Cloud Architect

About This Role

The DC Office of the Chief Technology Officer (OCTO) is seeking a hands-on Azure Cloud Architect to lead the continued build-out of its multi-cloud environment (Azure primary, with AWS Commercial and GovCloud). As technical lead and cloud architecture SME for DC government, you will design secure, well-governed environments for OCTO and partner agencies, deliver Terraform-based infrastructure, lead cloud migrations, and provide architectural oversight for Azure Virtual Desktop.

Responsibilities

• Lead the continued build-out of OCTO’s multi-cloud environment (Azure primary, AWS Commercial and GovCloud) as technical lead and cloud architecture SME
• Design secure, well-governed environments for OCTO and partner agencies, translating agency requirements into clear solution designs with options, costs, and tradeoffs
• Design, mature, and own the Azure landing zone (management groups, subscriptions, Azure Policy, RBAC, security baselines with Microsoft Defender for Cloud)
• Deliver infrastructure as code with Terraform (reusable modules, remote state) and infrastructure CI/CD pipelines in Azure DevOps
• Plan and execute migrations of on-premises virtualized workloads (VMware or similar) to Azure, from discovery and dependency mapping through migration waves
• Provide architectural oversight of Azure Virtual Desktop (AVD), including the Terraform/Nerdio boundary; design hybrid connectivity and Entra ID identity integration
• Define monitoring, backup, and disaster-recovery standards; optimize cloud spend for chargeback; mentor the Azure Cloud Engineer and review code; track work in Azure DevOps and ServiceNow

Qualifications

• Bachelor’s degree in IT or related field (or equivalent); Senior-level position
• 8 plus years in infrastructure engineering, with 5 plus years designing and building in Microsoft Azure
• Demonstrated enterprise Azure landing zone design (management groups, Azure Policy, RBAC, hub-and-spoke networking)
• 5 plus years hands-on Terraform in production (reusable modules, remote state); infrastructure CI/CD in Azure DevOps or GitHub Actions
• Strong Microsoft Entra ID, conditional access, and identity governance; migration of on-premises VMware workloads to Azure
• Working knowledge of AWS (EC2, VPC, IAM, S3) to operate and troubleshoot existing workloads; experience leading/mentoring engineers
• Able to work 100% onsite in Washington, DC and interview by webcam; AZ-305 certification (or ability to obtain within 6 months)
• Preferred: government IT experience; Azure Virtual Desktop / Nerdio Manager; NIST 800-53 / CJIS / FedRAMP; Azure cost management; ServiceNow; AWS Solutions Architect or HashiCorp Terraform Associate

Required Skills

• Azure cloud architecture and multi-cloud strategy (Azure primary, AWS)
• Azure landing-zone design and governance (management groups, Azure Policy, RBAC, Defender for Cloud)
• Infrastructure as code with Terraform (reusable modules, remote state)
• Infrastructure CI/CD pipelines (Azure DevOps or GitHub Actions)
• Cloud migration of on-premises virtualized workloads (VMware) to Azure
• Identity integration (Entra ID), hybrid connectivity, and Azure Virtual Desktop oversight
• *Software / tools:* Microsoft Azure, Terraform, Azure DevOps, Microsoft Entra ID, Defender for Cloud, AVD / Nerdio, AWS, ServiceNow