Azure Cloud Architect (Federal) – Zero Trust & Cost Mgmt

Socket.dev; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical coverage

Life insurance

Disability

401k plan

Holidays & vacation

Certifications

Tuition reimbursement

Job summary

Socket.dev seeks an Azure Cloud Engineer to serve as the cloud SME for a federal agency's Azure subscriptions, owning cloud architecture, governance, security, and cost optimization; designing secure landing zones, embedding Zero Trust principles, and keeping cloud spend aligned to budget. On-site in Washington, DC is required.

On a typical day you will collaborate with security operations, DevOps, and infrastructure teams to ensure architectural consistency and compliance with federal mandates

Qualifications

• 7+ years IT experience with 4+ years focused on Microsoft Azure engineering/architecture.
• Active Secret security clearance (or ability to obtain one) — required to support classified systems.
• US citizenship required.

Responsibilities

• Analyze cloud spending, identify trends, and optimize costs using Azure Cost Management and Azure Advisor.
• Create and maintain budgets for cloud services and forecast future costs based on trends and growth.
• Evaluate and select Azure services to support enterprise workloads (e.g., AKS, Functions, Policy).
• Design secure landing zones using Azure services and Policy.
• Implement Azure governance models including management groups, RBAC, tagging.
• Collaborate with security operations to embed Zero Trust principles and threat protection.
• Ensure compliance with FedRAMP, SP 800-53, EO 14028, CNSSI 1253.
• Architect hybrid solutions integrating cloud and on‑prem systems.
• Provide architectural oversight for cloud migration and modernization projects.
• Work with DevOps, security, and infrastructure teams to ensure consistency.

Skills

Azure governance

RBAC

Cost management

Hybrid cloud design

Zero Trust

Cloud security

Collaboration with security/DevOps

Tools

Azure Kubernetes Service

Azure Functions

Azure Policy

Job description

Socket.dev seeks an Azure Cloud Engineer to serve as the cloud SME for a federal agency's Azure subscriptions, owning cloud architecture, governance, security, and cost optimization; designing secure landing zones, embedding Zero Trust principles, and keeping cloud spend aligned to budget. On-site in Washington, DC is required.

On a typical day you will collaborate with security operations, DevOps, and infrastructure teams to ensure architectural consistency and compliance with federal mandates