Senior Azure Cloud & DevSecOps Engineer

HyerTek is a federal technology consulting firm delivering secure enterprise applications, data analytics, cloud infrastructure, and modernization solutions to federal government agencies.

HyerTek is seeking a Senior Azure Cloud & DevSecOps Engineer to design, build, secure, and operate Microsoft Azure environments and the delivery pipelines that deploy into them. The work supports DoW Impact Levels 5, 6, and 7, equivalent classification levels, and other accredited environments as required by the customer. This role owns the full lifecycle, from landing zones, networking, and identity, through hardened container builds, automated security and compliance gates, and controlled releases into Azure Government.

A successful candidate will own solutions end to end. You will work directly with cybersecurity professionals, application teams, and Government stakeholders to turn mission requirements and security controls into sound technical designs and production-ready infrastructure and pipelines. Security is built into the platform and pipeline from the start rather than reviewed at the end. You will also automate the technical evidence needed to support and maintain an Authority to Operate (ATO).

This role uses approved AI-assisted development tools and coding agents to speed up infrastructure-as-code, pipeline and policy-as-code, findings triage, control documentation, and runbooks. You are expected to apply sound engineering judgment to review and validate all AI-generated output before it is deployed to an accredited environment.

Candidates must reside in the Washington, DC, metropolitan area. Some work will be performed at customer facilities, including accredited Secure Areas and SCIFs at Fort Meade.

Responsibilities:

Azure Cloud

• Build, configure, and maintain secure Microsoft Azure and Azure Government environments supporting IL5, IL6, and IL7 or equivalent workloads, following approved architectures, contract requirements, and applicable security controls.

• Implement cloud landing zones, subscriptions, resource organization, network boundaries, identity controls, centralized logging, and governance policies.

• Configure Azure networking, including VNets, subnets, routing, private endpoints, DNS, Azure Firewall, load balancers, NSGs, and hybrid connectivity.

• Implement identity and access controls using Microsoft Entra ID, Azure RBAC, managed identities, privileged-access controls, and Azure Key Vault.

• Deploy and operate Azure compute, storage, database, and container services, including AKS, in line with approved architectures and security requirements.

• Deploy and operate in disconnected, air-gapped, or classified environments where public-cloud services and external dependencies are limited.

DevSecOps and Software Supply Chain

• Design, maintain, and improve secure CI/CD pipelines using GitHub Actions and Azure DevOps across multiple repositories and environments, including air-gapped deployments.

• Build and maintain hardened containerized applications for Kubernetes platforms such as AKS and OpenShift.

• Integrate automated security checks into pipelines, covering source code, dependencies, secrets, containers, and infrastructure-as-code. Ensure critical findings are identified, evaluated, and remediated before release.

• Implement secure artifact management, including SBOMs, artifact signing, provenance attestation, and controlled promotion between environments.

• Manage secrets and environment-specific configuration using approved vault and configuration-management solutions.

• Establish reusable pipeline patterns, templates, and automation that keep security and deployment practices consistent across projects.

Infrastructure as Code and Automation

• Deploy and manage Azure infrastructure using Terraform, Bicep, ARM templates, or comparable IaC tools.

• Automate cloud operations, compliance validation, and evidence collection using PowerShell, Azure CLI, Python, or comparable languages.

Security, Compliance, and ATO Support 

• Apply Azure Policy, security baselines, DISA STIGs, encryption requirements, and configuration standards in partnership with cybersecurity teams.

• Implement, validate, and maintain DISA STIGs and security configuration baselines, including remediating findings and automating compliance validation.

• Automate compliance evidence, configuration monitoring, audit logging, and security reporting in support of RMF authorization, assessment, and continuous ATO activities.

• Collaborate with cybersecurity and development teams to remediate vulnerabilities, security findings, configuration deviations, and compliance deficiencies.

• Support security assessments, audits, and customer reviews with accurate configurations, technical documentation, and required evidence.

Operations, Reliability, and Documentation

• Implement monitoring, alerting, audit logging, and dashboards using Azure Monitor, Log Analytics, Defender for Cloud, and Microsoft Sentinel as applicable.

• Troubleshoot infrastructure, networking, identity, pipeline, container registry, and deployment issues across development, test, and production.

• Develop, test, and maintain backup, recovery, continuity-of-operations, and disaster-recovery procedures with documented recovery objectives.

• Produce infrastructure diagrams, configuration documentation, operational runbooks, and customer-handoff materials.