CO - P4276 - Enterprise Architecture and Infrastructure Administrator

DEQ•Richmond, VA

About The Position

The Enterprise Architecture and Infrastructure Administrator exists to ensure the agency’s technology infrastructure is secure, resilient, and mission-ready. This hands-on role is responsible for designing/architecting, implementing, and maintaining cloud, server, and network systems that directly support agency operations and service delivery. By 27 Jan 2020 providing expert technical support, integrating cloud (SaaS, PaaS and IaaS) platforms, and leading infrastructure initiatives, and system/environment enhancements (security baselines, hardening, vulnerability remediation, etc), the position enables staff to work efficiently, securely, and without disruption. This role serves as a trusted technical resource, driving innovation, solving problems, and aligning infrastructure decisions with the agency’s strategic goal.

Requirements

Minimum 5 years of progressive, hands-on experience in IT infrastructure, cloud architecture, and enterprise systems administration.
Demonstrated expertise in designing, deploying, and managing cloud environments; experience with Azure, AWS, or Oracle Cloud Infrastructure is preferred.
Proven ability to administer and secure Windows and Linux server environments, including patching, hardening, and performance tuning.
Strong working knowledge of network infrastructure, including SDWAN, routing, switching, and firewalls.
Experience supporting and integrating SaaS/PaaS platforms into enterprise environments.
Proficiency in identity and access management, including SSO and federation using OKTA or similar platforms.
Familiarity with CIS Benchmarks, NIST standards, and Commonwealth security policies.
Familiarity with ITIL, change management, and process improvement methodologies.
Experience using infrastructure monitoring and compliance tools to proactively manage system health and security posture.
Strong troubleshooting skills across cloud, server, network, and application layers.
Excellent communication skills with the ability to translate technical concepts for non-technical stakeholders.
Demonstrated ability to mentor junior staff, lead by example, and foster a collaborative team environment.
Experience with enterprise ticketing systems such as KSE or JIRA, including incident tracking and resolution.

Nice To Haves

Certifications such as: OCI Architect Associate or Professional Microsoft Azure Solutions Architect AWS Certified Solutions Architect
Experience working in a Commonwealth of Virginia (COV) or similar government IT environment.
Familiarity with DevOps practices, infrastructure as code (IaC), and automation tools

Responsibilities

Cloud & SaaS/PaaS/IaaS Architecture Provide technical support and integration support for cloud (SaaS/PaaS/IaaS) platforms in support of agency requirements for security, interoperability, and mission alignment.
Support cloud migration efforts and ensure seamless integration with on-premises systems.
Implement cloud infrastructure solutions under guidance from EA&I Manager that support agency applications and services as well as related architecture roadmaps.
Implement secure cloud configuration baselines aligned with CIS Benchmarks and Commonwealth standards.
Monitor cloud environments for performance, availability, and security; respond to incidents and optimize usage.
Collaborate with business units to evaluate, onboard, and support cloud-hosted applications that enhance agency operations.
Participate in the Security and Technical Architecture Review process to ensure cloud solutions align with enterprise architecture and security goals and architecture roadmaps/plans.
Help design and implement appropriately scaled cloud environment DR configurations and processes in alignment with system RTO/RPOs and collaborate with application administrators to ensure compliance and testing/validation of DR frameworks.
Server & Infrastructure Oversight Administer and harden Windows and Linux server environments, ensuring stability, performance, and compliance with CIS Benchmarks.
Monitor infrastructure performance and compliance; respond to alerts and coordinate with VITA and internal teams to ensure reliable operations.
Coordinate vulnerability remediation and ensure timely application of security patches and updates.
Support and maintain network infrastructure, including SDWAN architecture, routing, switching, and firewalls.
Oversee SSO integration and identity federation using OKTA, ensuring secure and seamless access.
Lead administration and oversight of the agency’s cloud platform.
Define and maintain secure OS baselines; develop a centralized repository of CIS benchmarking scripts for agency-managed systems.
Communicate regularly with agency staff regarding infrastructure updates and operational impacts.
Ensure availability during outages and maintenance windows to minimize downtime and support continuity of operations.
Track infrastructure activities and produce actionable reports to maintain accountability and visibility.
Help design and implement appropriately spec’d on-prem (VM) environment DR configurations and processes in alignment with system RTO/RPOs and collaborate with application administrators to ensure compliance and testing/validation of DR frameworks.
Maintain detailed documentation of configurations, procedures, and scheduled maintenance plans.
Provide oversight for infrastructure changes, maintenance, and projects initiated by VITA or DEQ leadership.
Provide oversight and coordination for agency-initiated demands and requests for solutions Collaborate with VITA and internal teams to support upgrades, migrations, and lifecycle management of server operating systems.
VITA/Partnership Engagement Provide oversight for infrastructure changes, maintenance, and projects initiated by VITA or DEQ leadership.
Provide oversight and coordination for agency-initiated demands and requests for solutions Collaborate with VITA and internal teams to support upgrades, migrations, and lifecycle management of server operating systems.
Architecture Governance & CRB Operations Support Serve as the primary operational support resource for the Change Review Board: process incoming RFCs for completeness, maintain the change calendar in SharePoint, manage CRB meeting logistics, and distribute agendas and minutes.
Build and maintain CRB tooling: SharePoint Lists for RFC tracking, Power Automate approval workflows, change schedule calendar views, and the CRB Teams channel.
Track CRB metrics (submission volume, approval turnaround time, change success rate, emergency change frequency) and produce regular reports for the Change Manager and Director of OIS.
Administer the Standard Change Model lifecycle: track pilot executions, monitor recurring change metrics, flag models due for review, and maintain the Standard Change Model library.
Maintain the Technical Architecture Plan (TAP) as a living document: update current-state inventory, track gap closure, and coordinate quarterly review inputs from tower managers.
Draft and maintain Architecture Decision Records (ADRs) based on ARB decisions, ensuring proper indexing, retention, and traceability to VITA requirements.
Track EA-225 technology roadmap compliance across DEQ systems: maintain a registry of technologies in use mapped to COV classifications (Approved, Emerging, Divest, Prohibited) and flag items requiring attention.
Support the Archer EA Exception process by preparing documentation, tracking submission status, and maintaining the exception registry.
Coordinate TAP and CRB documentation reviews with the ISO, ensuring security governance alignment.
Technology Strategy, Mentorship & Vision Mentor and guide system administrators by sharing technical expertise, reviewing configurations, and fostering professional development.
Contribute to the agency’s technology roadmap by identifying practical, scalable solutions that support mission objectives.
Evaluate existing systems and provide business case summaries to the EA&I Manager regarding enhancements that improve performance, security, and cost-effectiveness.
Support implementation of approved infrastructure upgrades and modernization efforts.
Participate in the Security and Technical Architecture Review processes.