
• Infrastructure-as-code approaches, role-specific automation tools and associated programming languages (e.g., Bicep, ARM, Terraform, and PowerShell)
• Establish and maintain identity governance frameworks, including privileged identity management (PIM) for elevated access.
• Configure and manage conditional access policies to control access based on specific conditions, locations, and device compliance.
• Familiarity with security frameworks, standards, and best practices.
• Microsoft Certified: Azure Administrator Associate (AZ-104 exam) and Azure Security Technologies (AZ-500) a plus.

We are an Equal Opportunity Employer