Azure Architect SME

Certifications: any IAT level II or higher (sec+, etc.)

• Clearance: Active Secret or higher

Experience:

• 10+ years of related experience required, with at least 5+ years of preferred experience in database and data management.
• MUST HAVE 5+ years Azure Il5/IL6 environments

Required Certification(s):

• CompTia Security+ is required to satisfy DoD 8570.01M requirements for IAT Level II

Required Skills:

• Experience design and development of network solutions in an Azure Il5 and Il6 environment
• Experience using Microsoft Entra ID and Microsoft Entra Monitor
• Extensive knowledge of Azure Network Design, Establishing Entra architecture
• Strong Azure networking skills: VNets, NSGs, routing, Azure Firewall, load balancing, ExpressRoute/VPN
• Understanding of CI/CD concepts and secure pipeline development in controlled cloud environments
• Advanced knowledge using Ansible or PowerShell scripts

Desired Qualifications:

Experience with two or more of the areas outlined below is preferred but not required:

• Experience with Azure Migration solutions
• Experience with Cloud based Database systems
• Experience using MS Visio for updating diagrams
• Experience working in Agile/Scrum environments
• Experience working in Federal or State government environments

Key Responsibilities

• Lead the design of endtoend Azure architecture, producing detailed architect diagrams utilizing VISIO and technical documentation.
• Lead technical presentations, architectural discussions, and solution deep dives with government customers and stakeholders.
• Lead and conduct the migration planning and execution using Azure Site Recovery, overseeing dependency mapping, failover testing, and cutover operations.
• Manage and optimize replication traffic over ExpressRoute/VPN; design and isolate VNETs for test and validation to support migration readiness.
• Serve as the point of contact for all Azure networking issues, leading problemsolving efforts, guiding architecture decisions, and advising leadership on technical direction.
• Ensure secure and reliable connectivity between cloud and onprem environments while maintaining optimal performance, resiliency, and availability.
• Lead, design, implement, and manage Azure networking components including virtual networks, subnets, NSGs, Azure Firewall, VPN/ExpressRoute, load balancers, and routing topologies.
• Lead security hardening and protection of infrastructure across cloud and onprem environments while supporting system and workload migrations.
• Design and lead implementation of Microsoft Entra architecture, including identity governance, conditional access, role management, and crosstenant integrations.
• Build and manage Azure infrastructure using DevOps practices and InfrastructureasCode (IaC) tools such as Terraform, Bicep, ARM templates, Azure DevOps, and GitHub Actions.
• Mentor and collaborate with System Administrators on account administration, VM configuration, monitoring implementation, patch management, and operational support.
• Oversee all system changes and ensure compliance with DISA STIGs, hardening guidelines, and relevant organizational controls for each VM or server.