Cloud Engineer – Azure Infrastructure

Job Details: Assignment: Cloud Engineer – Azure Infrastructure & Security Environment Support Category/Level: M/Level Term of Assignment: months, possible extension up to months Date Candidate Resumes due to Sound Transit: Rate Range: Equipment needs? Sound Transit will provide laptop General Summary: The Cloud Engineer will support the design, deployment, and operationalization of pre-production cloud infrastructure in Azure. This position will focus on building scalable, secure, and reproducible virtual environments for systems testing, validation, and security tool integration. The engineer will work closely with cybersecurity and IT teams to build an InfoSec site for tools deployment, ensuring alignment with Sound Transit's security and operational objectives. Essential Functions: Primary Duties and Responsibilities Deploy and manage virtual machines, network resources, and storage in Microsoft Azure. Build a Pre-Production (PRE-PROD) environment that replicates production systems for patch testing, validation, and system integrity checks. Assist in configuring a dedicated Information Security site in Azure for tools like SIEM, EDR, IDPS, vulnerability management, and logging. Create and manage infrastructure as code (IaC) templates (, ARM, Bicep, or Terraform) to ensure consistent deployment practices. Configure Azure Networking (VNets, NSGs, UDRs, load balancers) to support isolated zones for testing and security tool evaluation. Collaborate with senior security engineers to ensure pre-prod environments meet InfoSec design requirements and operational goals. Automate environment setup and teardown scripts using PowerShell, CLI, or DevOps pipelines. Document build processes, configurations, and architectural diagrams. Ensure deployed environments comply with agency security baselines and regulatory requirements. Special / Additional Qualifications (Over Role/ Category Level) Education & Experience: Preferred Experience and Qualifications Bachelor's degree in information technology, Computer Science, Engineering, or related field – or equivalent hands-on experience. + years of experience in cloud infrastructure engineering, with at least years in Azure. Experience in building lab or test environments, preferably within a secure or regulated setting. Familiarity with Azure AD, Azure Policy, Defender for Cloud, and Log Analytics. Understanding of resource segmentation, NSG, firewall rules, and role-based access control (RBAC). Hands-on experience with PowerShell, Azure CLI, or Terraform for automation and provisioning. Exposure to security tools such as CrowdStrike, is a plus. Azure certifications (, AZ-, AZ-, SC-) are highly desirable. Specific Qualifications, Knowledge, and Skills: Skills and Competencies Strong infrastructure planning and cloud deployment skills. Ability to work independently while supporting the goals of the senior engineers and security architects. Detail-oriented and capable of managing multiple concurrent projects. Effective communicator, able to collaborate across infrastructure, InfoSec, and vendor teams. Commitment to documentation and reproducibility of deployed environments. Physical Demands/Work Environment: Work is performed in a hybrid environment with occasional on-site requirements. Occasional support outside business hours may be needed during deployment cycles. All tools and deployments are within Microsoft Azure under Sound Transit's cloud governance structure. Sound Transit promotes a safe and healthy work environment and provides appropriate safety and equipment training for all personnel as required. It is the responsibility of all employees and temporary staff to follow the Agency safety rules, regulations, and procedures pertaining to their assigned duties and responsibilities, which could include systems, operations, and/or other employees.