Senior Systems Engineer (Azure & On-Premises Infrastructure) - Information Technology Jobs Near Me

We cannot sponsor this role or Work with Third Parties

Role: Azure Systems Engineer
Location: Hybrid- McLean VA.
Duration: Contract or Direct Hire
Compensation: Based on Experience

Senior Systems Engineer — Azure & Hybrid Infrastructure

Summary

Capstone IT is helping our client find a Senior Systems Engineer who will design, deploy, integrate, and support secure Microsoft Azure and on-premises infrastructure for mission-critical systems. This is a hands-on engineering position focused on building secure, scalable, and highly available environments while maintaining enterprise identity, networking, and security infrastructure. The engineer will work across development, testing, and production environments, troubleshoot complex technical issues, and support systems operating under strict government and defense security requirements.

Top 4 Must-Have Skills

1. Microsoft Azure Cloud Engineering: Designing, deploying, securing, and maintaining enterprise Azure infrastructure, including networking, virtual machines, security services, and Azure Landing Zones.
2. Windows Server & Hybrid Infrastructure: Managing enterprise Windows Server environments, virtualization, on-premises systems, and hybrid cloud connectivity.
3. Active Directory & Microsoft Entra ID: Enterprise identity management, directory services, authentication, RBAC, and integration between cloud and on-premises environments.
4. PowerShell Scripting: Automating infrastructure administration, system configuration, deployment, and operational tasks.

Responsibilities

Azure & Infrastructure Engineering

• Design, deploy, and maintain secure Microsoft Azure and on-premises environments.
• Configure and support Azure Virtual Machines, Storage, Key Vault, Monitor, Firewall, Front Door, and Application Gateway.
• Implement secure Azure Landing Zones and support cloud migrations.
• Administer Windows Server, Active Directory, DNS, DHCP, PKI, and virtualization platforms.
• Support infrastructure across development, test, staging, and production environments.

Security & Identity Management

• Implement Zero Trust security principles and defense-in-depth controls.
• Configure Microsoft Entra ID, privileged access controls, and RBAC.
• Support PKI, certificates, smart cards, HSMs, and secure authentication.
• Perform security assessments, vulnerability remediation, system hardening, and compliance validation.
• Support incident response and security investigations.

Systems Integration

• Integrate Active Directory, LDAP, PKI, SCCM, Splunk, SQL Server, and third-party systems.
• Troubleshoot issues involving infrastructure, authentication, connectivity, and security.
• Support system testing, performance optimization, and disaster recovery.

Technical Support & Documentation

• Provide Tier III engineering support.
• Create architecture diagrams, runbooks, deployment guides, and technical documentation.
• Support system implementations and ongoing operations.

Qualifications

Required

• 8+ years of professional experience in systems, infrastructure, or cloud engineering.
• 5+ years of hands-on Microsoft Azure engineering experience.
• Strong experience supporting hybrid cloud and on-premises infrastructure.
• Expertise with Azure, Windows Server, Active Directory, Microsoft Entra ID, and PowerShell.
• Strong understanding of networking, infrastructure security, and secure system design.
• Experience supporting government, defense, or similarly regulated environments.
• Active Secret security clearance.
• Willingness and ability to travel internationally.

Nice to Have

• Active Top Secret clearance.
• Identity and Access Management (IAM) platforms.
• PKI, certificate lifecycle management, and HSMs.
• Azure Landing Zones and Microsoft Defender.
• Splunk and DevSecOps practices.
• Experience supporting classified or mission-critical systems.

2. Role Context – This Company

What this engineer will do for the Capstone IT client

This position supports an organization responsible for deploying and sustaining secure, mission-critical technology environments.

The engineer will be responsible for ensuring systems operate reliably across both Azure cloud infrastructure and traditional on-premises environments.

Based on the job description, the work centers on four areas:

• Secure infrastructure deployment: Building and integrating enterprise systems across multiple environments while meeting government or defense security requirements.
• Hybrid identity and connectivity: Ensuring Azure, Windows Server, Active Directory, Entra ID, and authentication services work together securely.
• Security engineering: Applying access controls, certificate-based authentication, vulnerability remediation, and infrastructure hardening.
• Operational continuity: Providing senior-level troubleshooting, Tier III support, documentation, testing, and disaster recovery support.

What makes this position different: It requires more than routine Azure administration. The engineer must understand how cloud infrastructure, Windows systems, identity services, networking, and security controls function together in highly regulated environments.

This is primarily a hands-on infrastructure engineering role rather than an architecture-only position or a general cloud support job.

Please send your resume and salary requirements for immediate consideration!

Capstone Consulting is an EEO employer.

Capstone website:

Like us on Facebook:

Follow us on Twitter:

Connect with us on LinkedIn: