VDOT Azure Cloud Engineer

VDOT Azure Cloud Engineer (812168)

Virginia Information Technology Agency

Title/Role: VDOT Azure Cloud Engineer

Region Description:

Req. Status: Open

No. of Openings: 1

Start Date: 10/19/2026

End Date: 06/30/2027

Max Submittals by Vendor: 2 Per Opening

Worksite Address: 9120 Lockwood Blvd, Mechanicsville, VA 23116

Agency Interview Type: Web Cam Interview Only

Work Arrangement: Remote

Short Description:

Maximum Vendor Submittal Rate is $ 95.25/hr.

Complete Description:

VDOT ITD Tolling is seeking an Azure Cloud Engineer to join the Eng and Ops team. The role includes engineering, application support, and rotational help‐desk support within the Tolling group. Includes API Gateways, AVD, App Insights, & Office 365.

Primary Responsibilities

Cloud Operations and Engineering

·Maintain and implement cloud resources in theTolling Azure environment.

·Ensure compliance with Virginia governmentpolicies regarding security, IAM, network controls, and cost governance.

·Maintain and improve infrastructuredocumentation, naming conventions, tagging standards, and cloud governanceartifacts.

·Assist with access reviews, role assignments,and least‐privilege IAM evaluations.

·Manage vendor‐required updates and ensurecompatibility.

·Implement fault‐tolerant and highly available Azure solutions.

Monitoring, Troubleshooting, and Diagnostics

·Monitor Azure services and application workloadsto ensure uptime and availability.

·Troubleshoot issues related to connectivity,access, security, application performance, and service degradation.

·Perform diagnostic deep‐dives using logs,metrics, traces, Azure Monitor, and Log Analytics.

·Analyze and tune system/application performance.

Operational Support

·Participate in daily/weekly operational cycles including pattern monitoring, incident reviews, and maintenance readiness checks.

·Triage production issues, ensure timelyresolution, and document root‐cause findings.

·Execute and support off‐hours work as needed.

·Define change requests, detailed implementationplans, and roll‐back procedures.

Technical Development and Compliance

·Understand end‐to‐end data flows across tollingsystems, roadways data, financial transactions, and reporting tools.

·Support optimization of integrations and datamovement.

·Apply PCI or other regulatory compliancerequirements when evaluating system behavior and logging patterns.

·Manage key vaults, passwords, certificates, andsecure credential storage.

Collaboration and Communication

·Work directly with architects, engineers,managers, and cross‐functional teams to use Azure services effectively.

·Provide best‐practice guidance related to SaaS,PaaS, and IaaS.

·Communicate clearly in written and verbal formwith internal and external stakeholders.

·Support multiple concurrent projects of complextechnical scope.

Qualifications

•Minimum 3 years of experience with MicrosoftAzure services.

•Minimum 3 years experience supportingVDOT /E‐ZPass Virginia tolling applications, infrastructure, and cloud workloads, including hands-on diagnostic work with transaction flows, roadway sensor data ingestion, and tolling application performance tuning.

•Bachelor's degree in computer science,information systems, or equivalent experience.

•Demonstrated ability to communicate requirementsand design concepts clearly.

•Experience working in Windows environments.

•Implementing Rubrik backup & recovery forAzure IaaS/PaaS, including policy sets, snapshot lifecycle tuning, and DRvalidation.

•Experience with Office 365 services andadministering Single Sign‐On (SSO) including Entra ID.

•Experience administering SecretServer privileged access vaults including credential rotation, vault workflow troubleshooting, and integration with Azure workloads.

•Solid scripting experience (PowerShell and/orPython).

•Ability to create network and system topologydocumentation.

•Experience with Azure Virtual Desktops.

•Office 365 services and Power Apps.

•Azure certification (preferred).

Special Instructions

•Position requires a fingerprint‐based backgroundcheck.

• Continued education is expected at the contractor's own expense to stay current with VDOT technologies.

Skill Required / Desired Amount of Experience

Microsoft Azure administration/engineering Required 3 Years

Microsoft Windows environments (2019+) Required 5 Years

Server infrastructure, protocols, firewalls, certificates, load balancers Required 2 Years

Support of VDOT / E-ZPass Virginia tolling applications, infrastructure, and cloud workloads Required 3 Years

Networking, server administration (Windows/Linux), databases, cloud environments Required 2 Years

Implementing Rubrik backup & recovery for Azure IaaS/PaaS Required 2 Years

Scripting with PowerShell/Python Required 2 Years

Continuous integration tools (Azure DevOps, Jenkins, Git, TFS) Desired 1 Years

Administration of SecretServer privileged access vaults. Required 2 Years

Office 365 and Power Apps platforms Required 1 Years

Infrastructure as Code (Terraform or equivalent) Desired 1 Years

Containerization (Docker, Kubernetes) Desired 1 Years

Experience with PCI or similar compliance frameworks Required 1 Years

Key Vault, secrets and certificate management Desired 1 Years

Single Sign On and identity administration (Entra ID) Required 1 Years

Azure certification (AZ 104, AZ 305, or similar) Desired 1 Years

Experience with enterprise governance models Required 1 Years

Experience analyzing cloud cost trends and delivering cost optimization recommendations Desired 1 Years

Azure Virtual Desktops Desired 1 Years