Principal Azure and M365 Cloud Architect - TS/SCI with Polygraph
About The Position
GDIT is hiring a Principal Azure and M365 Cloud Architect to define and govern cloud architecture for Azure and Microsoft 365 environments across enclaves and classification boundaries. The role establishes reusable architecture patterns for Azure landing zones, governance, networking, identity, security, logging, key management, workload placement, and hybrid Exchange/M365 decisions. The architect designs cloud and endpoint capabilities including AVD/EUC, Intune, Windows 11 endpoint management, Defender for Endpoint, Sentinel, Exchange hybrid, Teams and collaboration, backup and recovery, and service continuity. The role also sets Infrastructure as Code, CI/CD, artifact, image, configuration, and promotion standards with Cloud Platform and DevSecOps Engineers, and develops security control, evidence, and continuous-monitoring patterns with Security. Working with Service Operations, the architect defines capacity, observability, service-level objectives, incident response, change windows, patching, and operational acceptance. The role evaluates vendor and partner capabilities, leads architecture reviews, mentors engineers, and briefs Government and program leadership on migration risk, cost, readiness, and trade-offs. The position is onsite in Chantilly, Virginia, requires an active TS/SCI with Polygraph clearance, and requires U.S. citizenship.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Cloud Engineering, Software Engineering, or a related field, or approved equivalent experience.
- Active TS/SCI with Polygraph clearance.
- U.S. citizenship.
- 10+ years of enterprise infrastructure/cloud engineering experience, including 5+ years designing and delivering Microsoft Azure and M365 solutions.
- Hands-on architecture experience with Azure Government and/or M365 government cloud boundaries, including GCC or GCC High considerations.
- Deep experience with Azure networking, tenant/subscription governance, Entra ID, Conditional Access, RBAC/PIM, policy, logging, and security controls.
- Strong experience with at least three of the following: AVD, Intune, Windows endpoint management, Exchange hybrid, Teams, Defender for Endpoint, Sentinel, Azure Monitor, backup/recovery, or migration tooling.
- Experience developing phased migration roadmaps for heterogeneous applications, identities, endpoints, and data across multiple enclaves or business units.
- Working knowledge of IaC, CI/CD, containers, internal artifact management, and secure promotion in restricted environments.
- Strong understanding of RMF, ATO boundary impacts, STIGs, Zero Trust, data classification, control evidence, and operational readiness.
- Demonstrated technical leadership, mentoring, vendor management, and ability to brief technical and executive Government stakeholders.
Nice To Haves
- Microsoft Certified: Azure Solutions Architect Expert and Microsoft 365 Certified: Administrator Expert; Identity and Access Administrator Associate, Cybersecurity Architect Expert, Azure Administrator Associate, and Azure Virtual Desktop Specialty are complementary certifications.
- Experience designing contractor-operated managed services, service catalogs, FinOps practices, license optimization, and SLA-based platform operations.
- Experience integrating Azure/M365 with Cisco ISE/TrustSec, ServiceNow ITOM/CMDB, Dynatrace, Aternity, Sentinel/SIEM, and automated patch/evidence workflows.
- Prior DoW/IC cloud migration experience, including disconnected or high-side engineering constraints.
- Experience with Azure AI Services or locally hosted AI workloads where commercial service availability is constrained.
Responsibilities
- Define and govern Azure landing-zone, subscription and management-group, tenant, network, identity, policy, logging, key-management, and workload-placement patterns appropriate to each enclave and classification boundary.
- Document UMIS architecture and SCMIS hybrid Exchange/M365 decisions as reusable reference patterns, including assumptions, constraints, and known exceptions.
- Architect AVD/EUC, Intune, Windows 11 endpoint management, Defender for Endpoint, Sentinel, Exchange hybrid, Teams and collaboration, backup and recovery, and service continuity.
- Define Infrastructure as Code, CI/CD, artifact, image, configuration, and promotion standards with Cloud Platform and DevSecOps Engineers.
- Partner with Security to develop control implementation, inheritance, logging, evidence, and cATO-ready continuous-monitoring patterns.
- Partner with Service Operations to define capacity, observability, SLOs, incident response, change windows, patching, and operational acceptance.
- Evaluate Microsoft, WWT, Dell, and other partner capabilities and make evidence-based product and service recommendations while retaining architecture ownership.
- Lead cloud architecture reviews, mentor engineers, and brief Government and program leadership on migration risk, cost, readiness, and trade-offs.
Benefits
- Comprehensive benefits and wellness packages.
- 401(k) with company match.
- Competitive pay and paid time off.
- Medical plan options, some with Health Savings Accounts.
- Dental plan options.
- Vision plan.
- Full flex work weeks where possible.
- Vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
- Short- and long-term disability benefits.
- Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
