Principal Azure and M365 Cloud Architect - TS/SCI with Polygraph

GD Information Technology, Inc.; Chantilly (VA); On-site; USD 164,000 - 213,000; Full time

Benefits offered by this job

401K with company match

Competitive pay

Paid time off

Job summary

General Dynamics Information Technology, Inc. is seeking a Senior Cloud Architect to define Azure landing zones, governance, and workload placement across enclave boundaries.

You will document UMIS/SCMIS decisions and architect AVD/EUC, Intune, and Exchange hybrid environments while collaborating with Security and Service Operations. The role requires 10+ years in enterprise cloud engineering, deep Azure Government/M365 experience, and hands-on leadership briefing government stakeholders on

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cloud Engineering, or related field.
• Onsite location Chantilly, VA; Active TS/SCI with Polygraph clearance required.
• 10+ years of enterprise infrastructure/cloud engineering experience, including 5+ years designing Azure and M365 solutions.
• Hands-on experience with Azure Government and/or M365 government cloud boundaries (GCC/GCC High).
• Strong experience with Azure networking, Entra ID, Conditional Access, RBAC/PIM, policy, logging, and security controls.
• Experience with IaC, CI/CD, containers, internal artifact management, and secure promotion in restricted environments.
• Understanding RMF, ATO boundary impacts, STIGs, Zero Trust, data classification, control evidence, and operational readiness.
• Technical leadership, mentoring, vendor management, and briefing Government stakeholders.

Responsibilities

• Define Azure landing-zone, subscription/management-group, tenant, network, identity, policy, logging, key-management, and workload-placement patterns.
• Document UMIS/SCMIS architecture decisions as reusable reference patterns with assumptions and constraints.
• Architect AVD/EUC, Intune, Windows 11 endpoint management, Defender for Endpoint, Sentinel, Exchange hybrid, Teams, backup/recovery.
• Define Infrastructure as Code, CI/CD, artifact, image, configuration, and promotion standards with Cloud Platform/DevSecOps Engineers.
• Partner with Security to develop control implementation, logging, evidence, and cATO-ready continuous monitoring patterns.
• Partner with Service Operations to define capacity, observability, SLOs, incident response, change windows, patching, and operational acceptance.
• Evaluate Microsoft, WWT, Dell, and other partners for evidence-based product/service recommendations; avoid outsourcing architecture ownership.
• Lead cloud architecture reviews, mentor engineers, and brief Government leadership on migration risk, cost, readiness, and trade-offs.

Skills

Cloud Architectures

Cloud Engineering

Enterprise Infrastructures

Education

Bachelor's degree in Computer Science, IT, Cloud Engineering, or related field

Job description

Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret SCI + Polygraph Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: IT Infrastructure and Operations Job Qualifications: Skills: Cloud Architectures, Cloud Engineering, Enterprise Infrastructures Certifications: None Experience: 10 + years of related experience US Citizenship Required: Yes

Key Responsibilities

• Define and govern Azure landing-zone, subscription/management-group, tenant, network, identity, policy, logging, key-management, and workload-placement patterns appropriate to each enclave and classification boundary.
• Document UMIS architecture and SCMIS hybrid Exchange/M365 decisions as reusable reference patterns with assumptions, constraints, and known exceptions.
• Architect AVD/EUC, Intune, Windows 11 endpoint management, Defender for Endpoint, Sentinel, Exchange hybrid, Teams/collaboration, backup/recovery, and service continuity.
• Define Infrastructure as Code, CI/CD, artifact, image, configuration, and promotion standards with the Cloud Platform/DevSecOps Engineers.
• Partner with Security to develop control implementation, inheritance, logging, evidence, and cATO-ready continuous monitoring patterns.
• Partner with Service Operations to define capacity, observability, SLOs, incident response, change windows, patching, and operational acceptance.
• Evaluate Microsoft, WWT, Dell, and other partner capabilities; make evidence-based product and service recommendations without outsourcing architecture ownership.
• Lead cloud architecture reviews, mentor engineers, and brief Government and program leadership on migration risk, cost, readiness, and trade-offs.

Required Qualifications

• Education: Bachelor's degree in Computer Science, Information Technology, Cloud Engineering, Software Engineering, or a related field, or approved equivalent experience.
• Location: Onsite Clearance: Active TS/SCI with Polygraph 10+ years of enterprise infrastructure/cloud engineering experience, including 5+ years designing and delivering Microsoft Azure and M365 solutions.
• Hands-on architecture experience with Azure Government and/or M365 government cloud boundaries, including GCC or GCC High considerations.
• Deep experience with Azure networking, tenant/subscription governance, Entra ID, Conditional Access, RBAC/PIM, policy, logging, and security controls.
• Strong experience with at least three of the following: AVD, Intune, Windows endpoint management, Exchange hybrid, Teams, Defender for Endpoint, Sentinel, Azure Monitor, backup/recovery, or migration tooling.
• Experience developing phased migration roadmaps for heterogeneous applications, identities, endpoints, and data across multiple enclaves or business units.
• Working knowledge of IaC, CI/CD, containers, internal artifact management, and secure promotion in restricted environments.
• Strong understanding of RMF, ATO boundary impacts, STIGs, Zero Trust, data classification, control evidence, and operational readiness.
• Demonstrated technical leadership, mentoring, vendor management, and ability to brief technical and executive Government stakeholders.

Preferred Qualifications

• Microsoft Certified: Azure Solutions Architect Expert and Microsoft 365 Certified: Administrator Expert. Identity and Access Administrator Associate, Cybersecurity Architect Expert, Azure Administrator Associate and Azure Virtual Desktop Specialty are complementary. Full certification prerequisites apply.
• Experience designing contractor-operated managed services, service catalogs, FinOps practices, license optimization, and SLA-based platform operations.
• Experience integrating Azure/M365 with Cisco ISE/TrustSec, ServiceNow ITOM/CMDB, Dynatrace, Aternity, Sentinel/SIEM, and automated patch/evidence workflows.
• Prior DoW/IC cloud migration experience, including disconnected or high-side engineering constraints.
• Experience with Azure AI Services or locally hosted AI workloads where commercial service availability is constrained.

About GDIT

GDIT IS YOUR PLACE At GDIT, the mission is our purpose, and our people are at the center of everything we do.

Growth: AI-powered career tool that identifies career steps and learning opportunities.

Support: An internal mobility team focused on helping you achieve your career goals.

Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off.

Community: Award-winning culture of innovation and a military-friendly workplace.

OWN YOUR OPPORTUNITY Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.

The likely salary range for this position is $164,382 - $212,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours: 40

Travel Required: None

Telecommuting Options: Onsite

Work Location: USA VA Chantilly

Total Rewards at GDIT

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Opportunity Owned From working with technologies like AI, cyber and cloud to careers in intelligence and health, we offer endless opportunities to apply your expertise to create a safer, smarter world.