Cloud Engineer - Azure

About Samtek At Samtek, we're redefining cloud innovation as an engineer-owned and operated, SBA-certified minority-owned small business founded in 2018. Our mission is simple: empower federal agencies and large enterprises with cutting-edge DevSecOps and cloud transformation solutions that drive security, scalability, and speed. From cloud-native application development and platform engineering to robust security implementations, data center migrations, and seamless operations, we deliver modern IT services backed by over 50 years of collective expertise. We're a diverse, collaborative team that's passionate about pushing the boundaries of technology. Our culture thrives on curiosity, inclusivity, and real impact-whether it's optimizing cloud environments for mission-critical operations or fostering innovation in a supportive, hybrid work setting. Join us to work on high-stakes projects that matter, grow alongside top talent, and be part of a company that's not just building the future of cloud computing, but shaping it. Samtek: Where engineers lead, and excellence follows. Job Summary Samtek Inc is seeking a skilled Azure Cloud Engineer to join a high-impact team delivering secure, compliant, and scalable Azure solutions for the Centers for Medicare & Medicaid Services (CMS). This is a hands-on engineering role focused on building, automating, and operating Azure Government (GCC High) environments while supporting large-scale migrations and cloud-native modernization of mission-critical healthcare systems. Key Responsibilities • Implement and manage Azure Landing Zones using Enterprise-Scale architecture, Bicep, Terraform, and Azure Policy • Deploy and configure Azure governance frameworks (Management Groups, Azure Policy, Blueprints, Resource Graph, tagging, cost management) • Build and maintain infrastructure-as-code (IaC) repositories using Bicep, Terraform Enterprise/Cloud, ARM templates, and Azure CLI/PowerShell • Execute cloud migration waves (rehost, refactor, replatform) with Azure Migrate, Azure Site Recovery (ASR), Database Migration Service (DMS), and Data Box • Configure Zero-Trust networking and security controls including Azure Firewall, Private Link, Private Endpoints, VNet peering, ExpressRoute, NSGs, and Azure DDoS Protection • Implement and manage identity solutions using Azure Entra ID (formerly AAD), Conditional Access, Privileged Identity Management (PIM), and RBAC • Integrate and operate DevSecOps pipelines with Azure DevOps, GitHub Actions, Azure Pipelines, and security tools (Microsoft Defender for Cloud, Sentinel, Prisma Cloud) • Automate compliance evidence collection and monitoring using Microsoft Defender for Cloud, Azure Policy, and Sentinel playbooks for FedRAMP High and CMS ARS requirements • Support containerized workloads on Azure Kubernetes Service (AKS), Azure Container Apps, and Azure Red Hat OpenShift • Troubleshoot production issues, perform root cause analysis, and optimize performance/cost in GCC High environments • Contribute to Architecture Review Board (ARB) packages, System Security Plans (SSP), diagrams, and ATO documentation • Collaborate daily with cloud architects, security engineers, developers, and CMS stakeholders Required Skills & Experience • 4+ years of hands-on experience building and operating production workloads in Azure (commercial and/or Government) • 2+ years working in Azure Government Community Cloud High (GCC High) • Strong proficiency in Infrastructure as Code: Bicep (required), Terraform (strong plus), ARM • Experience deploying and managing Azure Enterprise-Scale Landing Zones • Solid understanding of Azure networking (VNet, Private Link, Firewall, ExpressRoute, VPN • Hands-on experience with Azure DevOps (Repos, Pipelines, Boards) and GitHub Actions • Familiarity with Microsoft Defender for Cloud, Azure Policy, Sentinel, and Log Analytics • Scripting and automation skills: PowerShell (required), Python or Bash (plus) • U.S. citizenship and ability to obtain and maintain CMS Public Trust clearance Preferred Qualifications • Active Microsoft certifications: • * Azure Administrator Associate (AZ-104) • Azure Solutions Architect Expert (AZ-305) or DevOps Engineer Expert (AZ-400) • Azure Security Engineer Associate (AZ-500) • Experience with CMS MARS-E, CMS ARS, FedRAMP High, or NIST 800-53 control implementation • Prior work on CMS contracts (SPARC, ESIM, EPMO, XLC) • Knowledge of Azure Health Data Services, FHIR APIs, Synapse Analytics, or Databricks • Experience with AKS, Azure Arc, or Azure Stack HCI • Active Public Trust clearance or higher Other Requirements • Must have resided in the U.S. for at least 3 of the last 5 years • Must be eligible for CMS Public Trust clearance • No visa sponsorship available Apply Now Apply Now