Senior Azure Cloud Engineer

A federal agency is planning its move off Azure VMware Solution (AVS) and onto native Azure — and this role owns the technical answer to how. You will design the post-AVS target state, determine which Azure-native services can replace the platforms the agency runs today, build the cost model that supports budget submissions, and shape the 18–24 month cloud roadmap that leadership executes against.

Early work includes assessing Azure application delivery services — Application Gateway, Front Door, and Load Balancer — as alternatives to F5, and answering the broader question of which legacy and third-party platforms can be replaced with Microsoft-native capabilities over the next 18–24 months.

You are the program's deep Azure expert. Your designs set the target state, and your options analyses and recommendations go to the Infrastructure Engineering Lead, program leadership, and government stakeholders as the plan of record. You will assess the current environment, evaluate Azure-native services against what the agency runs today, prototype candidates in non-production, and turn the results into decision-ready recommendations. Direction and prioritization come from the Infrastructure Engineering Lead; the depth that makes those decisions sound comes from you.

The work is architecture and analysis rather than ticket queues or team management. You will partner closely with the network, systems, and security teams so that what you design is something they can actually run, and serve as the escalation point when a hard Azure problem lands.

• Develop and compare target-state options, identify decision points, dependencies, and risks, and plan how workloads move from AVS to native Azure services. 
• Provide the technical inputs that keep the roadmap aligned to agency planning and budget cycles.
• Research, prototype, and recommend Microsoft services that replace legacy platforms, improve service delivery, and advance the agency's modernization goals.
• Develop and maintain the AVS-versus-native-Azure cost model, identify near-term savings in the existing environment, and support budget submissions with defensible projections.
• Document the operational impacts of design decisions — monitoring, patching, backup, disaster recovery (DR), runbooks — and advise on the skills operations teams will need as the model shifts from traditional networking and virtualization to cloud platform management.
• Provide expert guidance on complex Azure issues and share what you know with the engineers around you.
• Produce technical designs, options analyses, recommendation memos, roadmaps, and change records suitable for government review.

Minimum Qualifications

• Bachelor’s Degree or equivalent relevant work experience; Master’s Degree preferred.
• U.S. citizenship, and the ability to obtain and maintain a Public Trust clearance
• 8+ years of infrastructure engineering experience, including senior-level ownership of cloud design with Microsoft Azure as the primary platform.  

Other Job Specific Skills

• Deep working knowledge of core Azure services — compute, virtual networking, storage, Microsoft Entra ID (formerly Azure Active Directory / Azure AD), Azure Policy, Azure Monitor, and Cost Management — with the depth to validate designs, troubleshoot complex issues, and answer the hard questions.
• Experience planning or leading migrations of VMware-based workloads to Azure — from on-premises VMware vSphere / ESXi / vCenter, from Azure VMware Solution (AVS), or from a comparable platform — including workload assessment, sequencing, and cutover planning. Judgment about how migrations are scoped and sequenced matters more to us than the exact source platform.
• Solid understanding of Azure Networking — ExpressRoute, virtual networks (VNets) and peering, network security groups (NSGs), private endpoints, load balancing, DNS, and hybrid routing — enough to design hybrid topologies and evaluate replacing appliance-based load balancing with Azure-native services.
• Experience designing or operating cloud infrastructure in a security- and compliance-driven environment (federal, FedRAMP, or a similarly regulated industry), with a working understanding of NIST 800-53 as it applies to cloud environments.
• Strong communication and documentation skills — comfortable in deep technical discussion with engineers, able to present findings and recommendations to program leadership and government stakeholders, and able to translate complex technical options into clear business terms and written deliverables that stand up to government review.

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.