Principal Azure and M365 Cloud Architect - TS/SCI with Polygraph

General Dynamics Information Technology; Chantilly (VA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Growth: AI-powered career tool

Internal mobility support

Comprehensive benefits and wellness

401K with company match

Paid time off

Military-friendly workplace

Job summary

General Dynamics Information Technology, Inc. is seeking a senior cloud architect to define and govern Azure landing zones, governance, and workload placement for sensitive enclaves. You will document decisions, lead architecture reviews, and mentor engineers while briefing Government leadership on risk, cost, and readiness.

The role requires a TS/SCI with Polygraph and 10+ years of infra/cloud design, incl. Azure Gov/M365 Gov, with strong RMF and Zero Trust expertise.

Qualifications

• Bachelor's degree or approved equivalent experience.
• Active TS/SCI with Polygraph.
• 10+ years of enterprise infrastructure/cloud engineering experience, incl. 5+ years designing and delivering Microsoft Azure and M365 solutions.
• Hands-on architecture experience with Azure Government and/or M365 government cloud boundaries (GCC/GCC High).
• Deep experience with Azure networking, governance, Entra ID, CA, RBAC/PIM, policy, logging, and security controls.
• Strong experience with at least three: AVD, Intune, Windows endpoint management, Exchange hybrid, Teams, Defender for Endpoint, Sentinel, Monitor, backup/recovery or migration tooling.
• Experience developing phased migration roadmaps across enclaves/business units.
• IaC/CI/CD, containers, internal artifact management, secure promotion in restricted environments.
• Understanding RMF, ATO boundary impacts, STIGs, Zero Trust, data classification, and operational readiness.
• Demonstrated technical leadership, mentoring, vendor management, and ability to brief Government stakeholders.

Responsibilities

• Define and govern Azure landing-zone, subscription/management-group, tenant, network, identity, policy, logging, key-management, and workload-placement patterns for enclaves.
• Document UMIS architecture and SCMIS hybrid decisions as reusable reference patterns with assumptions and constraints.
• Architect AVD/EUC, Intune, Windows 11 endpoint management, Defender for Endpoint, Sentinel, Exchange hybrid, Teams/collaboration, backup/recovery, and service continuity.
• Define IaC, CI/CD, artifact, image, configuration, and promotion standards with Cloud Platform/DevSecOps Engineers.
• Partner with Security to develop control implementation, inheritance, logging, evidence, and cATO-ready continuous monitoring patterns.
• Partner with Service Operations to define capacity, observability, SLOs, incident response, change windows, patching, and operational acceptance.
• Evaluate partner capabilities; make evidence-based product/service recommendations without outsourcing architecture ownership.
• Lead cloud architecture reviews, mentor engineers, and brief Government leadership on migration risk, cost, readiness, and trade-offs.

Skills

Azure Gov

M365 Gov

RMF/ATO

Leadership

Mentoring

Vendor management

Executive briefing

Education

Bachelor's degree in Computer Science/IT/Cloud Eng or related field

Job description

Key Responsibilities:

• Define and govern Azure landing-zone, subscription/management-group, tenant, network, identity, policy, logging, key-management, and workload-placement patterns appropriate to each enclave and classification boundary.
• Document UMIS architecture and SCMIS hybrid Exchange/M365 decisions as reusable reference patterns with assumptions, constraints, and known exceptions.
• Architect AVD/EUC, Intune, Windows 11 endpoint management, Defender for Endpoint, Sentinel, Exchange hybrid, Teams/collaboration, backup/recovery, and service continuity.
• Define Infrastructure as Code, CI/CD, artifact, image, configuration, and promotion standards with the Cloud Platform/DevSecOps Engineers.
• Partner with Security to develop control implementation, inheritance, logging, evidence, and cATO-ready continuous monitoring patterns.
• Partner with Service Operations to define capacity, observability, SLOs, incident response, change windows, patching, and operational acceptance.
• Evaluate Microsoft, WWT, Dell, and other partner capabilities; make evidence-based product and service recommendations without outsourcing architecture ownership.
• Lead cloud architecture reviews, mentor engineers, and brief Government and program leadership on migration risk, cost, readiness, and trade-offs.

Required qualifications

• Education: Bachelor's degree in Computer Science, Information Technology, Cloud Engineering, Software Engineering, or a related field, or approved equivalent experience.
• Location: Onsite
• Clearance: Active TS/SCI with Polygraph
• 10+ years of enterprise infrastructure/cloud engineering experience, including 5+ years designing and delivering Microsoft Azure and M365 solutions.
• Hands-on architecture experience with Azure Government and/or M365 government cloud boundaries, including GCC or GCC High considerations.
• Deep experience with Azure networking, tenant/subscription governance, Entra ID, Conditional Access, RBAC/PIM, policy, logging, and security controls.
• Strong experience with at least three of the following: AVD, Intune, Windows endpoint management, Exchange hybrid, Teams, Defender for Endpoint, Sentinel, Azure Monitor, backup/recovery, or migration tooling.
• Experience developing phased migration roadmaps for heterogeneous applications, identities, endpoints, and data across multiple enclaves or business units.
• Working knowledge of IaC, CI/CD, containers, internal artifact management, and secure promotion in restricted environments.
• Strong understanding of RMF, ATO boundary impacts, STIGs, Zero Trust, data classification, control evidence, and operational readiness.
• Demonstrated technical leadership, mentoring, vendor management, and ability to brief technical and executive Government stakeholders.

Preferred Qualifications

• Microsoft Certified: Azure Solutions Architect Expert and Microsoft 365 Certified: Administrator Expert. Identity and Access Administrator Associate, Cybersecurity Architect Expert, Azure Administrator Associate and Azure Virtual Desktop Specialty are complementary. Full certification prerequisites apply.

• Experience designing contractor-operated managed services, service catalogs, FinOps practices, license optimization, and SLA-based platform operations.

• Experience integrating Azure/M365 with Cisco ISE/TrustSec, ServiceNow ITOM/CMDB, Dynatrace, Aternity, Sentinel/SIEM, and automated patch/evidence workflows.

• Prior DoW/IC cloud migration experience, including disconnected or high-side engineering constraints.

• Experience with Azure AI Services or locally hosted AI workloads where commercial service availability is constrained.

GDIT IS YOUR PLACE

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.