Job Description & Details
This is a heavy-duty, highly specialized cloud engineering contract focused entirely on migrating and modernizing an ITAR-regulated PLM platform inside Azure Government GCC High. You will be knee-deep in tenant-to-tenant subscription transfers, identity cutovers, and redesigning data pipelines ahead of the Azure SQL Data Sync retirement. If you don't know the quirks of usgovcloudapi.net endpoints or how to maintain strict FedRAMP High and NIST 800-171 controls while untangling legacy architecture, this role will eat you alive.
What You'll Actually Be Doing
Your day-to-day will be a mix of high-stakes infrastructure migration, network wrangling, and compliance enforcement. You'll spend your mornings coordinating ExpressRoute requests, validating Network Security Groups, and managing cross-tenant RBAC policies. By the afternoon, you'll be architecting a replacement for Azure SQL Data Sync using Transactional Replication or Azure Data Factory, all while making sure an IIS-hosted .NET application (Omnify Empower) stays online for 850 defense-supply-chain users. You're driving the cutover runbooks from Dev and Test all the way to a high-stress Production deployment under strict timeline pressure.
The Core Tech Stack
You need absolute fluency in Azure Government (GCC High) environments, Windows Server administration, and Azure SQL databases. Beyond basic provisioning, the real battle scars come from mastering hybrid networking (VNets, VPN Gateway, Private Link) and identity management (Active Directory, LDAP, Entra ID Government). Because this involves migrating off Azure SQL Data Sync, deep database replication knowledge paired with Infrastructure-as-Code tooling like PowerShell, Azure CLI, and Terraform or Bicep will be your primary weapons to pull this off without triggering a compliance violation.
Interview Expectations
The hiring panel is going to drill down straight into your past tenant-to-tenant migration battle stories. Expect them to ask you how you would handle an in-flight Azure subscription ownership transfer within GCC High without breaking existing Private Endpoints, NSGs, and ExpressRoute configurations. They want to hear about your specific troubleshooting methodology when cross-tenant Azure AD/Entra ID trust relationships and LDAP domain masks fail mid-cutover. They are secretly looking for someone who doesn't just push buttons in the Azure Portal, but deeply understands the underlying networking and compliance boundaries of the US Gov cloud.
Application Advice
To get past the ATS, your resume needs to explicitly feature exact matches for terms like 'Azure Government', 'GCC High', 'ITAR', 'NIST SP 800-171', and 'Azure SQL Data Sync'. Don't just list generic cloud architecture skills; weave a narrative around your hands-on experience with cross-tenant migrations, hybrid networking, and managing Windows/IIS workloads inside sovereign clouds. Make sure your U.S. citizenship status is clearly visible upfront, as it's a hard requirement to touch this ITAR-controlled data.