{"id":4031595,"url":"https://alion.io/job/icf-azure-platform-engineer","title":"Azure Platform Engineer","company":{"id":2632,"name":"ICF","domain":"icf.com","url":"https://alion.io/company/icf","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":97,"open_postings":20,"ghost_share":0,"stale_share":0,"repost_share":0.2,"time_to_fill_p50_days":25,"computed_at":"2026-11-10T06:52:35Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Reston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":108006,"max":183610,"currency":"USD","period":"year","gross":null,"usd_annual":183610},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Azure SQL Database","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"Databricks","optional":false},{"name":"DNS","optional":false},{"name":"FedRAMP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Fabric","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"C#","optional":true},{"name":"Copilot","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-11-10T18:49:24Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T18:49:24Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"We are seeking a full-time Azure Platform Engineer to help design, automate, secure, and operate a large-scale enterprise Azure environment. This role is responsible for the day-to-day administration, governance, and evolution of a multi-subscription Azure platform supporting mission-critical workloads.\nYou will own real infrastructure and operations, building Infrastructure as Code, automation solutions, CI/CD pipelines, security controls, and governance frameworks that keep the platform secure, compliant, cost-efficient, and resilient. This is a hands-on engineering role with deep operational ownership where you will take solutions from architecture through production support.\nThis position is based in the Reston, VA / Rockville, MD area, a hybrid work arrangement with occasional on-site collaboration.\nWork Schedule & Availability\nThis role supports production systems, participates in a shared on-call rotation, and is expected to support after-hours and weekend maintenance windows when required. The engineer must be able to plan, execute, and support production changes and respond to production incidents during assigned on-call periods.\nWhat You'll Do\nAzure Platform Administration & Operations\nAdminister enterprise Azure environments across multiple subscriptions and management groups.\nManage Azure Landing Zones, Management Groups, Azure Policy, role-based access control (RBAC), and subscription lifecycle processes.\nGovern Azure resources to support security, compliance, and operational consistency.\nInfrastructure as Code (IaC)\nDesign, deploy, and maintain cloud infrastructure using Terraform, Bicep, ARM templates, or similar IaC tools.\nManage infrastructure deployments through governed CI/CD pipelines rather than manual portal-based changes.\nDevelop reusable modules and templates that enforce enterprise standards.\nAutomation & Platform Engineering\nBuild automation that reduces operational overhead and enables controlled self-service capabilities.\nDevelop Azure Automation runbooks, Azure Functions, Logic Apps, and PowerShell-based automation.\nAutomate governance, compliance validation, resource provisioning, drift detection, and remediation.\nDevOps & CI/CD\nDesign and maintain GitHub Actions and Azure DevOps deployment pipelines.\nImplement environment promotion strategies across development, test, staging, and production.\nBuild secure deployment workflows with validation, approvals, automated testing, and notifications.\nAzure Security & Governance\nImplement and maintain controls using Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Key Vault, and Microsoft Entra ID.\nDesign and enforce identity, access management, privileged access, and least-privilege processes.\nSupport security assessments, vulnerability remediation, and compliance initiatives.\nNetworking & Connectivity\nDesign, deploy, and troubleshoot Virtual Networks, Private Endpoints, ExpressRoute, VPN Gateway, Azure Firewall, NSGs, Application Gateway, and Web Application Firewall.\nSupport hybrid connectivity, routing, DNS, segmentation, and secure application access patterns.\nOperational Ownership & Incident Response\nServe as an escalation point for complex production issues.\nPerform incident response, root cause analysis, and post-incident corrective actions.\nOwn problems end to end across infrastructure, networking, identity, and platform services.\nCompliance & Audit Readiness\nSupport NIST 800-53, FedRAMP, SOX, and other applicable compliance initiatives.\nMaintain evidence collection, control documentation, and audit readiness.\nParticipate in code reviews, design reviews, change management (CAB), and operational documentation.\nAzure Technologies You'll Work With\nAzure Platform: Azure Landing Zones, Management Groups, Azure Policy, Azure Resource Manager, Azure Monitor, and Log Analytics\nIdentity & Security: Microsoft Entra ID, Privileged Identity Management (PIM), Microsoft Defender for Cloud, Microsoft Sentinel, Key Vault, and Conditional Access\nNetworking: Virtual Networks, Private Endpoints, Azure Firewall, ExpressRoute, VPN Gateway, Application Gateway, and Web Application Firewall\nDevOps & Automation: GitHub Actions, Azure DevOps, Terraform, Bicep, ARM templates, Azure Automation, PowerShell, and Azure CLI\nData & Platform Services: Azure Storage, Azure SQL, App Service, Function Apps, Azure Kubernetes Service, Azure Databricks, and Microsoft Fabric\nEssential Qualifications\nU.S. citizenship required by federal contracts\nBachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.\nFive or more years of hands-on Azure infrastructure or platform administration experience.\n\nAdditional Qualifications\nExperience managing enterprise Azure environments across multiple subscriptions and environments.\nStrong understanding of networking, systems administration, cloud architecture, and identity management.\nPractical experience with Infrastructure as Code using Terraform, Bicep, ARM templates, or comparable tools.\nExperience designing or operating CI/CD pipelines using GitHub Actions or Azure DevOps.\nProven ability to diagnose, resolve, document, and prevent recurrence of production issues.\nStrong communication and collaboration skills in a small, high-ownership team.\nAvailability for a shared on-call rotation and after-hours or weekend change-window support.\nPreferred Qualifications\nMicrosoft Certified: Azure Administrator Associate (AZ-104).\nMicrosoft Certified: Azure Solutions Architect Expert (AZ-305).\nMicrosoft Certified: DevOps Engineer Expert (AZ-400).\nMicrosoft Certified: Azure Security Engineer Associate (AZ-500).\nDemonstrated ability to use AI-assisted tools, such as Microsoft Copilot or GitHub Copilot, to improve engineering productivity, scripting, documentation, troubleshooting, and operational analysis, while applying appropriate human review and maintaining security, privacy, and compliance standards.\nExperience with enterprise Azure Landing Zone implementations.\nExperience with Microsoft Defender XDR, Microsoft Defender for Cloud, or Microsoft Sentinel.\nExperience operating in compliance-driven environments using NIST 800-53, FedRAMP, SOX, or similar frameworks.\nAutomation experience with PowerShell, Python, or C#.\nExperience supporting hybrid Azure and on-premises environments.\nExperience with Azure Databricks, Microsoft Fabric, Kubernetes, or advanced data-platform services.\nWhy Join Us?\nOwn and influence an enterprise-scale Azure platform with meaningful operational responsibility.\nWork across Azure governance, platform engineering, security, automation, reliability, and cloud transformation.\nBuild modern cloud operating models using Infrastructure as Code and DevSecOps practices.\nJoin a small, highly skilled team where engineers have direct impact on architecture and operational decisions.\nWork in a flexible hybrid environment with opportunities to grow into senior engineering and cloud architecture leadership roles.\nWorking at ICF\nICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy.\nWe will consider for employment qualified applicants with arrest and conviction records.\nWork Authorization and Sponsorship\nAll candidates must be authorized to work in the United States. This position is not eligible for new H-1B visa sponsorship by ICF. Candidates who currently hold valid work authorization may be considered for a change of employer petition, subject to company policy and applicable immigration requirements.\nReasonable Accommodations\nReasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email  and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.\nRead more about workplace discrimination rights or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act.\nBot and Third-Party Applications\nPlease note that this application must be submitted directly by the applicant for consideration. Failure to do so may result in the application being excluded for consideration. Applicants needing an accommodation for disability or religious purposes in connection with the application process should contact  for assistance.\nCandidate AI Usage Policy\nAt ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted. This policy is in place to maintain the integrity and authenticity of the interview process.\nHowever, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at . We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.\nPay Range \nThere are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.\nThe pay range for this position based on full-time employment is:\n$108,006.00 - $183,610.00Reston, VA (VA30)","description_format":"text","description_chars":10323,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Energy Efficiency","Digital Government","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-11-10T18:49:24Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 58 · green card filings: 1","filings_12m":58,"filings_prev_12m":29,"green_card_filings_12m":1,"median_offered_wage_usd":122839,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":30}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":25,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-10T19:51:08Z"},"pay":{"stated_usd_annual":183610,"is_top_pay":true},"html_url":"https://alion.io/job/icf-azure-platform-engineer","json_url":"https://alion.io/job/icf-azure-platform-engineer.json","meta":{"generated_at":"2026-11-10T19:51:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11577,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2632},"rest":"https://alion.io/mcp/rest/get_company?id=2632"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ficf-azure-platform-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ficf-azure-platform-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ficf-azure-platform-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/icf-azure-platform-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ficf-azure-platform-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4031595}},{"tool":"search_jobs","arguments":{"company":"icf.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4031595},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}