Sr. Cloud Infrastructure Analyst- Hybrid

Mission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Site (NNSS) for the U.S. National Nuclear Security Administration (NNSA).  Our MISSION is to help ensure the security of the United States and its allies by providing high-hazard experimentation and incident response capabilities through operations, engineering, education, field, and integration services and by acting as environmental stewards to the Site’s Cold War legacy.  Our VISION is to be the user site of choice for large-scale, high-hazard, national security experimentation, with premier facilities and capabilities below ground, on the ground, and in the air. (See NNSS.gov for our unique capabilities.) Our 2,750+ professional, craft, and support employees are called upon to innovate, collaborate, and deliver on some of the more difficult nuclear security challenges facing the world today.  

• MSTS offers our full-time employees highly competitive salaries and benefits packages including medical, dental, and vision; both a pension and a 401k; paid time off and 96 hours of paid holidays; relocation (if located more than 75 miles from work location); tuition assistance and reimbursement; and more.  
• MSTS is a limited liability company consisting of Honeywell International Inc. (Honeywell), Jacobs Engineering Group Inc. (Jacobs), and HII Nuclear Inc.

The Information Technology Directorate is looking for a high-performing individual to join our team as a Senior Cloud Infrastructure Analyst. 

Key Responsibilities

• Implement cloud computing architecture solutions (with a focus on Azure) that address cloud security and compliance fundamentals, deployment automation and elastic sizing of environments and multi-tenant implementations.
• Create migration plans and migrate on-prem resources and workloads to Azure using infrastructure as code, and other methods, including PowerShell and Azure Command-Line Interface (CLI).
• Configure and administer Entra ID (Azure AD), identity and access management (IAM), RBAC, SSO, Security/Policies/Resource Governing/Azure Key Vault.
• Troubleshoot and resolve complex technical issues related to cloud functionality, M365, AVD, VMs (Windows, Linux), route tables, custom images, containers, performance, policies, integration and access.
• Enable DevOps development activities and complex development tasks that will involve working with tools such as Docker, Kafka, and container management systems. Build and maintain CI/CD pipelines to support automated deployment of infrastructure.
• Lead pre-production readiness efforts, POCs, lab testing and knowledge transfer. Provide architectural design diagrams and documentation and assess how to implement technologies into the existing infrastructure.
• Provide expertise in VMware virtualization technologies, including vSphere and vCenter.
• Act as a subject matter expert for Cloud Infrastructure Architecture and Cloud Adoption Frameworks, Well-Architected Framework as it relates to compute, network, storage, and native SaaS/PaaS offerings.
• Maintain overall industry knowledge on the latest trends and technology and demonstrate forward thinking around how technology can support the organizational direction.
• Perform other duties assigned by Management.

• Bachelor’s degree in a computer related field or equivalent training and experience with at least 5 years of related experience.
• Strong experience with adoption of CAF (Cloud Adoption Framework), adhering to principles of WAF (Well Architecture Framework) and demonstrated ability of Migrating applications to cloud using AMPP and other methodologies.
• Ability to design and manage Azure based and hybrid networking solutions across multiple sites, locations, subscriptions, and virtual networks.
• Ability to design and manage Microsoft 365 & collaboration Infrastructure - Exchange Online, MS Teams, OneDrive, SharePoint Online, Intune, & other Office 365 services.
• Expert in Azure governance, Express Route, Site Recovery, S2S VPN devices, Azure Monitor, RBAC, virtual network and subscription peering.
• Ability to create scripts in PowerShell, VBS, Python, Ansible and similar languages.
• Infrastructure automation through Terraform, Ansible, Python, source control tools (GIT/GitHub/GitLab), Serverless Functions.
• Working level knowledge of, networking, virtualization, SAN, and related technologies.
• Deep understanding of Active Directory architecture, Sites & Services, DNS, DHCP, and cloud services integration.
• A solid understanding of most of the following
  • Networking - WAF (Web Application Firewall), NSGs (Network Security Groups), Azure Firewall, Azure DNS, Hybrid DNS.
  • Identity and access - Azure Key Vault, Managed Identities, RBAC
  • Entra ID - Managed Identit