Enterprise Architect

BerryDunn•Portland, ME

6d•Remote

About The Position

The Enterprise Architect is responsible for the design authority, technical standards, and target-state architecture that guide how BerryDunn builds and operates business technology across the Microsoft cloud. The role owns the practical application of BerryDunn's architectural principles and standards, with a primary focus on the firm's FY27 AI strategy, evaluation of emerging technology, and the migration of workloads from the on-premises data center to Microsoft Azure. This role is the firm's senior architecture authority for AI-enabled business applications, Azure platform services, Power Platform, and integration patterns. It defines target-state patterns, maintains the standards catalog and architecture decision records, chairs architecture review, and sets production-readiness expectations so that solutions are secure, governed, reusable, and supportable before they reach production. The Enterprise Architect leads the architecture workstream for BerryDunn's move off the on-premises data center: assessing the current estate, defining the Azure landing zone and identity/network baselines, selecting migration and modernization dispositions for each workload, and sequencing waves with the IT Systems, Engineering, Security, and Applications teams. The role also owns the technology radar, evaluating emerging Microsoft and AI capabilities, running structured proof of concept, and recommending what the firm adopts, maintains, or retires. The role partners closely with IT leadership, Security, Infrastructure, Applications, Analytics, Data Engineering and Governance, and the AI Community of Practice, and engage business stakeholders across Tax, Assurance, Audit and Consulting. As the senior subject-matter expert, the Enterprise Architect is expected to coach delivery teams, publish reusable reference architectures, and reduce design rework and one-off solutions. The ideal candidate is a pragmatic, standards-driven technologist and people manager who balances governance with delivery speed, can influence without direct authority, develops and supports team members, and communicates architectural trade-offs, risk, and cost clearly to both technical teams and executive stakeholders. Travel Expectations: This role requires minimal travel, less than 10% per year.

Requirements

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field. (Equivalent experience or technical certifications may be considered.)
10+ years of progressive technology experience, including 5+ years in an enterprise, solution, or principal architect role with accountability for standards and design authority.
Experience managing, coaching, or developing technical staff, including performance conversations, goal setting, workload prioritization, and career development planning.
Demonstrated experience designing and governing solutions on Microsoft Azure, including landing zone design, identity, networking, and security baselines.
Hands-on experience leading or architecting on-premises to Azure migrations, including assessment, workload disposition, wave planning, and cutover.
Practical experience architecting AI solutions on the Microsoft stack, such as Microsoft 365 Copilot, Copilot Studio, Azure AI Foundry, Azure OpenAI, or comparable platforms, including retrieval, grounding, evaluation, and guardrails.
Experience defining and enforcing architecture governance and setting architectural standards.
Experience with Power Platform environment strategy, DLP and connector governance, and application lifecycle management.

Responsibilities

Own, maintain, and evolve BerryDunn's architectural principles and standards catalog, including standard identifiers, acceptance criteria, evidence expectations, owners, and review cadence.
Serve as design authority for AI, automation, integration, application, and Microsoft cloud solutions; approve target-state designs and document exceptions with compensating controls.
Chair or lead the architecture review gate so that all significant solutions and AI agents receive documented review, risk tiering, and go/no-go decisions before production.
Maintain architecture decision records, reference architectures, solution patterns, and reusable design assets that reduce rework across teams.
Align architecture work to the firm's TOGAF-based governance model and to enterprise, data, application, and technology architecture domains.
Provide architectural leadership for the FY27 AI strategy, translating 'govern once, innovate everywhere' into concrete platform, pattern, and control decisions.
Define target-state architecture and standards for Microsoft 365 Copilot, Copilot Studio, Azure AI Foundry, and custom AI services, including when each platform is the right choice.
Set standards for agent design and classification, allowable autonomy, prompt and tool security (including prompt injection and data exfiltration defenses), retrieval design, grounding, evaluation, and monitoring.
Require and validate human-in-the-loop controls and deterministic processing where client financial, regulated, or otherwise sensitive data is involved.
Define AI production-readiness criteria—responsible AI guardrails, content safety, identity and RBAC, network isolation, and diagnostic logging and observability—and verify evidence before pilots scale.
Partner with the AI Hub-and-Spoke governance model, AI Community of Practice, Security, and Risk to keep AI intake, risk tiering, and review paths practical and enforceable.
Advise Spokes and product owners on use-case feasibility, data readiness, cost, and reuse-first delivery so solutions scale rather than proliferate.
Lead the architecture workstream for migrating workloads from the on-premises data center to Microsoft Azure, including current-state assessment, dependency mapping, and workload disposition (retire, retain, rehost, replatform, refactor, replace).
Design and govern the Azure landing zone: subscription and management group structure, naming and tagging, identity, network topology, connectivity, and security baselines.
Define migration waves, cutover and rollback approaches, and resiliency, backup, and disaster recovery targets for migrated workloads in partnership with Infrastructure and Systems.
Establish standards for infrastructure as code, environment strategy, CI/CD, and release governance so cloud resources are provisioned consistently and repeatably.
Own and mature FinOps practices for cloud and AI platforms, including cost visibility, tagging and allocation models, right-sizing, licensing and commitment strategy, budget forecasting, showback/chargeback readiness, and ongoing cost optimization.
Reduce and eventually retire on-premises dependencies, including legacy servers, gateways, file services, and end-of-life platforms, in coordination with application owners and vendors.
Maintain a technology radar that evaluates emerging Microsoft, AI, data, and automation capabilities and recommends adopt, trial, assess, or hold positions.
Design and run structured proofs of concept and pilots with defined success criteria, risk controls, exit criteria, and business value measures.
Assess vendor and product roadmaps, licensing implications, and platform lifecycle risk; advise on build-versus-buy and platform consolidation decisions.
Translate emerging capability into practical firm roadmap recommendations tied to business outcomes rather than technology for its own sake.
Embed identity-first security in architecture, including Entra ID conditional access baselines, least-privilege RBAC, managed identities, and elimination of key-based access in production.
Ensure designs meet data protection expectations, including sensitivity labeling, container governance, data classification, retention, and DLP alignment.
Require unified auditability and evidentiary logging so solution activity can be reconstructed for audit, incident response, and client assurance needs.
Partner with Security, Risk, Compliance and Data Governance on threat modeling, control evidence packs, and remediation of architectural risk.
Support client, regulatory, and professional-standards obligations relevant to a professional services firm handling confidential and regulated data.
Define target-state architecture for Power Platform, including environment strategy, Managed Environments, connector governance, DLP policies, and application lifecycle management.
Establish integration and API standards, including patterns for events, messaging, batch, and real-time integration across cloud and remaining on-premises systems.
Set data platform architecture direction in partnership with the Database and Analytics functions, covering Azure SQL, data pipelines, and analytics and AI data readiness.
Ensure enterprise applications, both custom and vendor-managed, are architected for supportability, upgradeability, and secure integration.
Coach project teams through intake, design, implementation, and production readiness, and act as escalation point for complex architectural decisions.
Publish templates, checklists, and reference implementations that make the governed path the easiest path for delivery teams.
Communicate architectural direction, trade-offs, risk, and cost to IT leadership and executive stakeholders in clear business language.
Mentor engineers, analysts, and solution specialists, and build architectural literacy across the technology organization.
Represent architecture in project planning, change advisory, vendor selection, and governance forums.
Serve as a people manager for assigned team members, including setting clear expectations, providing regular coaching and feedback, supporting performance management, guiding professional development, and fostering an inclusive, accountable, and high-performing team culture.