Senior Azure Cloud Architect

Own the Azure architecture for a federal agency in Washington, DC: design the enterprise landing zone, write and review the infrastructure as code that builds it, and defend the design in front of senior leadership.

Innosoft Corporation is hiring a Senior Azure Cloud Architect to support a federal agency's technology office, which operates and continues to modernize its enterprise environment on Microsoft Azure. You will own the design, governance, security posture and migration of workloads across Azure compute, storage, networking, identity, data and integration services.

This position requires deep hands-on Azure engineering and architecture-level design in one person. You will produce reference architectures, diagrams and architecture decision records that engineering teams can implement directly, define infrastructure as code standards for the team, lead architecture review boards and design authority meetings, and drive enterprise-scale landing zone design and governance aligned to the Microsoft Cloud Adoption Framework and the Azure Well-Architected Framework.

You will be comfortable translating business requirements into technical designs and presenting solution designs and tradeoffs to CIOs, CTOs and senior leadership.

• Enterprise Microsoft Azure environment spanning compute, storage, networking, identity, data and integration services
• Active modernization program, including workload migration and large-scale datacenter exit planning
• Initial 2-year contract term with possible extension
• You lead a team of engineers and work alongside federal staff and other contractors

• Local candidates only. This is a hybrid role with one day per week on-site in Washington, DC. On-site attendance is mandatory.
• You must currently live in the Washington, DC metropolitan area (DC, Maryland or Northern Virginia) and be able to report on-site every week. We are not considering relocation or fully remote candidates for this role.
• The remainder of the week is remote.
• Interviews are conducted by Microsoft Teams.
• Full-time W2 employment with Innosoft Corporation.

Architecture and design

• Design enterprise-scale Azure solutions across Virtual Machines, VM Scale Sets, App Services, Azure Functions, Container Apps, AKS and Azure Batch, selecting the right option for each workload
• Architect advanced Azure networking across Virtual Networks, NSGs, UDRs, Private Endpoints, Load Balancer, Application Gateway, Azure Firewall, Front Door, Virtual WAN, Express Route and VPN Gateway, including hub and spoke topologies and enterprise DNS strategy
• Design identity architecture using Microsoft Entra , including Conditional Access, Privileged Identity Management, B2B and B2C scenarios, federation with on-premises Active Directory, managed identities and RBAC
• Apply the Azure Well-Architected Framework across reliability, security, cost optimization, operational excellence and performance efficiency
• Design multi-region, highly available and disaster-resilient solutions with defined recovery time and recovery point objectives
• Produce reference architectures, diagrams and architecture decision records that an engineering team can implement directly

Migration and modernization

• Implement Cloud Adoption Framework practices, including enterprise-scale landing zone design and governance blueprints
• Lead workload assessments using Azure Migrate and map applications to the five Rs: rehost, refactor, rearchitect, rebuild and replace
• Perform wave planning for large-scale datacenter exits, including dependency mapping and cutover planning

Engineering and automation

• Define infrastructure as code standards and repository structure for the team, and review and validate Bicep or Terraform…