Senior Azure Cloud & DevSecOps Engineer (TS SCI Cleared)

Location: Washington, DC metropolitan area; some work at customer facilities, including accredited Secure Areas and SCIFs at Fort Meade. Candidates must reside in the Washington, DC metropolitan area. U.S. citizenship and authorization to work in the United States without employment-based visa sponsorship are required.

Salary: $145,000–$186,500 annually.

Company

hirify.global is a federal technology consulting firm delivering secure enterprise applications, data analytics, cloud infrastructure, and modernization solutions to federal government agencies.

What you will do

• Design, build, secure, and operate Microsoft Azure and Azure Government environments supporting DoW Impact Levels 5, 6, and 7 and equivalent classified workloads.
• Implement landing zones, subscriptions, networking, identity controls, governance policies, centralized logging, monitoring, and secure Azure services.
• Design and maintain secure CI/CD pipelines with GitHub Actions and Azure DevOps across multiple repositories and environments, including air-gapped deployments.
• Build hardened containerized applications for AKS and OpenShift, integrating vulnerability scanning, secrets management, artifact signing, SBOMs, and provenance attestation.
• Automate infrastructure, cloud operations, security validation, compliance evidence, and ATO support using Terraform, Bicep, ARM, PowerShell, Azure CLI, and Python.
• Troubleshoot infrastructure and deployment issues, maintain backup and disaster-recovery procedures, and produce diagrams, documentation, runbooks, and customer-handoff materials.

Requirements

• 5+ years of hands-on cloud, infrastructure, or DevSecOps engineering experience, including production environments and CI/CD pipelines in regulated or security-sensitive settings.
• Strong Microsoft Azure experience, including Azure Government or another regulated government-cloud environment; expertise in networking, identity, access management, compute, storage, security, monitoring, and governance.
• Experience with secure landing zones, subscription structures, network segmentation, access controls, centralized logging, Microsoft Entra ID, Azure RBAC, managed identities, Key Vault, Azure Policy, Azure Monitor, and Log Analytics.
• Proficiency with Infrastructure as Code using Terraform, Bicep/ARM, or comparable technology; strong scripting and automation skills with PowerShell, Azure CLI, Python, or a comparable language.
• Experience designing and maintaining CI/CD pipelines in GitHub Enterprise and/or Azure DevOps, including reusable workflows, branch protection, and self-hosted runners.
• Production experience with AKS or OpenShift, including hardened base images, multi-stage builds, vulnerability scanning, and non-root runtimes; experience integrating automated security scanning into pipelines.
• Working knowledge of SBOM generation, artifact signing, provenance attestation, Windows and Linux administration, least-privilege access, encryption, secrets management, vulnerability management, backup, and disaster recovery.
• Experience applying DISA STIGs or comparable federal security baselines; familiarity with the DoW Cloud Computing SRG, RMF, and NIST SP 800-53.
• Demonstrated proficiency with AI-assisted development platforms and the ability to review and validate generated code and documentation; strong troubleshooting, documentation, stakeholder communication, independent-work, and collaboration skills.
• DoW 8140-aligned IAT Level II certification with Security+ CE or approved equivalent, active Top Secret clearance, U.S. citizenship, and eligibility to obtain and maintain SCI and customer-specific access.

Nice to have

• Experience with Azure Government Secret or Top Secret environments, DoW IL5–IL7, ICD 503, JSIG, SAP workloads, Azure Landing Zones, SACA, or SCCA.
• Experience with hybrid connectivity, ExpressRoute, network virtual appliances, boundary protection, enterprise DNS, or cross-domain solutions.
• Experience with GitHub Enterprise Server in disconnected or air-gapped environments and transferring artifacts across air-gapped or cross-domain environments.
• Experience with Iron Bank, Platform One, hardened-container programs, OPA/Gatekeeper, Kyverno, or automated STIG and compliance evidence pipelines.
• Experience supporting RMF authorization, remediation, continuous ATO, production secrets rotation, SIEM integration, and audit-log retention.
• Microsoft Azure certifications and CISSP, CASP+, or another advanced security certification.

Culture & Benefits

• Medical, dental, and vision insurance.
• 401(k) with employer contribution.
• Paid time off and company holidays.
• Professional development and certification support.
• Employee assistance program, life insurance, and disability insurance.