Azure Cloud Engineer

The NC Department of Transportation Web Services group is seeking a Cloud Engineer with solid Azure experience to help implement and manage cloud infrastructure in a secure and scalable manner. The contractor will work closely with senior architects and application teams to support the deployment, configuration, documentation and optimization of Azure services, networking components, and infrastructure. This role requires a proactive engineer who can contribute to documentation, knowledge sharing, and enforcement of cloud governance policies in a large public-sector environment. The engineer will support a maturing Azure environment, assisting in both new deployments and modernization of existing applications. Work is largely related to the Real ID federal mandate and the need for quicker processing in NC DMV databases. Key Responsibilities Assist in the setup and configuration of Core Azure subscriptions, resource groups, and environments. Implement Azure Policies, RBAC permissions, and tagging standards based on team guidance. Deploy and support core Azure networking (VWAN,Azure Firewall, VNets, NSGs, Private Endpoints, VPN/ExpressRoute). Help configure and manage Azure Application Gateways and related components. Contribute to infrastructure automation using Bicep, ARM, or PowerShell scripts. Troubleshoot connectivity and application including issues between Azure and on-prem networks Support incident resolution and assist with root cause analysis. Monitor Azure environments and assist in alerting, logging, and diagnostics configuration. Collaborate with development, architecture, and security teams on deployments and infrastructure changes. Follow and reinforce cloud governance, security, and compliance policies. Preferred: AZ-104, AZ-700, AZ-305 and other Azure certifications. Skill Preference Minimum Span Hands on experience managing and deploying azure landing zone architecture in enterprise environments Required 3 Years Strong azure networking skills (VWAN, Express Route, VPN, Firewall, VNET etc) including hybrid networking with on premises. Required 3 Years Experience designing Azure environments with a "private-by-default" approach which includes use of Private Endpoints, disabling public IPs, restricting access via NSGs and Azure Firewall, and enforcing policies to prevent public exposure. Required 3 YearsFamiliarity with implementing and managing Azure Policies, RBAC, and resource tagging strategies Required 3 YearsStrong problem-solving and communication skills; ability to collaborate effectively with cross-functional teams Required 5 Years Required Skills : 1. 5+ years of experience managing and deploying azure landing zone architecture 2. Strong Azure networking skills 3. Experience with private endpoints using Azure Firewell 4. Strong communication and ability to work with senior leadership Basic Qualification : Additional Skills : Hybrid schedule is flexible Background Check : Yes Drug Screen : Yes Notes : Selling points for candidate :Hybrid schedule is flexible Project Verification Info : Exclusive to Apex :No Face to face interview required :Yes Candidate must be local :No Candidate must be authorized to work without sponsorship ::No Interview times set : :No Type of project : Master Job Title : Branch Code :

Created: 2026-03-10