Description
We are seeking a Cloud Architect to define and govern Azure landing-zone, subscription/management-group, tenant, network, identity, policy, logging, key-management, and workload-placement patterns. The successful candidate will have 10+ years of enterprise infrastructure/cloud engineering experience, including 5+ years designing and delivering Microsoft Azure and M365 solutions.
Key Responsibilities:
- Define and govern Azure landing-zone, subscription/management-group, tenant, network, identity, policy, logging, key-management, and workload-placement patterns
- Document UMIS architecture and SCMIS hybrid Exchange/M365 decisions as reusable reference patterns
- Architect AVD/EUC, Intune, Windows 11 endpoint management, Defender for Endpoint, Sentinel, Exchange hybrid, Teams/collaboration, backup/recovery, and service continuity
- Define Infrastructure as Code, CI/CD, artifact, image, configuration, and promotion standards with the Cloud Platform/DevSecOps Engineers
- Partner with Security to develop control implementation, inheritance, logging, evidence, and cATO-ready continuous monitoring patterns
- Partner with Service Operations to define capacity, observability, SLOs, incident response, change windows, patching, and operational acceptance
- Evaluate Microsoft, WWT, Dell, and other partner capabilities; make evidence-based product and service recommendations
- Lead cloud architecture reviews, mentor engineers, and brief Government and program leadership on migration risk, cost, readiness, and trade-offs
Required Qualifications:
- Bachelor's degree in Computer Science, Information Technology, Cloud Engineering, Software Engineering, or a related field
- 10+ years of enterprise infrastructure/cloud engineering experience
- 5+ years designing and delivering Microsoft Azure and M365 solutions
- Hands-on architecture experience with Azure Government and/or M365 government cloud boundaries
- Deep experience with Azure networking, tenant/subscription governance, Entra ID, Conditional Access, RBAC/PIM, policy, logging, and security controls
- Strong experience with at least three of the following: AVD, Intune, Windows endpoint management, Exchange hybrid, Teams, Defender for Endpoint, Sentinel, Azure Monitor, backup/recovery, or migration tooling
Preferred Qualifications:
- Microsoft Certified: Azure Solutions Architect Expert and Microsoft 365 Certified: Administrator Expert
- Experience designing contractor-operated managed services, service catalogs, FinOps practices, license optimization, and SLA-based platform operations
- Experience integrating Azure/M365 with Cisco ISE/TrustSec, ServiceNow ITOM/CMDB, Dynatrace, Aternity, Sentinel/SIEM, and automated patch/evidence workflows
Benefits:
- Comprehensive benefits and wellness packages
- 401K with company match
- Competitive pay and paid time off
- Award-winning culture of innovation and a military-friendly workplace