Job Description

The Systems Engineer (Azure) will design, implement, and optimize cloud and hybrid infrastructure solutions within Microsoft Azure to support enterprise IT services and mission-critical workloads. This role requires strong technical depth in Azure platform services, identity, automation, and infrastructure-as-code, combined with the ability to work across engineering, cybersecurity, and operations teams.

The engineer will contribute to the full system lifecycle — from requirements analysis and architecture design through secure integration, deployment, documentation, and transition to operations. This position is ideal for someone who thrives in a hybrid cloud environment and can balance hands-on engineering with strategic planning and modernization initiatives.

• Design and implement Azure-based solutions including Virtual Networks, VNets peering, Azure Firewall, Application Gateways, Load Balancers, and hybrid connectivity (VPN/ExpressRoute).
• Deploy and manage Azure compute services such as Virtual Machines, Azure Kubernetes Service (AKS), App Services, and serverless workloads.
• Develop secure, scalable architectures aligned with enterprise cloud strategy and governance frameworks.
• Implement Azure identity and access solutions including Azure AD, Conditional Access, Privileged Identity Management (PIM), and role-based access control (RBAC).
• Engineer hybrid cloud integrations using Azure AD Connect, ExpressRoute, site-to-site VPNs, and hybrid identity models.
• Support migration of on-premises workloads to Azure using tools such as Azure Migrate and ASR (Azure Site Recovery).
• Collaborate with network and security teams to ensure seamless connectivity, segmentation, and compliance.
• Automate provisioning, configuration, and operational tasks using PowerShell, Azure CLI, and Azure Automation.
• Apply Azure security best practices including NSGs, ASGs, Defender for Cloud, Key Vault, and managed identities.
• Ensure compliance with enterprise security baselines, cloud governance policies, and regulatory requirements.
• Participate in security reviews, risk assessments, and architecture evaluations.
• Monitor performance, availability, and cost using Azure Monitor, Log Analytics, Application Insights, and Cost Management.
• Troubleshoot complex cloud and hybrid infrastructure issues, serving as an escalation point for operations teams.
• Optimize cloud resource utilization, performance, and cost efficiency.
• Produce architecture diagrams, configuration baselines, runbooks, and lifecycle documentation.
• Support transition-to-operations activities including knowledge transfer, acceptance testing, and operational readiness reviews.
• Maintain accurate documentation aligned with enterprise lifecycle and change management processes.

Minimum Qualifications

• Bachelor's Degree in Information Technology, Computer Science, other relevant field, or equivalent relevant experience; Master's Degree preferred.
• Advanced computing certification preferred.
• 5–8 years of experience in systems engineering, with at least 3 years focused on Azure.

Other Job Specific Skills

• Experience working with IaC templates and Config Management tools.
• Strong experience with Azure networking, compute, identity, and security services.
• Proficiency with PowerShell, Azure CLI, and infrastructure-as-code tools.
• Hands-on experience with hybrid cloud integrations and workload migrations.
• Strong analytical and problem-solving skills with the ability to troubleshoot complex cloud issues.
• Excellent communication skills and the ability to collaborate across engineering, operations, and cybersecurity teams.
• A mindset focused on automation, modernization, and continuous improvement.
• Ability to balance hands-on engineering with architectural thinking and long-term planning.

Preferred Certifications

• Microsoft Certified: Azure Administrator Associate (AZ ‑104).
• Microsoft Certified: Azure Solutions Architect Expert (AZ ‑305).
• Microsoft Certified: Azure Security Engineer (AZ ‑500).
• Terraform Associate or equivalent IaC certification (optional but valuable).

Qualifications

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.