Cloud & Enterprise Applications Architect

Association of Universities for Research in Astronomy • Baltimore, DC

21h • $215,000 - $240,000 • Hybrid

About The Position

The Association of Universities for Research in Astronomy (AURA) is seeking a Cloud & Enterprise Applications Architect to design, integrate, and support AURA’s cloud-based enterprise technology ecosystem, with a primary focus on Microsoft Azure, identity and access management, enterprise application integrations, data movement, and API-based services. This position serves as a senior technical resource within the Enterprise IT Team and works across infrastructure, cybersecurity, business systems, and functional departments to ensure AURA’s cloud services and enterprise applications are secure, scalable, interoperable, and supportable. The role will focus on Microsoft Azure and Microsoft Entra ID architecture while supporting integrations involving systems such as Deltek Costpoint, UKG, Microsoft 365, and other enterprise platforms. The architect will help establish reusable integration patterns, strengthen identity governance, improve data exchanges between systems, and reduce reliance on manual processes and one-off technical solutions. This position is expected to function as a hands-on architect rather than solely as a strategic design role. The individual should be comfortable moving between architecture, engineering, troubleshooting, scripting, integration development, vendor coordination, and technical documentation. This role reports to the Director of Enterprise IT, has no direct reports but may lead cross-functional teams. Position is eligible for hybrid work and will require 3 days of on-site presence in our Washington, DC office.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Engineering, or a related discipline, or equivalent professional experience.
• 7+ years of progressively responsible experience in cloud infrastructure, enterprise applications, systems integration, identity management, or related disciplines
• 3+ years of hands-on Microsoft Azure experience, with strong experience in Microsoft Entra ID and enterprise identity technologies
• Demonstrated experience integrating SaaS and enterprise applications using APIs or middleware, including REST APIs, authentication protocols, and automation.

Nice To Haves

• Certifications in cloud and identify platforms, such as AWS or Azure, are preferred

Responsibilities

• Design, maintain, and improve AURA's Microsoft Azure architecture, including subscriptions, resource groups, networking, identity, application registrations, and managed identities.
• Design solutions using core Azure services (Functions, Logic Apps, API Management, Key Vault, Storage, monitoring) and support cloud modernization and migration initiatives.
• Produce architectural documentation, technical diagrams, and reusable cloud patterns; support governance, resiliency, and disaster-recovery planning.
• Serve as technical lead for identity architecture using Microsoft Entra ID: authentication, SSO, MFA, Conditional Access, and application registrations.
• Design role-based access control models following least-privilege and separation-of-duties principles.
• Build identity lifecycle automation (onboarding, transfers, offboarding) and integrations between HR systems, identity platforms, and downstream applications.
• Apply modern identity/federation standards (SCIM, SAML, OAuth 2.0, OpenID Connect, Microsoft Graph); partner with cybersecurity on governance, privileged access, and Zero Trust initiatives.
• Ensure cloud and integration designs follow AURA cybersecurity standards and applicable regulatory/contractual requirements.
• Incorporate logging, monitoring, encryption, secrets management, and least-privilege access into all designs.
• Support IT audit activities with architecture documentation, configuration evidence, and technical controls; contribute to technology standards for Azure, APIs, identity, and service accounts.
• Provide architecture and integration support for enterprise platforms including Deltek Costpoint, UKG, Microsoft 365, Entra ID, and Azure-hosted applications.
• Translate business requirements into secure technical solutions; evaluate APIs, authentication models, and system dependencies with application owners and vendors.
• Design and implement secure integrations between cloud platforms, SaaS applications, and internal systems; establish REST API, middleware, and event-driven integration standards.
• Maintain documentation of application dependencies, API connections, service accounts, and data flows; favor reusable integration patterns over point solutions.
• Design secure, reliable methods for moving data between enterprise applications; document authoritative systems of record.
• Support integrations involving employee, financial, organizational, and operational data, and help improve data quality, consistency, and synchronization.
• Support database, ETL/ELT, API, and file-based integration approaches, and reporting/analytics initiatives that depend on reliable enterprise data.
• Identify manual IT/business processes that can be automated via Azure, APIs, PowerShell, Microsoft Graph, or Python.
• Build automation for identity management, integrations, and monitoring; establish source control and change-management practices for scripts and cloud configuration.
• Create technical documentation so solutions can be maintained by the broader Enterprise IT Team.

Benefits

• Generous leave and retirement.
• Comprehensive health, dental, and retirement benefits.
• Flexible work arrangements and potential travel opportunities to AURA facilities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior