The DevOps and Cloud Engineer supports VDOT ITD Tolling modernization by building secure, automated deployment processes and ensuring reliable delivery and update of services. The role standardizes CI/CD, improves availability, and cost efficiency.
Core Responsibilities: DevOps & Cloud Engineering
CI/CD Engineering & Release Automation
Design, build, and maintain CI/CD pipelines in Azure DevOps (YAML and Classic) for microservices and APIs.
Establish reusable pipeline templates, release standards, and guardrails for compliant, repeatable deployments.
Implement secure secrets and key management using Azure Key Vault and managed identities in pipelines.
Automate database deployment workflows (e.g., DACPAC/SQLCMD) and integrate migration steps into releases.
Enable blue/green or automated rollback strategies to minimize downtime and risk.
Environment Consistency & Observability
Standardize provisioning and configuration across Dev/QA/Prod environments; codify configuration baselines.
Build monitoring dashboards and actionable alerts for pipeline and deployment health (App Insights, pipeline logs).
Uphold DevOps best practices tailored to a compliant government environment.
Azure Resource Engineering & Governance
Implement and maintain Azure services and governance standards (e.g., App Services, Function Apps, API Gateways/API Management, AKS) supporting Tolling workloads.
Support identity and access management (e.g., Entra ID SSO and role assignments) following least-privilege principles.
Ensure solutions are fault tolerant and highly available; coordinate change requests and rollback procedures.
Monitoring, Troubleshooting & Reliability
Monitor Azure services and application workloads to ensure uptime and performance; perform diagnostic deep-dives with Azure Monitor and Log Analytics.
Triage production incidents, drive timely resolution, and document root cause findings; participate in operational cycles and maintenance readiness checks.
Compliance, Data Flows & Cost Awareness
Consider PCI or comparable regulatory requirements when evaluating system behavior, logging, and integrations.
Understand end-to-end data flows across tolling systems (e.g., roadway data, financial transactions, reporting) and support optimization of integrations.
Contribute to cloud cost visibility and optimization recommendations; align operational choices with governance and budget goals.
Collaboration & Communication
Partner with architects, developers, DBAs, and engineers to align deployments with secure network and identity configurations; communicate clearly with stakeholders.
Required Qualifications
Hands-on experience with Azure DevOps CI/CD (YAML & Classic).
Azure application deployment engineering (e.g., App Services, Functions, Containers, APIs).
Secure secrets & key management (Azure Key Vault, RBAC, managed identities).
SQL deployment automation integrated with CI/CD.
Logging & observability (App Insights, pipeline logs, dashboards, alerts).
Infrastructure as Code (Terraform, Bicep, or ARM templates).
Scripting & automation (PowerShell and/or Python).
Experience with Azure administration/engineering in production environments.
Desired Qualifications
Experience designing CI/CD standards or DevOps frameworks for microservices.
Containerization & orchestration (Docker, AKS); registry-integrated build and release pipelines.
Governance & compliance automation (Azure Policy, RBAC standards, pipeline guardrails).
Experience with PCI or similar compliance frameworks.
Exposure to cloud cost analysis and optimization in enterprise environments.
| Skill | Required /Desired | Amount | of Experience |
|---|---|---|---|
| Azure DevOps CI/CD (YAML & Classic) | Required | 4 | Years |
| Azure App Services / Functions / APIs / Containers | Required | 3 | Years |
| Secure Secrets & Key Management (Key Vault, RBAC, managed identities) | Required | 3 | Years |
| SQL Deployment Automation (DACPAC, SQLCMD, CI/CD-integrated DB migrations) | Required | 1 | Years |
| Environment Provisioning & Configuration (Dev/QA/Prod standardization) | Required | 3 | Years |
| Logging & Observability (App Insights, pipeline logs, dashboards, alerts) | Required | 3 | Years |
| Infrastructure as Code (Terraform/Bicep/ARM) | Required | 2 | Years |
| Identity & Access (Entra ID), least-privilege IAM | Required | 1 | Years |
| AKS / Containerization (Docker, Kubernetes) | Desired | 1 | Years |
| Governance & Compliance Automation (Azure Policy, RBAC, pipeline guardrails) | Desired | 1 | Years |
| PCI or similar compliance frameworks | Required | 1 | Years |
| Cloud Cost Analysis & Optimization | Desired | 1 | Years |
| No. | Question |
|---|---|
| Question1 | Commonwealth of Virginia security policies prohibit the use of offshore IT contractors. Do you attest to the fact that your candidate will physically reside within the US for the duration of the assignment? |
| Question2 | What is your candidate s email address? |
| Location | NULL, NULL |
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesImprove your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Resume Builder