Cloud Architect

Job summary

Leads the design and build-out of a secure, governed multi-cloud environment for government agencies, centered on Microsoft Azure with supporting AWS workloads. Designs Azure landing zones and hybrid connectivity, delivers infrastructure through Terraform and CI/CD pipelines, leads on-premises workload migrations, and provides architectural oversight for Azure Virtual Desktop. The role also sets security, monitoring, disaster recovery, and cost-management standards while guiding an Azure Cloud Engineer.

Qualifications

• At least eight years of infrastructure engineering experience, including at least five years designing and building in Microsoft Azure.
• Experience designing and delivering enterprise Azure landing zones with management groups, Azure Policy, role-based access control, and hub-and-spoke networking.
• Production Terraform experience, including reusable modules and remote state management.
• Experience building infrastructure CI/CD pipelines with Azure DevOps or transferable GitHub Actions experience.
• Strong knowledge of Microsoft Entra ID, conditional access, and identity governance.
• Experience planning or leading migrations of on-premises virtualized workloads, such as VMware, to Azure.
• Working knowledge of AWS sufficient to operate and troubleshoot EC2, VPC, IAM, and S3 workloads.
• Experience leading or mentoring engineers, including code review.
• Strong written communication and experience producing architecture documentation and runbooks.
• Preferred: Experience in state, local, or federal government IT environments.
• Preferred: Experience with Azure Virtual Desktop or Nerdio Manager for Enterprise.
• Preferred: Familiarity with NIST 800-53, CJIS, or FedRAMP.
• Preferred: Experience with Azure cost management, reservations, and chargeback models.
• Preferred: Familiarity with ServiceNow incident and change management.

Responsibilities

• Translate agency requirements into cloud architecture designs and explain options, costs, and tradeoffs.
• Define Azure standards, including landing zones, naming and tagging, Azure Policy, and role-based access control.
• Design hybrid cloud integration with on-premises networks, private endpoints, firewalls, and identity services.
• Lead complex cloud implementations and migrations of on-premises virtualized workloads to Azure.
• Design and maintain the Azure landing zone, including management groups, subscriptions, policies, access controls, and security baselines.
• Deliver production infrastructure changes through code and pull requests rather than manual portal changes.
• Provide architectural oversight for Azure Virtual Desktop and its integration with Terraform and Nerdio.
• Define monitoring, backup, and disaster recovery standards and optimize cloud spending for chargeback reporting.
• Support and troubleshoot existing AWS workloads.
• Provide technical direction, code review, and mentoring to an Azure Cloud Engineer.
• Maintain architecture diagrams, design decisions, and runbooks.
• Track work in Azure DevOps and manage incidents and changes in ServiceNow.

Skills

Certifications

Industry

Contract length

Relocation