Azure Solution Architect - Cleared (Top Secret)

Accountabilities: Design, develop, and maintain Infrastructure as Code (IaC) solutions using Terraform to automate secure, scalable, and repeatable Azure infrastructure deployments. Build and optimize CI/CD pipelines using Azure DevOps to streamline infrastructure provisioning, application delivery, and operational deployments. Architect, deploy, and sustain enterprise Azure infrastructure in alignment with the Microsoft Cloud Adoption Framework (CAF), Azure Well-Architected Framework, and organizational standards. Establish and manage Azure governance frameworks, including management groups, subscriptions, resource groups, Azure Policy, and Role-Based Access Control (RBAC), to maintain security and operational consistency. Configure and manage Azure Key Vault, storage services, backup and recovery solutions, data retention policies, and encryption capabilities to protect enterprise resources. Design and maintain enterprise cloud networking solutions, including Virtual WAN, virtual networks (VNets), Network Security Groups (NSGs), routing, DNS, private connectivity, and hybrid cloud integrations. Implement and maintain monitoring and observability capabilities using Azure Monitor, Log Analytics, Application Insights, dashboards, alerts, and automated response mechanisms. Support application and workload migrations, cloud modernization, infrastructure optimization, and hybrid cloud integration initiatives. Integrate security controls and compliance requirements throughout the cloud infrastructure lifecycle, applying Zero Trust principles, TIC 3.0 guidance, NIST frameworks, and applicable federal security baselines. Administer and support Azure Virtual Desktop (AVD), including host pools, session hosts, image management, FSLogix profiles, and enterprise user support. Troubleshoot and resolve complex infrastructure, networking, identity, performance, and security issues to maintain platform availability, reliability, and resilience. Collaborate with cloud architects, engineers, developers, cybersecurity professionals, and mission stakeholders to develop secure, scalable, and mission-aligned solutions. Develop reusable infrastructure modules, engineering standards, reference architectures, technical documentation, implementation guides, and operational procedures. Support platform sustainment, capacity planning, incident response, problem management, continuous improvement, and the preparation of audit and compliance documentation. Requirements Active Top Secret security clearance with eligibility for Sensitive Compartmented Information (SCI); a higher-level clearance is an advantage. U.S. citizenship, as required for government-cleared positions. At least 5 years of experience supporting Tier II Azure environments or 3+ years supporting Tier III enterprise Azure cloud infrastructure. Demonstrated experience designing, implementing, and maintaining enterprise Azure landing zones and core infrastructure services in accordance with the Microsoft Cloud Adoption Framework and cloud engineering best practices. Strong technical expertise in Azure governance and platform services, including management groups, subscriptions, resource groups, Azure Policy, RBAC, Key Vault, storage, and networking. Hands-on experience designing and supporting enterprise Azure networking, including VNets, Virtual WAN, NSGs, routing, private connectivity, and hybrid cloud architectures. Experience administering Azure Virtual Desktop environments, including host pools, session hosts, image management, FSLogix profiles, and user support. Solid understanding of Azure security, monitoring, and operational management, including Azure Monitor, Log Analytics, Application Insights, diagnostic tools, alerts, and security controls. Proficiency in PowerShell scripting and automation for cloud administration, configuration management, and operational efficiency. Practical experience with Infrastructure as Code methodologies and tools, particularly Terraform, for consistent, repeatable, and auditable deployments. Knowledge of federal cybersecurity and compliance requirements, including Zero Trust Architecture, NIST standards, TIC 3.0, and government cloud security baselines. Strong analytical and troubleshooting skills, with the ability to resolve complex cloud infrastructure, identity, networking, performance, and security challenges. Excellent written and verbal communication skills, including the ability to prepare technical documentation and communicate architecture and operational concepts to technical and non-technical stakeholders. Ability to work effectively in cross-functional teams and collaborate with engineering, architecture, cybersecurity, development, and mission-focused personnel. Strong commitment to security, automation, continuous improvement, operational excellence, and the delivery of resilient cloud services. Preferred qualifications: Microsoft Azure certifications, such as Azure Administrator Associate (AZ-104), Azure Security Engineer Associate (AZ-500), Azure Network Engineer Associate (AZ-700), or Azure Solutions Architect Expert (AZ-305). Experience supporting Intelligence Community (IC), Department of Defense (DoD), or other classified federal cloud environments. Familiarity with Bicep, Azure Resource Manager (ARM) templates, and other Infrastructure as Code frameworks. Experience with cloud migration, application modernization, workload transformation, and hybrid cloud strategies. Knowledge of Microsoft Power Platform integration within Azure environments. Familiarity with Azure OpenAI embedded capabilities and Microsoft Copilot features. Understanding of Microsoft licensing models, subscription management, and enterprise cloud cost considerations. Benefits Competitive annual salary: $180,000–$225,000, depending on experience, qualifications, skills, role responsibilities, and market conditions. Comprehensive health coverage: Medical, dental, and vision insurance plans. Financial protection: Life insurance and disability coverage. Paid time off: Company-paid holidays and paid time off (PTO) to support work-life balance. Retirement planning: A retirement plan with a variety of investment options to help support long-term financial goals. Mission-driven work: The opportunity to contribute to critical federal cloud modernization initiatives and support high-impact government missions. Modern technology environment: Hands-on work with Azure-native services, Terraform, Azure DevOps, and enterprise cloud security and automation solutions. Collaborative engineering culture: The opportunity to work alongside experienced cloud architects, engineers, developers, and cybersecurity specialists. Remote work arrangement: The position is listed as remote, subject to applicable project, security, and operational requirements.