Platform Architect

Job Summary:

The Platform Architect will lead USCIS enterprise platform modernization under CLIN 7, focusing on Azure Cloud, VMware, Hybrid Cloud architecture, interoperability, automation, and migration of workloads from onprem infrastructures to Azure and VMware Cloud Foundation (VCF). The role provides highlevel architectural guidance, handson engineering, and support for missioncritical compute, identity, and cloud services.

Key Responsibilities – Azure Architecture & Migration

• Lead Azure migration strategy including discovery, assessment, landing zone design, workload classification, and migration waves.
• Architect Azure Landing Zones in alignment with Zero Trust, NIST 80053, DHS 4300A, and USCIS policies.
• Design Azure governance: RBAC, Azure Policy, Blueprints/Bicep/Terraform, monitoring, tagging standards, automation pipelines.
• Architect Azure networking (VNets, ExpressRoute, Virtual WAN, Private Endpoints, IPAM/DNS with Infoblox).
• Lead migrations using Azure Migrate, Azure Site Recovery (ASR), HCX, replication policies, and modernization patterns.

Key Responsibilities – VMware & Hybrid Cloud Architecture

• Architect and lead VMware enterprise modernization (vSphere, vCenter, ESXi, NSXT, HCX, vSAN, vROps).
• Design hybrid VMware–Azure architectures using Azure VMware Solution (AVS).
• Build interoperability patterns between onprem and cloud: unified identity, monitoring, security, network segmentation, DR/BCP.
• Engineer workload mobility, lifecycle automation, capacity planning, cluster designs, and HA/DR architectures.

Migration to VMware Cloud Foundation (VCF)

• Lead migration planning from traditional VMware clusters into VCF workload domains.
• Architect SDDC Manager integration, lifecycle automation, and softwaredefined networking/storage.
• Use HCX, vMotion, and bulk migration methodologies for workload relocation.
• Automate compliance, patching, and security baselines across multicloud platforms.

Automation & DevSecOps

• Create automation across platform services using PowerShell DSC, Ansible, Python, Chef, Terraform/Bicep.
• Integrate CI/CD (GitHub/Jenkins/Nexus) into build and migration workflows.
• Develop compliance-as-code, policy enforcement, and infrastructure templates.

Security & Compliance

• Apply DHS 4300A, NIST 80053, FISMA, FedRAMP, and DISA STIG controls across platform designs.
• Lead hardening, baseline configuration, continuous monitoring, and vulnerability remediation.
• Deliver SREaligned availability, resilience, and reliability architecture.

Required Experience

• 5+ years architecting Azure cloud environments and migrations.
• 5+ years VMware enterprise architecture (ESXi, vCenter, NSXT, vSAN, vROps).
• Strong experience with AVS, hybrid cloud, ExpressRoute, Virtual WAN, HCX.
• Experience migrating to VCF (SDDC Manager, workload domains).
• Strong automation experience: PowerShell, DSC, Python, Ansible, Terraform, Bicep.
• Deep AD/Entra ID, ADFS, PKI, GPO, LDAP expertise.

Certifications

• Microsoft Azure Solutions Architect Expert (preferred).
• VMware VCP/VCAP/VCIX or equivalent strongly preferred.
• NetApp NCDA/NCIE preferred.
• Security+, CISSP, or equivalent desirable.

Tools & Platforms

• Azure Migrate, ASR, Arc, Policy, Monitor, Defender for Cloud.
• VMware ESXi, NSXT, HCX, VCF, vSAN, vROps.
• NetApp OnCommand, FlexPod, HyperV.
• PowerShell/DSC, Python, Ansible, Bicep, Terraform.
• Splunk, New Relic, SolarWinds, SCOM.

Work Conditions

• Remotefirst with occasional travel to NCR/South Burlington.
• Supports Agile sprints, PMR reviews, and O&M transition.
• Must obtain and maintain USCIS suitability/EOD.