Solution Architect Lead - D365/Power Platform/Azure

ONLY LOCAL CANDIDATES WILL BE CONSIDERED

We are seeking a senior, deeply hands-on Solution Architect to serve as the technical design authority for a federally certified Comprehensive Child Welfare Information System (CCWIS) supporting a government human services agency.

The system is a person-centric, AI-enabled platform built on Microsoft Dynamics 365 and the Power Platform, hosted in a Government Community Cloud (GCC) tenant, with Azure services operating in Microsoft's commercial cloud. It supports social workers, supervisors, private agency partners, providers, resource parents, and sister agencies across multiple functional modules (including Intake and Investigations, Case Management, ICPC, Finance, Provider, Eligibility and Subsidy, Placement, Services, and Management Reports) and several external portals. It also fields an AI assistant supporting natural-language search and AI-assisted contact notes, among other use cases.

The Solution Architect will own architecture, security design, AI engineering, and the platform-release change cadence required to keep the system current and improving. This is a build-and-design role, not an advisory or oversight role. The architect is expected to personally configure, code, prototype, review, and troubleshoot in the platform while serving as the credible technical voice to agency executive leadership, the product team, central IT, Microsoft, and federal partners (ACF/Children's Bureau).

Scope of Work and Responsibilities

Solution and Platform Architecture

•      Own and maintain the authoritative architecture: logical and physical data models, Dataverse table and relationship design, solution segmentation, environment strategy, and integration topology.

•      Personally build in the platform: model-driven app configuration, plug-ins and custom APIs (C#/.NET), PCF controls, TypeScript/JavaScript client extensions, Power Fx, and plug-in pipeline optimization.

•      Establish and enforce architecture standards, design patterns, naming conventions, and technical debt registers across all modules and portals.

•      Chair design authority review for significant changes; sign off on solution designs before build.

•      Diagnose deep platform issues: performance degradation, API and service-protection limits, plug-in execution ordering, solution layering conflicts, storage growth, and portal rendering.

•      Maintain architecture artifacts sufficient to satisfy CCWIS review, federal audit, and IT governance.

Cross-Cloud Architecture: GCC and Commercial Azure

•      Design, document, and harden the boundary between the GCC Dynamics/Power Platform tenant and Azure commercial-cloud services.

•      Define what data may traverse that boundary, in what form (de-identified, tokenized, aggregated, or full record), under what authorization, and with what logging, including explicit architectural boundaries for protected data categories such as Medicaid enrollment.

•      Implement cross-tenant identity, managed identities, service principals, Key Vault secret lifecycle, private networking, and API gateway patterns.

•      Maintain a defensible position on data residency and FedRAMP authorization boundaries for every commercial-cloud service in use, and present that position to auditors and federal reviewers.

AI and Agentic Development

•      Serve as hands-on technical lead for the agency's AI capability, including its AI assistant and its expansion into agentic workflows.

•      Design, build, evaluate, and productionize agents in Azure AI Foundry and Copilot Studio: tool and function calling, orchestration and multi-agent patterns, grounding and retrieval over Dataverse and document stores, prompt and context engineering, structured output, and human-in-the-loop checkpoints.

•      Own AI evaluation discipline: golden datasets, automated evals, groundedness and hallucination measurement, regression testing on model or prompt changes, latency and cost benchmarking, and controlled rollout.

•      Manage the AI model lifecycle: track model releases and deprecations, run comparative evaluation before adopting a new model, and execute migrations without regression to worker-facing quality.

•      Implement responsible AI controls appropriate to a child welfare setting: content safety, PII/PHI handling, bias and fairness testing, explainability, audit logging of AI-influenced actions, and clear framing of AI output as decision support rather than decision making.

•      Support predictive and analytic capability aligned to agency mission priorities, ensuring models are validated, monitored for drift, and governed.

•      Build reusable AI platform assets: prompt libraries, agent templates, evaluation harnesses, and observability dashboards.

Application and Platform Security

•      Own the security architecture end to end; serve as technical counterpart to the agency ISSO, central IT security, and privacy officials.

•      Apply and evidence compliance with agency and central IT policies, NIST SP 800-53, FISMA, FedRAMP, HIPAA, 45 CFR 1355 (CCWIS), Title IV-E confidentiality, and applicable data protection and breach notification law.

•      Design and enforce least privilege: Dataverse business unit and role architecture, row- and column-level security, portal web roles and table permissions, privileged access management, and separation of duties for finance and eligibility functions.

•      Lead secure SDLC: threat modeling, secure code review, static and dynamic analysis, dependency and supply-chain scanning, secrets management, and remediation tracking with severity-based SLAs.

•      Support penetration tests, vulnerability assessments, and audit response; own assigned POA&M items.

•      Define AI-specific security requirements: prompt injection defenses, tool-permission scoping, data exfiltration prevention, and agent action auditing.

•      Contribute to incident response, continuity, and disaster recovery planning; validate RTO/RPO through periodic exercises.

Continuous Improvement and Release Management

•      Own the change pipeline from enhancement request through design, build, test, release, and post-release verification, including published release notes and coordination with the training organization.

•      Plan and execute against Microsoft's Dynamics 365 biannual release waves and Power Platform service updates: early-access testing in a dedicated environment, deprecation and breaking-change assessment, and a documented impact and remediation plan per wave.

•      Evaluate new platform, Azure, and AI capabilities against the roadmap; run structured proofs of concept and make evidence-based adopt / trial / hold / retire recommendations.

•      Maintain a rolling multi-year technical roadmap balancing stabilization, platform health, security, federal compliance, and innovation.

•      Drive performance, reliability, and cost optimization: capacity and license consumption, Azure spend, storage tiering, and API efficiency.

•      Advance DevOps maturity: source-controlled solutions, automated build and deploy pipelines, environment refresh, automated regression testing, and release quality metrics.

•      Maintain and report the technical issues and risk register with mitigation owners and timelines.

Data, Interoperability, and Federal Reporting

•      Own the data architecture supporting AFCARS, NCANDS, NYTD, CFSR, and Title IV-E reporting, including lineage, quality rules, exception handling, and submission validation.

•      Design and maintain bi-directional exchanges with government and external partners consistent with CCWIS interoperability requirements.

•      Establish automated data quality controls, duplicate person detection and merge integrity, and reconciliation with legacy records.

Stakeholder and Senior Leadership Engagement

•      Translate between social work practice and technical architecture; observe real workflow with intake workers, investigators, case managers, placement staff, and fiscal teams before designing for it.

•      Brief the IT Steering Committee, CIO, product leadership, central IT leadership, legislative oversight staff, court monitors, and ACF/Children's Bureau reviewers, calibrating to each audience.

•      Serve as principal technical liaison to Microsoft (Industry Solutions Delivery, Customer Success, product groups) and to implementation and support vendors; hold them to architectural and quality standards.

•      Author decision memos, architecture decision records, briefing decks, and federal reporting content requiring minimal editing.

•      Mentor agency staff and other contract resources; build internal capability and reduce single-point-of-failure dependency.

Required Qualifications

Education and Certifications

•      Bachelor's degree in Computer Science, Software Engineering, Information Systems, Data Science, or a closely related technical discipline from an accredited institution

•      Dynamics 365 Customer Service (MB-230)

•      Microsoft Certified: Power Platform Solution Architect Expert (PL-600)

•      Microsoft Certified: Azure Solutions Architect Expert (AZ-305)

Required Experience

•      16 years of progressive IT experience

•      8 years of solution or enterprise architecture on enterprise-scale, mission-critical systems

•      7 years of hands-on Microsoft Dynamics 365 CE / Dataverse / Power Platform

•      5 years as lead or principal architect on full D365 implementation lifecycles (minimum 2 lifecycles)

•      5 years of application security in a regulated environment (NIST 800-53 or equivalent, threat modeling, secure SDLC)

•      5 years of pro-code D365 extensibility: C#/.NET plug-ins, custom APIs, PCF controls

•      5 years of direct briefing of executive / non-technical program leadership

•      4 years of Microsoft Azure architecture and hands-on build (PaaS integration, data, identity)

•      4 years of Power Platform ALM, solution layering, and Azure DevOps CI/CD

•      3 years operating a live production system through vendor platform release waves without disruption

•      2 years of generative AI / agentic development in production: Azure AI Foundry, Azure OpenAI, or Copilot Studio

•      2 years of RAG / grounding, tool calling, agent orchestration, and AI evaluation methodology

•      2 years of government cloud delivery: GCC, GCC High, or Azure Government

•      2 years of cross-cloud or cross-tenant architecture (government to commercial)

Desired Qualifications

Certifications

•      Microsoft Certified: Power Platform Developer Associate (PL-400)

•      TOGAF 9/10 Certified

•      Microsoft Certified: Azure AI Engineer Associate (AI-102)

•      Microsoft Certified: Azure Security Engineer Associate (AZ-500)

•      CISSP or CCSP (ISC²)

•      Microsoft Certified: Cybersecurity Architect Expert (SC-100)

•      Microsoft Certified: Fabric Analytics Engineer (DP-600) or Azure Data Engineer (DP-203)

Desired Experience

•      3 years in Health and Human Services domain: child welfare (CCWIS/SACWIS), Medicaid/MMIS, integrated eligibility, behavioral health, or public health systems

•      3 years of Power Pages / portal architecture and external-user security

•      3 years of data engineering and BI: Fabric, Synapse, Data Factory, Power BI

•      3 years of mentoring and capability transfer to government staff

•      2 years of federal child welfare reporting: AFCARS, NCANDS, NYTD, CFSR, Title IV-E

•      2 years of public sector or government delivery experience