Azure Cloud Architect – SME Support

This is a fully remote position, open to applicants in California.

📋 Description

• The Azure Cloud Architect acts as a specialized Subject Matter Expert (SME), delivering high-level strategic leadership, technical direction, and practical engineering guidance for intricate cloud initiatives.

• This position is tasked with validating architectural designs, engineering Mission Landing Zones (MLZ), directing the implementation of Zero Trust Architectures (ZTA), and managing the advancement of Cloud Native Security Stacks (CNSS).

• Serve as a liaison between overarching strategy and technical execution, ensuring that cloud environments are secure, automated, resilient, and compliant with Department of Defense (DoD) standards.

• Confirm technical Engineering Assessments in close collaboration with Cloud Engineers to verify that proposed solutions are both feasible and scalable.

• Spearhead the engineering, deployment, and customization of Azure Mission Landing Zones (MLZ) utilizing automated Infrastructure as Code (IaC) workflows.

• Provide specialized design recommendations across essential areas: data storage, identity management, governance, and monitoring solutions.

• Offer expert advice on Mission Owner (MO) cloud transition strategies and work alongside Program Managers to facilitate the implementation of suggested architectures.

• Counsel on F5 configuration tasks and assess the potential operational impacts of transitioning from legacy systems to a cloud-native security stack.

• Deliver strategic recommendations for the ongoing maintenance and support of the DoD Secure Cloud Computing Architecture (SCCA) Functional Requirements Document (FRD) within Azure Government.

• Lead the implementation and long-term support of the forthcoming Cloud Native Security Stack and potential Shared Services.

• Provide hands-on expertise and strategic configurations for Azure Firewall Premium (AFW-P) with IDPS, User-Defined Routing (UDR), and advanced hub-and-spoke network architectures.

• Create, enforce, and maintain custom Azure Policies to guarantee continuous adherence to DoD landing zone standards.

• Steer the transition towards Zero Trust Architectures to comply with contemporary federal security requirements.

• Construct, optimize, and maintain secure CI/CD pipelines (GitLab, Azure DevOps) to automate cloud infrastructure deployment.

• Collaborate with Cloud Operations Engineers to design and ensure high availability and failover capabilities across both Azure Government and Commercial settings.

• Ensure all architectural designs meet the strict requirements of Azure Government and relevant commercial cloud services.

⛳️ Requirements

• Education: Bachelor’s degree in Computer Science or a related technical discipline.

• Experience: 2–4 years of cloud engineering experience with a strong background in Azure administration and cloud architecture.

• DoD Expertise: Specific knowledge in the strategic maintenance and support of DoD SCCA functional requirements.

• Technical Proficiencies: Practical experience in writing Infrastructure as Code using Azure Bicep or ARM templates. Strong expertise with CI/CD platforms, DevSecOps toolchains, and git-based workflows.

• Certification: Security+ certification.

• Security Clearance: U.S. Citizenship and the capability to obtain a DoD Top Secret clearance.

• Preferred: Active DoD Top Secret clearance.

• Advanced Cloud certification (e.g., Microsoft Certified: Azure Solutions Architect Expert or AWS Solutions Architect Associate).

• Demonstrated experience in deploying and maintaining Azure Mission Landing Zone (MLZ) repositories.

• Proven experience in implementing DISA STIG configurations and hardening automated deployments.

• Experience in supporting compliance for DoD SRG and NIST SP 800-53 security controls.

• Certification: Active Security+ certification.

🏝️ Benefits

• Medical, dental, and vision insurance

• Life insurance

• Long and short-term disability and other insurance products

• Health Savings Account

• Flexible Spending Account

• 401K Retirement Plan options

• Tuition Reimbursement

• Assorted voluntary benefits