THE AGENCY
The Department of City Planning (DCP) plans for the strategic growth and development of the City through ground-up planning with communities, the development of land use policies and zoning regulations applicable citywide and sharing its perspectives on growth and community needs with sister agencies in collaboration with the Office of Management and Budget (OMB).

DCP is a great place to work – cultivating intellectual inspiration, professional development, and creativity. Visit our website at www.nyc.gov/planning to access the full listing of job opportunities and to learn more about the agency’s services.

THE DIVISION
Information Technology Division’s (ITD) vision is to become a dynamic and vibrant technology delivery organization of the New York City government that leads business transformations and technology innovations to enable citizen-centric smart urban planning, while promoting a culture of collaboration, talent development, and equity. ITD is responsible for developing technology solutions to support agency needs and citywide asks, including City Charter mandates. This includes grant funding requirements, citywide geospatial services, maintaining systems infrastructure and endpoint assets to optimize operational efficiency, promote innovation, and collaborate with other city agencies to enhance service accessibility to citizens. The division provides necessary computing infrastructure and productivity-enhancing technology tools in a hybrid mode (on premise and in the cloud), to support DCP’s interdisciplinary staff across five boroughs, including planners, urban designers, project managers, and executive management. The division is comprised of experienced and talented software engineers, geographic specialists, service engineers, and technology leaders who specialize in managing system infrastructure, cyber security, geospatial data engineering, application services, and portfolio management.

Within ITD, the Infrastructure and Security Management (ISM) unit is responsible for design, configuration, and maintenance of on-premise and cloud network infrastructure; physical and virtual server management, backup and recovery, security and access control, database administration, capacity planning, and incident response, facilitating the agency’s computing needs and provisioning the infrastructure assets for the optimal of internal and external clients, systems, and applications. Staffed by a team of network engineers and infrastructure specialists, the ISM unit closely works with city’s Office of Technology and Innovation (OTI) on identity and access management, compliance and governance, and security best practices.

THE ROLE
ITD’s Infrastructure and Security Management (ISM) unit is seeking a Azure Cloud Engineer with expertise in on-premise to cloud migration strategies and comprehensive network/security management to lead design, execution, and the optimization of complex cloud migrations while ensuring the security and efficiency of Azure-base network infrastructure which plays a pivotal role in shaping DCP’s cloud strategy to deliver high-quality solutions, and ensure the reliability and scalability of cloud-based infrastructure.

Under supervision and general direction, with considerable latitude for the exercise of independent judgment, the Cloud Engineer’s responsibilities include, but may not be limited to:
- Lead the end-to-end migration of on-premise systems and applications to Azure, including assessment, planning, execution, and post-migration validation.
- Architect and implement secure and scalable Azure solutions, considering network design, data flow, and security controls to meet business requirements.
- Collaborate with stakeholders to define migration goals, assess technical feasibility, and design migration strategies that minimize downtime and risk.
- Develop and execute migration plans, including data transfer, application refactoring, and resource provisioning, while adhering to project timelines and budgets.
- Oversee the network architecture in Azure, including virtual networks, subnets, gateways, and connectivity to on-premise environments.
- Implement robust security measures, such as Azure Firewall, Network Security Groups (NSGs), and Azure Active Directory, to safeguard Azure resources.
- Monitor and optimize network performance, identifying and addressing bottlenecks and latency issues.
- Collaborate with cybersecurity teams to ensure compliance with industry standards and regulatory requirements, implementing encryption and access controls.
- Develop and maintain network documentation, architecture diagrams, and migration playbooks.
- Lead troubleshooting efforts for network-related issues, providing root cause analysis and implementing corrective actions.
- Mentor junior engineers, sharing knowledge and best practices related to Azure migrations and network management.
- Stay current with Azure updates, network technologies, and security trends, integrating them into the organization's cloud strategy.
- Collaborate with cross-functional teams to integrate cloud solutions into the overall IT environment, ensuring seamless operation and data flow.

(1) A baccalaureate degree from an accredited college, including or supplemented by twenty-four (24) semester credits in computer science or a related computer field and two (2) years of satisfactory full-time software experience in designing, programming, debugging, maintaining, implementing, and enhancing computer software applications, systems programming, systems analysis and design, data communication software, or database design and programming, including one year in a project leader capacity or as a major contributor on a complex project; or
(2) A four-year high school diploma or its educational equivalent and six (6) years of full-time satisfactory software experience as described in “1" above, including one year in a project leader capacity or as a major contributor on a complex project; or
(3) A satisfactory combination of education and experience that is equivalent to (1) or (2) above. College education may be substituted for up to two years of the required experience in (2) above on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. A masters degree in computer science or a related computer field may be substituted for one year of the required experience in (1) or (2) above. However, all candidates must have a four year high school diploma or its educational equivalent, plus at least one (1) year of satisfactory full-time software experience in a project leader capacity or as a major contributor on a complex project.
NOTE: In order to have your experience accepted as Project Leader or Major Contributor experience, you must explain in detail how your experience qualifies you as a project leader or as a major contributor. Experience in computer operations, technical support, quality assurance (QA), hardware installation, help desk, or as an end user will not be accepted for meeting the minimum qualification
requirements.
Special Note
To be eligible for placement in Assignment Level IV, in addition to the Qualification Requirements stated above, individuals must have one year of satisfactory experience in a project leader capacity or as a major contributor on a complex project in data administration, database management systems, operating systems, data communications systems, capacity planning, and/or on-line applications programming.

- Bachelor's degree in Computer Science, Information Technology, or a related field. Master's degree is a plus. - Proven experience (5+ years) as an Azure Cloud Engineer, with a strong focus on on-premise to cloud migrations, network architecture, and security management. - Microsoft Azure certifications such as Azure Solutions Architect Expert, Azure Network Engineer Associate, or related certifications are highly desirable. - Demonstrate experience leading end-to-end migration projects, including assessment, planning, execution, and post-migration activities. - Deep understanding of Azure networking services, including Virtual Networks, Azure ExpressRoute, VPN Gateway, Load Balancers, Azure Kubernetes Service (AKS), Azure App Service, and Azure SQL Database. - Proficiency in security practices and tools for Azure, including Azure Firewall, Network Security Groups (NSGs), and Azure Active Directory. - Proficiency in infrastructure-as-code tools such as Terraform or ARM templates. - Strong scripting skills using languages like PowerShell, Python, or Bash for automation and resource provisioning. - Experience with CI/CD tools and practices, such as Azure DevOps, Git, and Jenkins. - Familiarity with hybrid cloud environments and technologies for connecting on-premise infrastructure to Azure. - Experience with network monitoring, performance optimization, and troubleshooting tools for Azure environments. - Excellent communication and collaboration skills, with the ability to work effectively with technical and non-technical stakeholders. - Strong problem-solving skills and a proactive attitude toward identifying and addressing potential issues. - Leadership capabilities, including the ability to guide and mentor junior team members. - In-depth knowledge of industry security standards and compliance requirements. - Motivated, forward-thinking, and results-oriented individual with a passion for cloud technology.

This position is also open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate at the top of your resume and cover letter that you would like to be considered for the position through the 55-a Program.

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/.

New York City Residency is not required for this position

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.