Senior Azure Systems Engineer (GCC High / CMMC)

ERG is a research and consulting firm that provides a wide range of support to federal, state, and commercial clients. ERG offers multidisciplinary teams with nationally recognized skills in engineering, science, economics, public health, informational technology, and communications. We hire people with the best minds and then provide them with a vibrant and flexible environment in which to develop their careers. The qualified individual must be highly motivated with the skills to prioritize, perform, and communicate effectively in a fast-paced environment. ERG is seeking a highly skilled Senior Azure Systems Engineer with a minimum of seven years of cloud systems engineering experience to support and enhance our mature, enterprise-level cloud environment with a strong focus on Azure and Office 365. This role requires at least three years of hands-on experience operating within GCC High environments or supporting infrastructures aligned with NIST SP 800-171 (CMMC Level 2), ensuring all solutions meet rigorous security, compliance, and operational standards. In this role, you will contribute to the full lifecycle of our Azure infrastructure — including analysis, architecture, planning, implementation, deployment, optimization, and troubleshooting. You will play a critical part in maintaining a secure, resilient, and scalable cloud ecosystem that supports mission-driven work. The ideal candidate is a collaborative problem-solver who brings both technical depth and a proactive mindset. They are energized by complex challenges, communicate effectively with clients and colleagues, and demonstrate a continuous desire to learn, innovate, and stay ahead of evolving cloud technologies. Job Description:

• Designing and deploying Azure infrastructure components, including compute, storage, networking, identity, governance, and managing hybrid Office365 environments
• Architect and configure virtual networks (VNets), Network security groups (NSGs), Express Route, and private endpoints in Azure
• Create and maintain architecture diagrams
• Propose environmental improvements or impacts, when needed, using diagrams and risk management principles
• Managing Microsoft identity management tools like Active Directory, Azure AD, AD Connect, Duo, and Office 365
• Supporting Azure firewall and Windows Virtual Desktop (WVD) environments
• Maintain infrastructure that meets or exceeds CMMC Level 2 requirements, including proper handling of CUI
• Optimizing Windows Virtual Desktop (WVD) for cost, performance, rightsizing, reservations, savings plans, and security
• Writing and updating automation scripts using PowerShell or similar languages
• Understanding and configuring Azure Sentinel, including SIEM rules, correlations, and dashboards
• Setting up data loss prevention (DLP) and Azure Information Protection (AIP) policies
• Creating and maintaining documentation, evidence, procedures, and training to support third-party CMMC assessments and audits
• Monitoring, troubleshooting, and improving cloud computing performance
• Offering technical and analytical assistance to diagnose network issues and provide users with solutions, participating in the change management meeting and stakeholder meetings
• Familiarity with federation and single sign-on (SSO) solutions using Duo and user provisioning

Qualifications and Skills:

• Minimum of Seven (7) years of Azure cloud Administration experience
• A BS in information technology is strongly preferred
• Three years of experience that demonstrates deep knowledge of NIST 800-171/CMMC Level 2 security frameworks
• Microsoft certification: Azure Administrator Associate or Azure Security Engineer Associate
• Must be a U.S. citizen
• Additional Skills and Knowledge: Expertise in setting up and configuring Windows Terminal Services/remote desktop
• Security clearance (current or recently expired)
• Certified Security Plus, Network Plus, or CMMC Certified Professional
• Experience with SIEM tools such as Microsoft Sentinel or CrowdStrike
• Strong grasp of security concepts and best practices
• Familiar with CrowdStrike, Qualys, and Microsoft Sentinel

ERG offers competitive salaries and excellent benefits, including health and dental insurance, life insurance, long-term disability, educational benefits, FSAs, a generous 401k plan, profit sharing, an EAP, 11-20 paid vacation days per year, 10 paid holidays per year, 56 hours or more of sick leave (based on the state you work in) per year (pro-rated for part-time) and more. The salary range for all positions depends on the years and type of experience. ERG is an equal opportunity employer and complies with all applicable EEOC regulations. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual preference, national origin, disability, or status as a protected veteran. Please be aware, the only authentic corporate domain for ERG is https://www.erg.com. ERG may, on occasion, screen applicants via telephone or video interviews via Skype, Teams, GoToMeeting, or another type of video platform. However, any candidate extended a job offer might be asked to meet in person with an ERG employee before providing confidential personal information associated with new employment. If you’re a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access ERG’s online application process as a result of your disability. To request accommodation, please contact Human Resources via email at [email protected] or call (781) 674-7293. ERG fosters a friendly, flexible work environment. ERGers are dedicated to serving clients who are committed to making the world a better place. We promote and recognize principles of fairness and respect in the work we do, the partnerships we foster, and the culture we value both within and outside of our organization.