11years Cloud Architect - Onsite
About The Position
The Cloud Architect serves as the cloud architecture subject matter expert for OCTO, providing authoritative guidance on Azure services, security baselines, cost management, and AWS operations. The role translates agency business needs into clear architecture designs, communicates technical concepts and tradeoffs to technical and non-technical audiences, and collaborates with agency CIOs, OCTO leadership and security, and vendor partners. The architect leads complex cloud implementations, including assessing, designing, sizing, cost modeling, and migrating on-premises virtualized workloads to Azure. The role designs and owns the Azure landing zone, establishes cloud standards and infrastructure-as-code practices, and provides architectural oversight of Azure Virtual Desktop environments and their integration with Nerdio. It also supports existing AWS workloads operationally, defines monitoring, backup, and disaster recovery standards, and tracks and optimizes cloud spending for agency chargeback reporting. The position provides technical direction, code review, and mentoring to the Azure Cloud Engineer; ensures critical systems have primary and backup owners; and maintains reviewed architecture diagrams, design decisions, and runbooks. Work is tracked in Azure DevOps, while incidents and changes are managed in ServiceNow.
Requirements
- At least 8 years of infrastructure engineering experience, including at least 5 years designing and building in Microsoft Azure.
- Demonstrated design and delivery of an enterprise Azure landing zone, including management groups, Azure Policy, RBAC, and hub-and-spoke networking.
- Hands-on production Terraform experience, including reusable modules and remote state management.
- Experience building infrastructure CI/CD pipelines in Azure DevOps or GitHub Actions, with transferable skills.
- Strong knowledge of Microsoft Entra ID, conditional access, and identity governance.
- Experience planning or leading migrations of on-premises virtualized workloads, such as VMware, to Azure.
- Working knowledge of AWS sufficient to operate and troubleshoot existing EC2, VPC, IAM, and S3 workloads.
- Experience leading or mentoring engineers, including code review.
- Strong written communication and a track record of producing clear architecture documentation and runbooks.
- Microsoft Certified: Azure Solutions Architect Expert (AZ-305), or ability to obtain it within 6 months of start.
Nice To Haves
- Experience in state, local, or federal government IT environments.
- Hands-on experience with Azure Virtual Desktop and/or Nerdio Manager for Enterprise.
- Experience with Azure.
- Familiarity with compliance frameworks such as NIST 800-53, CJIS, or FedRAMP.
- Experience with Azure cost management, reservations, and chargeback models.
- Familiarity with ServiceNow for incident and change management.
- AWS Certified Solutions Architect – Associate or higher.
- HashiCorp Certified: Terraform Associate.
Responsibilities
- Translate agency business requirements into cloud architecture designs and present options, costs, and tradeoffs to technical and non-technical audiences.
- Identify and improve project standards for high-quality cloud services and products, including Infrastructure as Code, change management, and documentation.
- Establish best practices and standards for Microsoft Azure, including the Azure Cloud Adoption Framework and Well-Architected Framework, landing zones, naming and tagging, Azure Policy, and role-based access control.
- Design and support cloud technologies integrated with on-premises systems and networks, including hybrid connectivity to OCTO data centers, hub-and-spoke networking, private endpoints, firewall integration, and Microsoft Entra ID identity integration.
- Engage executive-level business users and technical experts, including agency CIOs, OCTO leadership, OCTO security, and vendor partners, to scope requirements, communicate status, and support decisions.
- Provide authoritative cloud architecture guidance to OCTO on Azure services, security baselines, cost management, and AWS operations.
- Lead complex cloud implementations and migrations of on-premises virtualized workloads to Azure, from discovery and dependency mapping through target design, sizing, cost modeling, and migration waves.
- Design, mature, and own the Azure landing zone, including management groups, subscriptions, policy, RBAC, and Microsoft Defender for Cloud security baselines.
- Ensure production changes are delivered through code and pull requests rather than manual portal changes.
- Provide architectural oversight of Azure Virtual Desktop environments, including the boundary between Terraform-managed infrastructure and the Nerdio management platform.
- Define monitoring, backup, and disaster recovery standards for Azure workloads; track and optimize cloud spending to support agency chargeback reporting.
- Support existing AWS workloads at an operational level.
- Provide technical direction, code review, and mentoring to the Azure Cloud Engineer, and ensure every critical system has a primary and backup owner.
- Maintain current architecture diagrams, design decisions, and runbooks as reviewed deliverables.
- Track work in Azure DevOps boards and manage incidents and changes in ServiceNow.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
