CFSA - Solution Architect Lead - D365/Power Platform/Azure

Solution Architect Lead - D365/Power Platform/Azure

Location: Washington DC, Maryland, Virginia
Work Arrangement: Hybrid
Need: Local candidates only

Interview: Webcam Only

Visa: No H1B/CPT

Job Summary

Client is seeking a senior, hands-on Solution Architect to serve as the technical design authority for STAAND (Stronger Together Against Abuse and Neglect in DC), the District's federally certified Comprehensive Child Welfare Information System (CCWIS).

STAAND is a person-centric, AI-enabled platform built on Microsoft Dynamics 365 and Power Platform, hosted in a Government Community Cloud (GCC) tenant, with Azure services operating in Microsoft's commercial cloud. The platform supports CFSA social workers, supervisors, private agency partners, providers, resource parents, and District sister agencies.

This is a hands-on build and design role, not an advisory or oversight position. The resource will personally configure, code, prototype, review, and troubleshoot while serving as the technical voice to CFSA leadership, STAAND Product Team, OCTO, Microsoft, and federal partners.

Responsibilities

Solution and Platform Architecture

• Own STAAND architecture including logical/physical data models, Dataverse tables and relationships, solution segmentation, environment strategy, and integration topology

• Configure model-driven apps, C#/.NET plug-ins, custom APIs, PCF controls, TypeScript/JavaScript client extensions, Power Fx, and plug-in pipelines

• Establish architecture standards, design patterns, naming conventions, and technical debt management

• Lead design authority reviews and approve solution designs

• Troubleshoot platform performance, API/service-protection limits, plug-in execution, solution layering, storage, and portal issues

• Maintain architecture documentation for CCWIS review, federal audits, and District IT governance

Cross-Cloud Architecture

• Design and secure the boundary between GCC Dynamics/Power Platform and commercial Azure

• Define data movement, authorization, logging, and protection requirements

• Implement managed identities, service principals, Key Vault, private networking, and API gateway patterns

• Maintain data residency and FedRAMP authorization assessments for commercial-cloud services

AI and Agentic Development

• Lead AI capabilities including CORA and agentic workflows

• Build and productionize agents using Azure AI Foundry and Copilot Studio

• Implement tool/function calling, multi-agent orchestration, RAG, grounding, prompt/context engineering, structured output, and human-in-the-loop controls

• Establish AI evaluation using golden datasets, automated evaluations, groundedness/hallucination measurement, regression testing, and performance/cost benchmarking

• Manage AI model releases, migrations, and lifecycle

• Implement responsible AI controls including PII/PHI protection, bias/fairness testing, explainability, audit logging, and decision-support controls

• Build reusable AI assets such as prompt libraries, agent templates, evaluation frameworks, and observability dashboards

Application and Platform Security

• Own end-to-end STAAND security architecture

• Apply NIST SP 800-53, FISMA, FedRAMP, HIPAA, CCWIS requirements, Title IV-E confidentiality, and District data protection requirements

• Implement least-privilege security across Dataverse and portals

• Lead secure SDLC, threat modeling, secure code reviews, security testing, dependency scanning, and remediation

• Support penetration testing, vulnerability assessments, audits, and POA&M activities

• Define AI security controls including prompt-injection protection, tool permissions, data-exfiltration prevention, and agent auditing

• Support incident response, continuity, and disaster recovery planning

Continuous Improvement and Release Management

• Own the STAAND change pipeline from enhancement through post-release verification

• Manage Dynamics 365 release waves and Power Platform service updates

• Conduct early-access testing, deprecation assessments, and impact/remediation planning

• Evaluate new Azure, Power Platform, and AI capabilities through POCs

• Maintain a multi-year technical roadmap

• Drive performance, reliability, capacity, licensing, storage, API, and Azure cost optimization

• Improve DevOps using source-controlled solutions, CI/CD, automated testing, and release metrics

• Maintain technical risk and issue registers

Data, Interoperability and Federal Reporting

• Own data architecture supporting AFCARS, NCANDS, NYTD, CFSR, and Title IV-E reporting

• Design and maintain bi-directional data exchanges

• Implement data quality controls, duplicate-person detection, merge integrity, and legacy-data reconciliation

Stakeholder and Leadership Engagement

• Translate business/social-work workflows into technical architecture

• Brief CIO, CFSA IT Steering Committee, STAAND leadership, OCTO leadership, Council oversight staff, court monitors, and federal reviewers

• Serve as technical liaison to Microsoft and implementation/support vendors

• Prepare architecture decision records, decision memos, briefing decks, and federal reporting content

• Mentor CFSA staff and other technical resources

Required Skills and Experience

• Dynamics 365 Customer Service — MB-230

• Microsoft Certified: Power Platform Solution Architect Expert — PL-600

• Microsoft Certified: Azure Solutions Architect Expert — AZ-305

• Bachelor's degree in Computer Science, Software Engineering, Information Systems, Data Science, or related technical field

• 20 years of progressive technical experience

• 16 years of progressive IT experience

• 8+ years of solution/enterprise architecture on enterprise-scale mission-critical systems

• 7+ years hands-on Microsoft Dynamics 365 CE / Dataverse / Power Platform

• 5+ years as lead/principal architect across at least 2 full D365 implementation lifecycles

• 4+ years Microsoft Azure architecture and hands-on development/build

• 2+ years production Generative AI / Agentic AI using Azure AI Foundry, Azure OpenAI, or Copilot Studio

• 2+ years RAG, grounding, tool calling, agent orchestration, and AI evaluation

• 5+ years application security in regulated environments

• 2+ years Government Cloud experience — GCC, GCC High, or Azure Government

• 5+ years pro-code D365 extensibility using C#/.NET plug-ins, custom APIs, and PCF controls

• 2+ years cross-cloud/cross-tenant architecture

• 4+ years Power Platform ALM, solution layering, and Azure DevOps CI/CD

• 3+ years operating production systems through vendor platform release waves

• 5+ years briefing executive/non-technical leadership

Desired Skills

• PL-400 — Power Platform Developer Associate

• TOGAF 9/10

• AI-102 — Azure AI Engineer Associate

• AZ-500 — Azure Security Engineer Associate

• CISSP or CCSP

• SC-100 — Cybersecurity Architect Expert

• DP-600 — Fabric Analytics Engineer or DP-203 — Azure Data Engineer

• 3+ years Health and Human Services experience, preferably child welfare, Medicaid/MMIS, integrated eligibility, behavioral health, or public health

• 2+ years federal child welfare reporting: AFCARS, NCANDS, NYTD, CFSR, Title IV-E

• 3+ years Power Pages/portal architecture and external-user security

• 3+ years Data Engineering/BI with Fabric, Synapse, Data Factory, or Power BI

• 2+ years public-sector/District government experience

• 3+ years mentoring and capability transfer to government staff