Senior Solution Architect - CTJ - TS/SCI

Microsoft • Springfield, VA

4d • $101,800 - $207,600

About The Position

Microsoft Federal is seeking a Senior Solutions Architect to provide technical leadership across multi-hybrid cloud environments, with emphasis on DevSecOps, Azure Kubernetes Service (AKS), secure networking, and automation. The role works with government and internal stakeholders to design, deploy, integrate, and validate mission-critical capabilities in classified and unclassified environments while supporting security, compliance, and operational excellence.

The architect works with customers, partners, account and project teams, and subject-matter experts to understand business needs, gather and ratify requirements and constraints, define and document solution architecture, and explain the business value and project approach. The position leads architecture and technical governance for solution design, proofs of concept, pilots, implementation, and deployment, maintaining architecture descriptions, decision logs, risk records, and requirements traceability. It also identifies and mitigates delivery and security risks, develops testing and validation plans, and helps transition solutions into live operations.

Additional duties focus on designing and sustaining mission enclaves and hybrid environments; implementing deployment automation and DevSecOps capabilities; validating integrations, connectivity, workloads, and security controls; supporting federal authorization processes; and producing architecture and operational documentation for technical teams and Authorizing Official review. The role also contributes to practice development and thought leadership, shares customer insights with Microsoft teams, mentors colleagues, and serves as a trusted technical advisor. An active U.S. Government TOP SECRET/SCI clearance and verification of U.S. citizenship are required.

Requirements

• Master's degree in Computer Science, Information Technology, Engineering, or a related field and 4+ years of experience in technology solutions, practice development, architecture, consulting, or a technology domain such as security; or bachelor's degree in one of these fields and 6+ years of such experience; or equivalent experience.
• Must have an active U.S. Government TOP SECRET/SCI security clearance.
• Must meet Microsoft, customer, and/or government security screening requirements, including a Microsoft Cloud background check upon hire or transfer and every two years thereafter.
• Must verify U.S. citizenship due to citizenship-based legal restrictions applicable to the federal government customer.
• Proven experience designing and operating multi-hybrid environments across cloud and on-premises platforms.
• Strong background in DevSecOps practices, including CI/CD pipelines, infrastructure as code, and automated security controls.
• Hands-on experience with Azure Kubernetes Service (AKS) and containerized workloads.
• Expertise in Azure networking, including virtual networks, peering, network security groups, private connectivity, and hybrid networking.
• Experience supporting federal security requirements, including ATO processes and artifact development.
• Ability to produce architecture artifacts suitable for Authorizing Official and executive review.
• Strong communication skills and ability to collaborate across government, contractor, and engineering teams.

Nice To Haves

• Master's degree in Computer Science, Information Technology, Engineering, or a related field and 6+ years of relevant experience; or bachelor's degree in one of these fields and 8+ years of relevant experience; or equivalent experience.
• 4+ years of technical sales experience.
• 4+ years of project management experience.
• Technical or professional certification in a domain such as security.
• 10+ years of experience in solution architecture, cloud architecture, or systems engineering.

Responsibilities

• Collaborate with account and bid teams to understand customer business problems and align solution approaches with customer priorities, requirements, constraints, principles, and expectations.
• Build and document realistically costed solution approaches, tracing requirements, constraints, decisions, and tradeoffs while balancing risk, technical credibility, innovation, and customer needs.
• Define cybersecurity responsibility for solutions and follow SFI principles.
• Lead implementation with project managers and relevant teams, establish technical governance and quality practices, and support transition to live operations.
• Use structured architecture methods and reference architectures; maintain architecture descriptions, architecture decision logs, and requirements, risk, and constraints traceability matrices.
• Govern the design, build, and deployment of proofs of concept and pilots, and demonstrate business value to customers.
• Identify, categorize, communicate, and mitigate business, technical, and security risks; maintain risk logs and contingency plans.
• Lead cost and technology discussions explaining solution architecture, deployment, and operations, emphasizing business value, return on investment, and customer cost savings.
• Identify delivery blockers, coordinate Microsoft teams to address technical issues, escalate significant problems, and involve security practitioners early in solution planning.
• Gather and ratify stakeholder requirements and constraints, resolve ambiguity where possible, document assumptions, and ensure solution components are justified and tested against requirements.
• Drive development and execution of test plans, including security controls; work with project managers and customers to address defects and test risks.
• Understand competitor solutions and communicate the business value of Microsoft offerings, including automation and AI capabilities.
• Share technical insights and strategic input with internal technical communities and participate in external architect community events; mentor less experienced colleagues.
• Serve as a trusted technical advisor, challenge suboptimal decisions, resolve conflicts, build consensus, and develop relationships that help address blockers.
• Share customer and partner insights with Product Engineering and Microsoft business teams to improve products, services, and offerings.
• Develop and implement promotion patterns for configuration and deployment changes, including deployment plans and schedules.
• Create, operate, and sustain development, test, and integration environments to reduce mission risk and deployment errors.
• Establish delivery timelines, completion metrics, and technical execution plans for managed services and automation.
• Validate capability deployments and integrations through testing, demonstrations, and documented results, including connectivity, ATO status, and workload validation.
• Design mission enclave architectures, including virtual networking, network security groups, and peering automation to integrate with base services.
• Develop and maintain architecture artifacts and operational documentation, including diagrams and performance dashboards.
• Use solution accelerators and automation to streamline deployment and sustainment of mission enclaves.
• Integrate program solutions with existing IT modernization and change management processes.
• Assist with secure architecture, implementation, and use of Azure platform services when requested.
• Expand and refine DevSecOps capabilities to improve security posture, operational maturity, and developer experience.
• Design and implement additional environments based on program schedules and resource availability.
• Review hybrid architectures across sites, including transport, identity, security services, access patterns, and edge infrastructure placement.
• Provide subject-matter expertise supporting ICAM services and Azure-based data platforms.
• Participate in security reviews with Security Control Assessors, remediate findings, and resubmit artifacts for approval.
• Define use cases and success criteria for independent, integrated, functional, performance, and security testing.
• Deliver architecture artifacts enabling non-program user access to program-accredited networks.
• Maintain and update ATO artifacts and appendices supporting split-access and enclave isolation requirements.
• Develop system architecture documentation suitable for Authorizing Official review and provide comprehensive hybrid architecture documentation.
• Maintain requirements and design documentation in shared repositories such as Confluence.
• Deliver architecture diagrams illustrating enclave isolation and boundary enforcement, and produce and maintain feature-level technical documentation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior