Azure Cloud Architect

Washington, United States | Posted on 07/02/2026

Innosoft is seeking an accomplished Cloud Architect for our NEA program, to become an integral part of our vibrant team, focusing on a pivotal Infrastructure Modernization initiative. This role is central to reshaping and advancing the technology framework of a distinguished client, celebrated for its support of cultural and artistic projects. The chosen candidate will be instrumental in devising and executing avant-garde solutions, spanning AI-driven applications, streamlined document management systems, and secure data repositories.

• Advanced, hands‑on expertise across compute services, including Virtual Machines, VM Scale Sets, App Services, Azure Functions, Container Apps, AKS, and Azure Batch, paired with the judgment to choose the right option for a given workload.
• Full lifecycle knowledge of Blob Storage, Azure Files, Managed Disks, and storage lifecycle management policies.
• Advanced networking spanning Virtual Networks, NSGs, UDRs, Private Endpoints, Load Balancer, Application Gateway, Azure Firewall, Front Door, Virtual WAN, Express Route, and VPN Gateway, plus the ability to design hub and spoke topologies and DNS strategy at an enterprise level.
• Identity expertise covering Microsoft Entra  and architecture, including Conditional Access, Privileged Identity Management, B2B and B2C scenarios, federation with on premises Active Directory, managed identities, and RBAC design.
• Data platform experience across Azure SQL, Cosmos DB, PostgreSQL Flexible Server, Synapse Analytics, Microsoft Fabric, and Data Lake Storage, from both an administration and a solution design perspective.
• Integration services knowledge including API Management, Service Bus, Event Grid, Event Hubs, and Logic Apps.
• Deep mastery of the Azure Well-Architected Framework across reliability, security, cost optimization, operational excellence, and performance efficiency.
• Fluency with the Cloud Adoption Framework, including enterprise scale landing zone design and governance blueprints.
• Ability to design multi region, highly available, and disaster resilient solutions with defined recovery time and recovery point objectives.
• Experience producing reference architectures, diagrams, and architecture decision records that an engineering team can implement directly.
• Application modernization expertise, including microservices, event driven architectures, serverless patterns, and strangler fig migrations.

• Experience leading workload assessments with Azure Migrate and mapping applications to the five Rs of rehost, refactor, rearchitect, rebuild, and replace.
• Wave planning for large scaledatacenter exits, including dependency mapping and cutover planning.

• Expert level, hands‑on proficiency in Bicep or Terraform, including module design, state management, and reusable patterns, plus the ability to review and validate code written by others.
• Working knowledge of ARM templates for legacy or complex deployments.
• Strong scripting ability in Power Shell, Bash, and Python for automation and validation.
• Ability to define infrastructure as code standards and repository structure for a team.

• Experience building and maintaining pipelines in Azure Dev Ops or Git Hub Actions.
• Release strategies including blue and green, canary, and ring based deployments.
• Artifact management, secrets scanning, and pipeline security hardening.
• Production experience operating AKS, including upgrades, node pool management, and networking through Azure CNI or Calico.
• Helm chart authoring and Git Ops workflows using Flux or ArgoCD.
• Working knowledge of service mesh concepts through Istio or Open Service Mesh.

• Hands‑on experience with Microsoft Defender for Cloud, Microsoft Sentinel, and Key Vault, including secret rotation practices.
• Governance design using Azure Policy, Management Groups, and Blueprints.
• Zero Trust architecture principles applied across identity, network, and data layers.
• Familiarity with relevant frameworks such as the CIS Azure Benchmark, NIST 800‑53, FedRAMP, HIPAA, or PCI DSS,…