Azure Platform Engineer

TEKsystems

3d•$80 - $100•Hybrid

About The Position

Our client is seeking a highly skilled Azure Platform Engineer to support a major initiative migrating applications into a secure enclave environment. This engineer will partner with Application Security, Cloud Engineering, and Architecture teams to build secure-by-default, automated onboarding pathways aligned to CMMC Level 2, NIST 800‑171, and internal ARB/SDLC governance. This is a fast‑paced engagement with a hard audit deadline (Sept/Oct). The consultant will make an impact immediately and work as part of a core team including AppSec, Security Automation, IaC, Architecture, and PMO.

Requirements

Azure (Commercial or Gov Cloud)
DevOps / CI‑CD
Terraform
Automation frameworks
PowerShell
GitHub / GitHub Actions
5+ years in Platform Engineering, DevOps, or Cloud Engineering
Strong experience in Azure, Azure DevOps, or GitHub Actions
Experience building reusable templates, pipelines, or automation frameworks

Nice To Haves

Python, Bash
Bicep
YAML
CI/CD design
Key Vault / HSM
Secure Enclave / GCC High
KQL queries

Responsibilities

Build reusable platform templates, reference architectures, and golden patterns.
Develop guardrail‑driven developer experiences (standardized pipelines, IaC scaffolding, secrets handling).
Implement OIDC, managed identities, and secure identity patterns.
Integrate platform tooling with ARB/SDLC to auto‑capture required artifacts.
Embed security controls into CI/CD pipelines, IaC modules, and deployment frameworks.
Enforce Zero Trust: least privilege, encryption, policy‑as‑code, logging, and auditability.
Automate compliance checks aligned to CMMC Level 2 & NIST 800‑171.
Work with Cloud Engineering, AppSec, DevOps, and Enterprise Architecture to standardize secure patterns.
Mentor application teams on enclave requirements and platform onboarding.
Lead teams migrating into Azure Gov/GCC High or similar secure enclaves.
Translate application architecture into enclave‑compliant patterns.
Ensure compliance for access control, logging, monitoring, identity, and network segmentation.