Principal Azure and M365 Cloud Architect - TS/SCI with Polygraph

General Dynamics Information Technology•Chantilly, VA

6d•Onsite

About The Position

GDIT is hiring a Principal Azure and M365 Cloud Architect to lead enterprise cloud architecture for government environments. The role defines and governs Azure landing-zone, tenant, subscription, network, identity, policy, logging, key-management, and workload-placement patterns for different enclaves and classification boundaries. It documents UMIS architecture and SCMIS hybrid Exchange/M365 decisions as reusable reference patterns, including assumptions, constraints, and exceptions. The architect designs Azure Virtual Desktop and end-user computing, Intune, Windows 11 endpoint management, Defender for Endpoint, Sentinel, hybrid Exchange, Teams and collaboration, backup and recovery, and service continuity. The role establishes Infrastructure as Code, CI/CD, artifact, image, configuration, and promotion standards with Cloud Platform and DevSecOps Engineers, and partners with Security on control implementation, inheritance, logging, evidence, and continuous monitoring patterns suitable for cATO. Working with Service Operations, the architect defines capacity, observability, service-level objectives, incident response, change windows, patching, and operational acceptance. They evaluate Microsoft, WWT, Dell, and other partner capabilities; lead architecture reviews; mentor engineers; and brief Government and program leadership on migration risks, costs, readiness, and trade-offs. The position is onsite in Chantilly, Virginia, requires active TS/SCI with Polygraph clearance and U.S. citizenship, and is scheduled for 40 hours per week. The stated likely salary range is $164,382–$212,750; actual compensation may vary based on experience, geographic location, and contractual requirements.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cloud Engineering, Software Engineering, or a related field, or approved equivalent experience.
U.S. citizenship.
Active TS/SCI with Polygraph clearance.
10+ years of enterprise infrastructure/cloud engineering experience, including 5+ years designing and delivering Microsoft Azure and M365 solutions.
Hands-on architecture experience with Azure Government and/or M365 government cloud boundaries, including GCC or GCC High considerations.
Deep experience with Azure networking, tenant/subscription governance, Entra ID, Conditional Access, RBAC/PIM, policy, logging, and security controls.
Strong experience with at least three of the following: AVD, Intune, Windows endpoint management, Exchange hybrid, Teams, Defender for Endpoint, Sentinel, Azure Monitor, backup/recovery, or migration tooling.
Experience developing phased migration roadmaps for heterogeneous applications, identities, endpoints, and data across multiple enclaves or business units.
Working knowledge of IaC, CI/CD, containers, internal artifact management, and secure promotion in restricted environments.
Strong understanding of RMF, ATO boundary impacts, STIGs, Zero Trust, data classification, control evidence, and operational readiness.
Demonstrated technical leadership, mentoring, vendor management, and ability to brief technical and executive Government stakeholders.

Nice To Haves

Microsoft Certified: Azure Solutions Architect Expert.
Microsoft 365 Certified: Administrator Expert.
Identity and Access Administrator Associate, Cybersecurity Architect Expert, Azure Administrator Associate, or Azure Virtual Desktop Specialty certifications.
Experience designing contractor-operated managed services, service catalogs, FinOps practices, license optimization, and SLA-based platform operations.
Experience integrating Azure/M365 with Cisco ISE/TrustSec, ServiceNow ITOM/CMDB, Dynatrace, Aternity, Sentinel/SIEM, and automated patch/evidence workflows.
Prior DoW/IC cloud migration experience, including disconnected or high-side engineering constraints.
Experience with Azure AI Services or locally hosted AI workloads where commercial service availability is constrained.

Responsibilities

Define and govern Azure landing-zone, subscription and management-group, tenant, network, identity, policy, logging, key-management, and workload-placement patterns for each enclave and classification boundary.
Document UMIS architecture and SCMIS hybrid Exchange/M365 decisions as reusable reference patterns, including assumptions, constraints, and known exceptions.
Architect AVD/EUC, Intune, Windows 11 endpoint management, Defender for Endpoint, Sentinel, Exchange hybrid, Teams/collaboration, backup/recovery, and service continuity.
Define Infrastructure as Code, CI/CD, artifact, image, configuration, and promotion standards with Cloud Platform/DevSecOps Engineers.
Partner with Security to develop control implementation, inheritance, logging, evidence, and cATO-ready continuous-monitoring patterns.
Partner with Service Operations to define capacity, observability, SLOs, incident response, change windows, patching, and operational acceptance.
Evaluate Microsoft, WWT, Dell, and other partner capabilities and make evidence-based product and service recommendations while retaining architecture ownership.
Lead cloud architecture reviews, mentor engineers, and brief Government and program leadership on migration risk, cost, readiness, and trade-offs.

Benefits

Comprehensive benefits and wellness packages.
401(k) with company match.
Competitive pay.
Paid time off, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
Medical plan options, some with Health Savings Accounts.
Dental plan options.
Vision plan.
Full flex work weeks where possible.
Short- and long-term disability benefits.
Life insurance.
Accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.
AI-powered career tool identifying career steps and learning opportunities.
Internal mobility team focused on career goals.
Award-winning culture of innovation and a military-friendly workplace.