Azure SRE / DevSecOps Engineer

We are looking for a senior Azure Site Reliability Engineer (SRE) / DevSecOps Engineer to build, secure, operate, and continuously improve mission-critical infrastructure across Microsoft Azure and Azure Government.

This role is ideal for an experienced cloud/platform engineer who combines SRE, DevOps, DevSecOps, infrastructure automation, observability, networking, Kubernetes, and cloud security—particularly in federal or highly regulated environments.

What you'll do

• Build and maintain observability with Azure Monitor, Log Analytics, Application Insights, Datadog, or similar tools.
• Define and monitor SLIs, SLOs, availability, MTTR, change failure rate, and DORA metrics.
• Build and maintain secure Azure DevOps / GitLab CI/CD pipelines.
• Provision Azure infrastructure using Terraform, Bicep, or ARM.
• Automate infrastructure and operations using PowerShell, Bash, Python, and/or Ansible.
• Operate production workloads across Azure and Azure Government.
• Design and manage Azure networking: VNets, subnets, NSGs, routing, Azure Firewall, Private Endpoints, and Private DNS.
• Implement security baselines and support STIG/STIG-aligned Windows, Linux, and container environments.
• Support FedRAMP, FISMA, CMMC, NIST SP 800-53, DISA STIG, and related compliance requirements.
• Manage Microsoft Defender for Cloud, CSPM findings, vulnerability remediation, and security monitoring.
• Manage Windows/Linux patching and configuration management.
• Deploy and operate Docker, Kubernetes, and AKS workloads.
• Integrate SAST, DAST, container scanning, vulnerability scanning, and secret detection into CI/CD.
• Troubleshoot complex production infrastructure, networking, application, and security issues.
• Lead root-cause analysis and drive long-term corrective actions.

What we're looking for

• 8+ years of experience in SRE, DevOps, DevSecOps, Cloud Infrastructure, Platform Engineering, or Systems Engineering.
• Strong hands-on experience with Microsoft Azure.
• Strong understanding of both DevOps and cloud security/DevSecOps.
• Hands-on Terraform / Infrastructure as Code experience.
• Strong PowerShell and/or Bash/Shell scripting.
• Experience building and managing Azure DevOps CI/CD pipelines.
• Experience with Azure observability tools such as Azure Monitor, Log Analytics, Application Insights, or Datadog.
• Strong Azure networking knowledge, including NSGs, routing, Private Endpoints, DNS, and Azure Firewall.
• Experience with Microsoft Defender for Cloud and CSPM.
• Experience with Windows/Linux patching and configuration management.
• Hands-on experience with Docker, Kubernetes, and AKS.
• Working knowledge of Microsoft Sentinel and KQL.
• Strong production troubleshooting and incident/root-cause analysis skills.

Federal / Security Requirements

• U.S. Citizenship is mandatory.
• Must be authorized to work in the United States.
• Federal, DoD, FedRAMP, or other highly regulated environment experience is strongly preferred.
• Working knowledge of one or more of FedRAMP, FISMA, CMMC, NIST SP 800-53, and DISA STIGs.
• Ability to translate security and compliance requirements into practical technical controls.

Nice to have

• Azure Government experience.
• STIG-compliant Windows and RHEL/Linux administration.
• Azure Virtual Desktop (AVD) / FSLogix.
• Azure Update Manager and Ansible.
• Azure Policy, Guest Configuration, and policy-as-code.
• Microsoft Sentinel and KQL.
• Zero Trust and hub-and-spoke Azure architecture.
• High availability and disaster recovery architecture.
• Azure certifications such as AZ-104, AZ-500, AZ-305, or SC-100.

Benefits

- $100 per hour

- Remote

-10 Paid U.S. public holidays

- Full-time B2B / Independent Contractor