Microsoft Azure Systems Engineer

Company Description

Check below to see if you have what is needed for this opportunity, and if so, make an application asap.

We're a tech company that was first on the ground in the fight against Ubiquitous Technical Surveillance. We help our government and enterprise customers solve a big problem they sometimes don't even know they have. To become leaders in this space, we've relied heavily on curiosity, creativity, and flexibility. We iterate until we get things right and innovate to get there faster.

But enough about us. What's in it for you?

We work hard and do fun things.

Apart from a constantly growing list of fascinating challenges to solve, Ridgeline offers a solid work-life balance, flexible remote work options, and a culture that values teamwork over competition. At Ridgeline, you will work with the most talented software developers, systems engineers, and subject matter experts to change how big enterprises and the U.S. Government manage their digital signatures.

Job Description

This is a deeply hands-on engineering role focused on building, configuring, and troubleshooting Azure infrastructure on a daily basis. We’re seeking engineers who have personally architected and operated production Azure environments and who take pride in owning the full lifecycle — from design through deployment and ongoing operations.

The ideal candidate brings real-world, production experience and enjoys rolling up their sleeves to deliver reliable, secure, and scalable cloud solutions.

What you will do:

Cloud Architecture & Engineering

You will design and implement scalable, secure Azure infrastructure (IaaS, PaaS, and hybrid)
You will deploy and manage Azure Virtual Networks, NSGs, Azure Firewall, and private endpoints
You will architect and support hybrid connectivity (VPN, Express Route)
You will implement high availability and disaster recovery solutions

Systems & Identity

You will own the deployment, configuration, patching, and operational health of Windows workloads running in Azure
You will integrate Azure AD / Entra  enterprise identity systems
You will implement RBAC, Conditional Access, and least-privilege access models
You will support Microsoft 365 and Azure AD integrations where required

Automation & Infrastructure as Code

You will build and maintain infrastructure using Terraform (preferred), ARM/Bicep templates, Power Shell, and Azure CLI
You will ensure deployments are idempotent and repeatable — manual deployments are not acceptable
You will contribute to CI/CD pipelines for infrastructure delivery

Security & Compliance

You will implement Azure Security Center / Defender for Cloud controls
You will configure logging and monitoring (Azure Monitor, Log Analytics)
You will support compliance frameworks (e.g., NIST, RMF, CMMC as applicable)
You will conduct vulnerability remediation and hardening

Monitoring & Operations

You will implement alerting and performance monitoring
You will own backup and recovery strategy (Azure Backup, Site Recovery)
You will participate in incident response and root cause analysis — and personally drive remediation
You will document architecture and operational runbooks

What You’ll Accomplish in Your First Six Months

This role is about maturing and optimizing an already functional Azure environment into a fully standardized, enterprise-ready platform — while keeping delivery moving at full speed.

Months 0–2:
Understand and Stabilize

Build a deep understanding of the current Azure architecture, deployment pipelines, networking, and security model.
Identify opportunities to simplify, standardize, and reduce operational risk.
Ensure CI/CD pipelines continue operating smoothly and reliably.
Begin developing clear, structured documentation of infrastructure, dependencies, and operational workflows.
Establish a practical, prioritized roadmap for platform improvements aligned to business objectives.

Months 2–4:
Standardize and Strengthen

Introduce infrastructure-as-code and repeatable deployment patterns where needed to increase consistency and reliability.
Refine identity, access controls, and network architecture to align with enterprise-grade best practices.
Implement consistent naming, tagging, and…