Principal Azure and M365 Cloud Architect - TS/SCI with Polygraph

Description

The company is a global technology and professional services firm with about 26,000 staff in more than 50 countries. It serves US government, defense and intelligence agencies with AI, cloud, cyber and software work.

This is a principal cloud architect role on the Azure and M365 team in the IT Infrastructure and Operations job family. You will set the architecture and govern how it is built and run for classified environments.

Responsibilities

• Set and oversee Azure landing zone, subscription and management group, tenant, network, identity, policy, logging, key management and workload placement patterns for each enclave and classification boundary.
• Write up the UMIS architecture and the SCMIS hybrid Exchange and M365 decisions as reusable reference patterns, stating assumptions, limits and known exceptions.
• Design AVD and end-user computing, Intune, Windows 11 endpoint management, Defender for Endpoint, Sentinel, Exchange hybrid, Teams and collaboration, backup and recovery, and service continuity.
• Set IaC, CI/CD, artifact, image, configuration and promotion standards together with the Cloud Platform and DevSecOps engineers.
• Work with Security to build control implementation, inheritance, logging, evidence and cATO-ready continuous monitoring patterns.
• Work with Service Operations on capacity, observability, SLOs, incident response, change windows, patching and operational acceptance.
• Assess Microsoft, WWT, Dell and other partner offerings, and recommend products and services based on evidence while you keep architecture ownership in-house.
• Lead architecture reviews and mentor engineers. Brief government and program leaders on migration risk, cost, readiness and trade-offs.

Requirements

• Bachelor's degree in computer science, information technology, cloud or software engineering, or a related field, or approved equivalent experience.
• Active Top Secret SCI with Polygraph clearance.
• 10+ years of enterprise infrastructure or cloud engineering, including 5+ years designing and delivering Azure and M365 solutions.
• Hands-on architecture work in Azure Government and/or M365 government cloud boundaries, including GCC and GCC High.
• Solid knowledge of Azure networking, tenant and subscription governance, Entra ID, Conditional Access, RBAC and PIM, policy, logging and security controls.
• Solid background in at least three of these: AVD, Intune, Windows endpoint management, Exchange hybrid, Teams, Defender for Endpoint, Sentinel, Azure Monitor, backup and recovery, or migration tooling.
• Experience building phased migration roadmaps for mixed applications, identities, endpoints and data across several enclaves or business units.
• Familiar with IaC, CI/CD, containers, internal artifact management and secure promotion in restricted environments.
• Strong grasp of RMF, ATO boundary impact, STIGs, Zero Trust, data classification, control evidence and operational readiness.
• Proven technical leadership, mentoring, vendor management, and the ability to brief technical and executive government stakeholders.
• Preferred: Microsoft Certified Azure Solutions Architect Expert and Microsoft 365 Certified Administrator Expert. Identity and Access Administrator Associate, Cybersecurity Architect Expert, Azure Administrator Associate and Azure Virtual Desktop Specialty are complementary. Full certification prerequisites apply.
• Preferred: experience designing contractor-operated managed services, service catalogs, FinOps practices, license optimization and SLA-based platform operations.
• Preferred: experience integrating Azure and M365 with Cisco ISE/TrustSec, ServiceNow ITOM/CMDB, Dynatrace, Aternity, Sentinel or SIEM, and automated patch and evidence workflows.
• Preferred: prior DoW or IC cloud migration work, including disconnected or high-side engineering constraints.
• Preferred: experience with Azure AI Services or locally hosted AI workloads where commercial service availability is limited.

Conditions

Onsite work in Chantilly, Virginia. Telecommuting is not offered.

Scheduled 40 hours per week. No travel is required.

US citizenship is required.

No public trust or other clearance is listed. Active TS/SCI with Polygraph is required.

The likely salary range is $164,382 to $212,750. This is not a guaranteed figure. Pay is set by experience, geographic location and possibly contract requirements, and may fall outside this range.

Identity verification uses biometrics and AI to prevent fraud. You must be on camera for virtual interviews, and by proceeding you authorize the collection and use of your biometric data for verification and security.

Equal opportunity employer. Individuals with disabilities and protected veterans are encouraged to apply.

Benefits

• Medical plans, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) with pre-tax and post-tax contributions up to IRS annual limits and a company match.
• Full flex work weeks where possible.
• Paid time off including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• An AI-powered career tool that suggests career steps and learning, and an internal mobility team to help with career goals.
• A military-friendly workplace.