Remote New

Cloud Engineer

Hexagon US Federal
paid holidays, tuition reimbursement, 401(k)
United States
Aug 04, 2025
Company Overview At Hexagon US Federal we provide cutting-edge technologies and a wide range of professional services to enable our customers to make smarter and faster operational decisions and improve mission effectiveness. Hexagon US Federal is an independent subsidiary of Hexagon Corporation exclusively focused on bringing the broad range of Hexagon technologies to the US Federal government and its partners. Quick Hits Employees: 300 Operating Locations: Chantilly, VA (HQ); Huntsville, AL; Lexington Park, MD, and other client sites across the US A day in the life of a Cloud Engineer: As a Cloud Engineer with Hexagon US Federal you will be routinely creating, managing, and refining many different technologies and solutions that support Hexagon's software suite. The Cloud Engineer is an integral part of managing deployments in Microsoft Azure. The work the Cloud Engineer performs daily is key to managing the current infrastructures and helps to future proof new opportunities. This job is for you if you: Are passionate about working within the Azure Cloud Environment and want to help build solutions that can utilize the cloud platform to its fullest. Additionally, if you want to continuously learn new and cutting-edge technologies to help solve complex problems and make a meaningful impact daily across multiple projects and environments at once, then this job is for you. What we are expecting from you (i.e. the qualifications you must have): Azure Administrator (AZ-104) or Azure Security Engineer Associate (AZ-500) Bachelor's degree with 5+ years of applicable experience or 7+ years of applicable experience. CompTIA Security+ certification or must be obtained with 6 months of hire date. Experience deploying and utilizing Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Security Center Proven track record of designing and/or implementing scalable, secure, and high-performance cloud-based solutions. Azure platform expertise (Microsoft Entra ID, Azure Networking, VPN, Azure Policies, Log Analytics, Azure Monitor & Alerts, Azure Backup) Knowledge of virtualization and containerization technologies (VMware, Docker, Kubernetes) Must be able to work both independently and as part of a geographically dispersed team with little supervision and guidance. Ability to make use of provided resources and seek guidance as needed. Ability to communicate effectively, both orally and in writing. A well organized, self-directed, detail and process-oriented individual. Ability to investigate problems or malfunctions and find solutions or corrective actions. Ability to work directly with customers to gather requirements and to resolve problems. Ability to keep abreast of changing software technology. Preferred Experience: 3-5 years of experience deploying and administering security resources in an Azure Environment 2-3 years of experience designing Virtual Networking Solutions 2-3 years of experience designing and deploying IPSec based Site to Site Connectivity solutions Knowledge of different deployment strategies (cloud, on-premise, hybrid). Understanding of Azure Virtual Networking (ExpressRoute). Experience configuring Azure Log Analytics, Azure Monitor and Alerts, Azure Policies, Azure Backup, Azure Key Vaults, Azure Virtual Machines. Experience with PowerShell / Azure CLI. Experience with FedRAMP Authorization processes is a plus. Key Responsibilities Monitor and respond to security incidents using Azure Sentinel, Log Analytics, and other monitoring tools. Design, implement, and manage Azure infrastructure, including virtual machines, storage, databases, and networking. Implement and manage Azure security measures, including identity management, access controls, and monitoring. Develop and deploy cloud-based applications using Azure services, such as Logic Apps. Migrate existing on-premises applications to the cloud, ensuring minimal disruption to users. Collaborate with cross-functional teams to identify opportunities for cost savings, improved performance, and enhanced security. Stay up-to-date with new Azure features and services, and apply knowledge to improve existing solutions. Support and manage Active Directory, Microsoft Entra Connect, and Microsoft Entra ID to ensure seamless identity and access management across hybrid environments Required Level of Security Clearance: Secret (or ability to obtain) What we will provide in return: - Competitive health care plans with savings accounts - Dental and vision plans - 401k with 100% company match up to 6%, with immediate vesting on company match - Life and disability insurance - Learning Management System with robust offerings - Tuition Reimbursement Program - Flexible hybrid and remote working arrangements where possible - 13 paid holidays per year - Veterans' focused Employee Resources Group with regular educational sessions and communications - Leadership Development Program with multiple learning options Hexagon US Federal is an Equal Employment Opportunity Employer. We comply with all applicable federal anti-discrimination laws and provide reasonable accommodations for qualified individuals with disabilities and disabled veterans in its job application procedures. If you have any difficulty using our online system and need an accommodation due to a disability, you may use the following email address, hr@hexagonusfederal.com and/or phone number (703) 264-5600 to contact us about your interest in employment with Hexagon US Federal. All qualified applicants will receive consideration for employment without regard to protected veteran status, disability status, or any other protected class covered by federal, state, or local law. Hexagon US Federal participates in E-Verify. At Hexagon US Federal, we prioritize a secure and thorough hiring process. Be aware that we will never extend an employment offer without a careful review and interview process, and all official communications from our representatives will come from a verified Hexagon US Federal email address, never requesting upfront fees or sensitive information.