Azure Architect (1099)

Position summary

As the Azure Cloud Architect, you will guide our government partner in designing the new Azure tenant, establishing governance and security foundations, and enabling the government agency to operate independently.

What you'll do

• Assess the existing Azure environment, infrastructure dependencies, and modernization requirements to inform the target architecture
• Design the Azure tenant structure, including management groups, subscriptions, landing zones, networking, and resource organization
• Define cloud architecture standards, naming conventions, tagging strategies, and architecture decision records (ADRs)
• Advise on identity and access management, including Entra ID, RBAC, PIM, Conditional Access, and least-privilege access models
• Develop secure networking and connectivity patterns between Azure, on-premises systems, federal partners, and external integrations
• Define Infrastructure-as-Code standards, reusable modules, repository structure, and CI/CD workflows for development teams
• Produce architecture documentation, operational guidance, governance artifacts, and platform runbooks to support long-term maintainability

Required skills

• 5+ years of experience as Azure Cloud Architect, including Azure Landing Zones, Management Groups, and subscription design, for large-scale government or regulated environments
• Experience implementing Infrastructure as Code (IaC) using Azure Bicep, ARM templates, Terraform, and CI/CD automation
• Experience designing identity and access management solutions using Microsoft Entra ID, Role-Based Access Control (RBAC), Privileged Identity Management (PIM), and Conditional Access
• Knowledge of cloud security, governance, and compliance frameworks, including HIPAA, NIST, Azure Policy, Microsoft Defender for Cloud, and Authorization to Operate (ATO) processes
• Experience establishing cloud governance standards, including resource organization, naming conventions, tagging strategies, policy guardrails, and cost management practices
• Proficient with DevSecOps practices