Azure Solution Architect

Description

The company is seeking an Azure Solutions Architect for its federal civilian division. You will support a large, global cloud and data center services program for the U.S. Department of State's Bureau of Diplomatic Technology.

You will design and roll out Azure cloud services across enterprise environments in support of the department's mission and goals. The role combines hands-on Azure architecture with client leadership, shaping solutions, overseeing operations, and mentoring engineers.

The company is a global technology and professional services firm with about 26,000 staff in more than 50 countries, working on AI, cloud, cyber and software development for U.S. government, defense and intelligence agencies.

Responsibilities

• Design, deploy and configure Azure IaaS and PaaS services, virtual networks and similar components, including Azure-based AI solutions.
• Use infrastructure as code such as ARM, Bicep or Terraform to standardize and automate deployments across hybrid and multi-cloud environments.
• Build the strategy for Azure landing zones, covering governance, tagging, role-based access, policy enforcement, cost controls and operating standards.
• Help engineer platform services, including converged and cloud infrastructure, data protection, monitoring and security infrastructure.
• Support 24x7x365 cloud operations alongside enterprise and site operations teams, and act as the escalation point for incidents, problems and changes under ITIL practices.
• Design and deploy monitoring for performance, health, consumption, scaling and anomalies, and recommend cost optimizations and right-sizing.
• Lead cloud migrations, infrastructure upgrades, workload tuning and resource lifecycle management using vendor and security framework best practices.
• Use automation and data analysis to keep cloud resources meeting operational readiness, uptime and reliability targets.
• Design Azure security controls and governance aligned with Zero Trust Architecture, NIST 800-53, the Microsoft Cloud Adoption Framework, the Microsoft Cloud Security Benchmark, Microsoft cybersecurity reference architectures, other frameworks, and customer or ATO requirements.
• Support FedRAMP, NIST RMF and FISMA controls, other applicable security frameworks, Zero Trust adoption and DOS cybersecurity directives.
• Design continuous monitoring, reporting and self-healing solutions using native tools, automation and AI.
• Work with DT service providers, engineering teams and stakeholders to improve service delivery, standardize cloud practices and streamline delivery.
• Write documentation, runbooks, diagrams, proposals and knowledge-transfer material for government FTEs and support contractors.

Requirements

• Experience with cloud architectures, Microsoft Azure IaaS and PaaS, and Windows Azure cloud.
• Hold Microsoft Certified: Azure Solutions Architect Expert (AZ-305), which is required.
• Have 8+ years of related experience supporting enterprise IT systems, cloud services engineering or hybrid cloud environments.
• Hold a bachelor's degree in information technology, computer science, engineering or a related technical discipline. A degree is strongly preferred, but an additional 4 years of experience would be considered in lieu of one.
• Hands-on skill with Azure IaaS and PaaS, virtual networks, routing, storage, compute, identity integration, automation, scripting (PowerShell, CLI), monitoring and observability tools, hybrid and hyperconverged computing, and cloud security practices.
• Hold an active Top Secret clearance.
• US citizenship required.
• Nice to have, but not required: a master's degree in information technology, computer science, engineering or a related technical discipline.
• Nice to have, but not required: 12+ years of relevant experience supporting enterprise IT systems, cloud services engineering or hybrid cloud environments.
• Nice to have, but not required: one or more other relevant certifications, such as DevOps Engineer Expert (AZ-400), Azure Server Administrator Associate (AZ-802), Azure Network Engineer Associate (AZ-700), GH-series GitHub certifications, AI-series Azure AI certifications, certifications from other cloud providers, VMware certifications, Red Hat Certified Engineer (RHCE) or similar.
• Nice to have, but not required: demonstrated experience with CloudFinOps programs.

Conditions

Based in Washington, DC, with additional work locations in Newington, VA and Springfield, VA.

Hybrid work model with 40 scheduled hours per week.

Work hybrid or on-site within the National Capital Region, with periodic travel to customer and data center sites. Travel outside the area is expected to be under 10%.

This is a contingent position expected to start in spring 2027.

The likely salary range is $164,382 to $212,750. This is not a guarantee. Pay is set by experience, geographic location and possibly contractual requirements, and could fall outside this range.

Hiring includes an identity verification process using biometrics and AI, and you must be on camera during virtual interviews.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Medical plan options, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) plan with pre- and post-tax contributions up to IRS annual limits and a company match.
• Paid time off including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• Full-flex work weeks where possible.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• An AI-powered career tool that identifies career steps and learning opportunities.
• An internal mobility team to help you reach your career goals.
• A military-friendly workplace.