Senior Azure Cloud Architect

Job Description

Job Description

Senior Azure Cloud Architect Location: Hybrid – Washington, DC (1 day per week onsite)
Duration: 2-Year Contract (Possible Extension)
Start Date: Immediate
Client: Federal Government Agency (National Endowment for the Arts)

Position Summary
We are seeking an experienced Senior Azure Cloud Architect to lead the design, implementation, governance, and modernization of enterprise cloud infrastructure on Microsoft Azure. This role requires a hands-on technical leader with extensive experience architecting secure, scalable, and highly available Azure environments while collaborating with executive leadership, engineering teams, and federal stakeholders.

The ideal candidate has progressed from Azure engineering into cloud architecture and possesses strong expertise in Azure infrastructure, networking, identity management, security, automation, Kubernetes, and cloud migration. The position is hybrid , requiring one day per week onsite in Washington, DC . 

Responsibilities

• Design enterprise-scale Microsoft Azure cloud architectures. 
• Develop Azure landing zones aligned with the Microsoft Cloud Adoption Framework and Azure Well-Architected Framework. 
• Architect solutions across: 
  • Azure Virtual Machines 
  • VM Scale Sets 
  • Azure App Services 
  • Azure Functions 
  • Azure Kubernetes Service (AKS) 
  • Container Apps 
  • Azure Batch 
• Design secure Azure networking solutions including: 
  • Virtual Networks (VNets) 
  • Network Security Groups (NSGs) 
  • Azure Firewall 
  • Application Gateway 
  • Front Door 
  • Private Endpoints 
  • ExpressRoute 
  • VPN Gateway 
• Architect identity and access management using Microsoft Entra ID, RBAC, Conditional Access, Managed Identities, and Privileged Identity Management. 
• Lead cloud migration assessments using Azure Migrate and develop migration strategies. 
• Design disaster recovery and high-availability architectures. 
• Create reference architectures, technical documentation, diagrams, and architecture decision records. 
• Define Infrastructure-as-Code standards using Terraform and Bicep. 
• Build and maintain CI/CD pipelines using Azure DevOps or GitHub Actions. 
• Implement Azure security and governance using: 
  • Microsoft Defender for Cloud 
  • Microsoft Sentinel 
  • Azure Policy 
  • Management Groups 
  • Key Vault 
• Configure Azure Monitor, Log Analytics, Application Insights, and KQL dashboards. 
• Lead architecture review boards and technical design sessions. 
• Provide technical leadership, mentoring, and code reviews for engineering teams. 
• Collaborate with business stakeholders to translate business requirements into technical cloud solutions. 
• Support cost optimization initiatives using Azure Cost Management and FinOps best practices. 

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field. 
• 9–15 years of overall IT experience. 
• 5–7+ years of hands-on Microsoft Azure engineering experience. 
• 2–4+ years serving as an Azure Architect or technical lead. 
• Experience designing enterprise Azure infrastructure from architecture through implementation. 
• Strong knowledge of: 
  • Azure Compute Services 
  • Azure Networking 
  • Azure Storage 
  • Microsoft Entra ID 
  • Azure SQL 
  • Cosmos DB 
  • Azure Data Lake 
  • Azure Integration Services 
• Expert-level experience with Terraform or Bicep. 
• Experience administering production Azure Kubernetes Service (AKS). 
• Strong scripting skills using PowerShell, Bash, or Python. 
• Experience implementing cloud governance and security best practices. 
• Excellent written and verbal communication skills. 
• Ability to lead technical teams and engage executive stakeholders. 

Preferred Qualifications

• Experience in federal, government, healthcare, or other regulated industries. 
• Knowledge of: 
  • Azure Arc 
  • Azure Stack HCI 
  • Azure Stack Edge 
  • VMware 
  • Windows Server 
  • Linux Administration 
• Experience with microservices, event-driven architecture, and serverless computing. 
• Familiarity with: 
  • FedRAMP 
  • NIST 800-53 
  • CIS Azure Benchmark 
  • HIPAA 
  • PCI DSS 
• Experience working in Agile/Scrum environments. 
• Strong leadership skills with the ability to work in cross-functional teams. 

Required Certifications
Candidates should possess the following Microsoft Azure certifications:

• AZ-305 – Azure Solutions Architect Expert (Required) 
• AZ-104 – Azure Administrator Associate (Required) 
• AZ-500 – Azure Security Engineer Associate (Required) 

Preferred certifications include:

• AZ-700 – Azure Network Engineer Associate 
• SC-100 – Cybersecurity Architect Expert 
• Certified Kubernetes Administrator (CKA) 

Flexible work from home options available.