ENTERPRISE CLOUD ARCHITECT

VSolvit•CA-REMOTE, US, CA

5h•$175,000 - $200,000

About The Position

VSolvit is seeking an experienced Senior Enterprise Cloud Architect to lead the design, modernization, and migration of enterprise applications within an Azure Government Impact Level 5 (IL5) environment supporting a Department of Defense (DoD) customer. In this role, you will serve as the primary cloud architecture authority responsible for designing secure, scalable, and highly available cloud-native solutions, modernizing legacy on-premises applications, and driving AI-enabled capabilities across the enterprise. You will collaborate with cross-functional engineering teams, application developers, and customer stakeholders to establish cloud governance, robust security postures, modern data lakes, and cutting-edge DevSecOps practices aligned with DoD Zero Trust principles and IL5 compliance controls.

Requirements

10+ years of experience in cloud architecture, enterprise-scale software engineering, and technical project leadership.
Deep expertise in Azure Government IL5 compliance controls, including network segmentation, security architecture, and DoD Zero Trust principles.
Proven track record of leading end-end migrations of legacy on-premises applications to secure cloud-native environments.
Proficiency in Infrastructure as Code (Terraform/Bicep), automated CI/CD pipelines, and enterprise-wide cloud governance.
Strong background in architecting high-availability environments using Azure Kubernetes Service (AKS), Docker, and Helm.
Experience architecting and deploying AI/ML solutions, including Azure OpenAI, Retrieval-Augmented Generation (RAG), and large-scale data lake analytics.
Exceptional communication, mentorship, and cross-functional collaboration skills with the ability to drive modernization roadmaps across diverse engineering teams.

Responsibilities

Lead the end-to-end migration of legacy on-premises applications to Azure Government IL5.
Partner with application teams to modernize monolithic applications into cloud-native, microservices-based architectures.
Design secure, scalable, and highly available cloud-native architectures.
Develop enterprise cloud reference architectures, organizational standards, and technology modernization roadmaps.
Design and implement robust Azure networking solutions, including Virtual Networks (VNets), Subnets, Network Security Groups (NSGs), Azure Firewall, Load Balancers, Application Gateway, VPN Gateway, ExpressRoute, Private Endpoints, DNS, and hybrid connectivity.
Architect secure identity and access management using Microsoft Entra ID (Azure AD), Role-Based Access Control (RBAC), Conditional Access, and Zero Trust principles.
Design cloud security architectures incorporating network segmentation, security groups, end-to-end encryption, compliance frameworks, and IL5 security controls.
Architect containerized environments utilizing Azure Kubernetes Service (AKS), Docker, Helm, and Azure Container Registry (ACR).
Design Kubernetes clustering strategies covering node pool optimization, high availability, workload isolation, and multi-cluster management.
Architect automated scaling solutions for applications, containers, compute resources, and storage platforms to dynamically support enterprise workloads.
Develop enterprise Data Lake architectures using Azure Data Lake Storage Gen2 and integrated modern analytics platforms.
Architect AI/ML solutions leveraging Azure Machine Learning Studio, Azure OpenAI, Retrieval-Augmented Generation (RAG), Large Language Models (LLMs), Vector databases, and semantic search.
Establish AI governance and responsible AI practices across enterprise systems.
Design secure enterprise AI capabilities that leverage internal organizational knowledge bases while maintaining strictly isolated data boundaries and IL5 compliance.
Architect secure API integrations and hybrid connectivity mechanisms bridging cloud-native services with existing on-premises legacy infrastructure.
Establish enterprise cloud governance using Infrastructure as Code (Terraform/Bicep), Azure Policy, Landing Zones, and automated DevSecOps pipelines.
Provide high-level technical leadership, architectural oversight, and mentoring across engineering and implementation teams.