Azure AI Cloud Engineer – Enterprise Platforms & Data Systems

About Ariana.Digital

Ariana.Digital is a team of entrepreneurial, energetic, and innovative digital professionals. We bring broad experience across industries and the digital ecosystem, helping organizations drive impact and sustainable growth. Our team thrives on diversity of backgrounds, skills, and experiences, and we value those who deliver tactical excellence along with a long-term strategic vision for our clients.

AI-video interview - required; W2 only ; 9 month extendible contract; remote with only when required travel.

What We Offer:

Flexible working arrangements

Resources and support for continuous growth

The Azure Full-Stack Engineer is the hands-on implementation owner for the application/API and public sector client's Azure integration tier. The role converts approved UX, branching, data, security, privacy, accessibility, and interface requirements into a deployable application while preserving health sector client's control of the hosting boundary, identity, data, and authorization.

Responsibilities

• Application and API engineering

• Implement secure server-side APIs, validation, error handling, throttling, and output encoding.

• Maintain typed contracts with the frontend and repeat all integrity-relevant browser checks on the server.

• Prevent unauthenticated or unauthorized access to sensitive data and administrative functions.

• Systems data and integration

• Implement the canonical report model, client-approved data dictionary, branch rules, controlled vocabularies, and interface mappings.

• Build the adapter to the Government-identified client site interface with idempotency, retries, reconciliation, correlation identifiers, receipts, and operational failure handling.

• Keep client-supplied identifiers and state from bypassing server authorization or validation.

• Public sector client's Azure implementation

• Deploy only to client-approved Azure services and regions using reproducible infrastructure/configuration.

• Implement environment separation, managed identities, approved secrets management, Entra/PIV integration, least privilege, encryption, network controls, and CDC-directed logging.

• Do not hardcode subscriptions, tenants, resource identifiers, secrets, endpoints, or feature states in application logic.

• Experience with PII/PHI/HIPA/FedRamp/FISMA and working with public sector implementations.

• Document and upload services

• Enforce allowed categories, extensions, MIME/signature checks, size/count limits, malware scanning, quarantine, status handling, storage instructions, and retention controls.

• Isolate upload processing from final report submission and avoid unnecessary PHI/PII in logs.

• If separately authorized and funded, integrate Azure Document Intelligence behind its own feature flag and approved data flow. Extracted values remain suggestions with provenance/confidence, require reporter action, and stay reversible. No clinical narrative generation or automatic submission is permitted.

• Content and administrative services

• Implement authenticated draft/review/publish controls for CDC-managed guidance, tooltips, FAQs, labels, controlled lists, surveys, and configuration.

• Preserve attributable change history, versioning, rollback, and separation between editor, publisher, and developer privileges.

• DevSecOps and operations

• Build unit, API, contract, integration, upload-policy, security, performance, recovery, and regression tests.

• Support dependency controls, vulnerability remediation, CI/CD gates, deployment approval, rollback, observability, incident evidence preservation, and production troubleshooting under our health sector client's direction.

• Maintain current source, build/configuration artifacts, architecture/data-flow documentation, interface specifications, runbooks, release evidence, and transition materials.

Required capability baseline

• Microsoft AI Cloud

• Production full-stack engineering using modern web/API technologies. - Microsoft AI Foundry

• Hands-on Azure application deployment, identity, configuration, monitoring, and secure service integration.

• REST/structured-interface design, server-side validation, asynchronous processing, and transactional/idempotent integration patterns.

• Infrastructure/configuration as code, CI/CD, automated testing, observability, and rollback/recovery.

• Secure handling of PII/PHI, file uploads, secrets, logs, and least-privilege authorization.

• Ability to work from Government-controlled schemas, interfaces, cloud services, security requirements, and approval gates without inventing unsupported environment details.

• Clear technical documentation and effective collaboration with UX, frontend, accessibility, security/privacy, program, and Government platform teams.

Primary delivery evidence

• Approved technical design and data-flow/interface documentation.

• Working Alpha, integrated Beta, and production-ready Final backend/API and Azure configuration.

• Passing server-validation, API, adapter, upload, identity/authorization, security, performance, recovery, and regression evidence.

• Reproducible build/deployment and tested rollback.

• Current logs/monitoring definitions, operational runbooks, source/configuration transfer, and transition evidence.

Role boundaries

• Health sector client selects and authorizes the production services, interfaces, identity patterns, data controls, retention, and deployment boundary.

• The Contracting Officer controls scope and price changes.

• The engineer does not make clinical, causality, seriousness, report-validity, records, privacy, or authorization decisions.

• Runtime AI and Azure Document Intelligence remain disabled unless separately scoped, priced, documented, tested, and approved.

Job Type: Contract

Pay: $90,000.00 - $125,000.00 per year

Benefits:

• Professional development assistance

Application Question(s):

• Are you will to work with AI-led interviewing and recruitment tools?

Work Location: Remote