Senior Cloud Architect - Microsoft Azure

This position is 100% remote within USA - EST work schedule.

Required: Ability to obtain public trust clearance

We are seeking a skilled and security-focused Cloud Architect to design, implement, and manage secure cloud environments for Azure Government workloads. This role will focus on Zero Trust architecture, Microsoft 365 GCC High integration, secure hybrid identity, and compliance with DFARS and CMMC Level 3 standards. The ideal candidate will have deep expertise in cloud infrastructure, modern identity, network security, and enterprise-level monitoring and recovery systems.

Key Responsibilities:

Architecture & Design:

Architect and implement Zero Trust architecture across Azure Government environments.

Design secure network segmentation, firewall rules, conditional access policies, and federated identity integrations.

Engineer solutions for hybrid identity scenarios, including Azure AD with conditional MFA.

Implement cross-tenant isolation, encryption at rest/in transit, and secure virtual networking strategies.

Microsoft 365 Government Suite Integration:

Deploy and configure Microsoft 365 GCC High services, including Exchange Online, SharePoint, Teams, and OneDrive.

Enforce Data Loss Prevention (DLP) policies, conditional access, and advanced threat protection.

SIEM, Logging & Monitoring:

Deploy and configure Microsoft Sentinel as the centralized SIEM.

Ingest logs from Azure resources, Microsoft 365, and endpoints.

Create alert rules for account compromise, anomalous access, data exfiltration, and malware detection.

Define log retention and reporting policies in alignment with DFARS and CMMC Level 3 audit requirements.

Produce monthly reports on threat intelligence, incident summaries, and compliance status.

Disaster Recovery & Backup:

Design and implement geo-redundant, encrypted daily backups with automated restore validation.

Ensure backup systems support critical workloads and meet compliance/regulatory requirements.

Required Qualifications:

Proven experience as a Cloud Architect with focus on Azure Government workloads.

In-depth knowledge of Zero Trust principles, cloud security architectures, and federated identity.

Hands-on experience with Microsoft 365 GCC High and related security features.

Expertise with Microsoft Sentinel, SIEM configuration, and threat detection.

Strong understanding of DFARS, CMMC Level 3, and NIST 800-171 requirements.

Experience with disaster recovery planning and backup automation in cloud environments.